Ryan Dewhurst ethicalhack3r

💭

"><img src=x onerror=alert('Github @ethicalhack3r')><"

ethicalhack3r / gist:5982734

Created July 12, 2013 08:12

The array size decreases on delete, however, the 'internal loop counter' stays the same.

	a=[1,2,3,4]; a.each_with_index{\|e,i\| p "Iteration #{i}: delete #{e} - size of array #{a.size}"; a.delete(e) }

	"Iteration 0: delete 1 - size of array 4"
	"Iteration 1: delete 3 - size of array 3"
	=> [2, 4]

ethicalhack3r / gist:6145925

Created August 3, 2013 09:59

Zone Transfer Alexa Top 1 Million using dnsrecon

	#!/bin/bash

	while read LINE ; do
	N=$((N+1))
	echo "$N - $LINE"
	python dnsrecon.py -d $LINE -t axfr -c axfr_results/$N-$LINE.csv
	done < alexa.txt

ethicalhack3r / gist:6296321

Created August 21, 2013 15:54

DOM XSS - Exploitable without user entering/pasting payload?

	<html>
	<head>

	<script src="http://code.jquery.com/jquery-1.10.1.min.js"></script>

	<script>
	$(function(){
	$( "#button" ).click(function() {
	var query = $("form#DevSearch").find('input[type=text]').val();
	$("span#searchQuery").html(query);

ethicalhack3r / gist:6336676

Created August 25, 2013 22:26

	POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=9d09f693c63c1988a9f8a564e0da7743 HTTP/1.1
	Host: www.ethicalhack3r.co.uk
	User-Agent: BOT/0.1 (BOT for JCE)
	Content-Type: multipart/form-data; boundary=---------------------------41184676334
	Accept-Language: en-us,en;q=0.5
	Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
	Cookie: 6bc427c8a7981f4fe1f5ac65c1246b5f=9d09f693c63c1988a9f8a564e0da7743; jce_imgmanager_dir=%2F; __utma=216871948.2116932307.1317632284.1317632284.1317632284.1; __utmb=216871948.1.10.1317632284; __utmc=216871948; __utmz=216871948.1317632284.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)
	Connection: Close
	Proxy-Connection: close
	Content-Length: 1337

ethicalhack3r / gist:6336705

Created August 25, 2013 22:32

ethicalhack3r / gist:6779373

Created October 1, 2013 14:28

	<a href=”http://www.example.com”>Some Example</a>
	<a href=”http://www.example.com”>http://www.example.com</a>

ethicalhack3r / gist:9784512

Created March 26, 2014 14:22

	# PATCH/PUT /submits/1
	# PATCH/PUT /submits/1.json
	def update
	respond_to do \|format\|
	if @submit.status == 'PENDING'
	if @submit.update(submit_params)
	format.html { redirect_to @submit, notice: 'Submission was successfully updated.' }
	format.json { head :no_content }
	end
	else

ethicalhack3r / gist:9914033

Created April 1, 2014 13:32

Threadfix errors

	ryans-mbp-2:ThreadFix_2.0FINAL ryan$ bash threadfix.sh
	Looking for a key in /Users/ryan/Downloads/ThreadFix_2.0FINAL/tomcat/keystore
	Generated a keystore.
	Usage: {start\|stop}
	ryans-mbp-2:ThreadFix_2.0FINAL ryan$ bash threadfix.sh start
	Looking for a key in /Users/ryan/Downloads/ThreadFix_2.0FINAL/tomcat/keystore
	Using pre-generated keystore.
	mkdir: ./tomcat/logs: File exists
	Using CATALINA_BASE: ./tomcat
	Using CATALINA_HOME: ./tomcat

ethicalhack3r / wp_dos.py

Created August 7, 2014 07:41

WP XML-RPC DoS Exploit

	#################################################################################
	# CVE-XXXXX Wordpress and Drupal XML Blowup Attack DoS#
	# Author: Nir Goldshlager - Salesforce.com Product Security Team#
	# This is a Proof of Concept Exploit, Please use responsibly.#
	#################################################################################
	#!/usr/bin/env python
	from __future__ import print_function
	import threading
	import time
	import urllib

ethicalhack3r / test.html

Created September 18, 2014 17:02

Entering version numbers in HTML form

	<!DOCTYPE html>
	<html>
	<body>

	<input type="text" name="version1" value="1.0">

	<select>
	<option value="<"><</option>
	<option value=">">></option>
	<option value="=">=</option>