This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!-- | |
Launch: $ php -S 127.0.0.1:1234 | |
Access via http://localhost:1234/test.php?p=test | |
--> | |
<?= header('Content-Type: text/xml'); ?> | |
aaa | |
bbb | |
<?= print_r($_GET['p']); ?> | |
ccc | |
ddd |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// | |
// Headless SSO Login CSRF PoC | |
// (c) Lauritz Holtmann, 2023 | |
// | |
const pt = require('puppeteer') | |
const express = require('express') | |
const app = express() | |
const port = 3000 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# Usage: ./download_apks.sh com.example.app | |
BUNDLE_FILES=$(adb shell pm path "$1") | |
for file in $BUNDLE_FILES; do | |
CLEAN=$(echo "$file"|sed 's/[^:]*://') | |
adb pull "$CLEAN" . | |
done |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!-- | |
// | |
// Vue 3 XSS example | |
// 1. Launch as follows: | |
// $ php -S 127.0.0.1:1234 | |
// 2. Access at http://localhost:1234/vue-csti.php?name=you and try to pop an alert! | |
// | |
// (c) Lauritz Holtmann | |
// | |
--> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
/* | |
* (c) Lauritz Holtmann, https://security.lauritz-holtmann.de | |
* | |
* Could be for instance launched as follows: | |
* $ php -S 127.0.0.1:1234 | |
* $ ngrok http 1234 | |
* | |
* Visit https://something.ngrok.io/oidc_dicovery.php | |
*/ |