nongiach

Android ADB MindMap for BugBounty

Bellow to exfiltrate cookie over DNS when doing XSS

atob("Your_Receveived_DNS".replace(/(.)./g, (_,x)=>x.toUpperCase()))

	# This script allows to simulate Cerebrium serverless in local for test purpose
	# Author: @chaignc
	# run me with
	# uvicorn local:app --port 9000

	from fastapi import FastAPI
	from main import predict, PredictInput
	import logging
	import time

	<h1 id="egui-rust-widget-tipstricks">egui Rust widget tips/tricks</h1>
	<p>create scroll widget within a window in Rust</p>
	<ul>
	<li><a href="https://docs.rs/egui/latest/egui/widgets/struct.SelectableLabel.html" class="uri">https://docs.rs/egui/latest/egui/widgets/struct.SelectableLabel.html</a></li>
	</ul>
	<h2 id="where-to-find-information">Where to find information?</h2>
	<ul>
	<li>Use the docs.rs search bar <a href="https://docs.rs/egui/latest/egui/" class="uri">https://docs.rs/egui/latest/egui/</a></li>
	</ul>
	<h2 id="widgets">Widgets</h2>

	<!DOCTYPE html> <html class="wf-katexcaligraphic-n4-active wf-katexcaligraphic-n7-active wf-katexams-n4-active wf-katexfraktur-n4-active wf-katexsansserif-i4-active wf-katexsansserif-n7-active wf-katexsansserif-n4-active wf-katexmain-i7-active wf-katexmath-i4-active wf-katexfraktur-n7-active wf-katexsize2-n4-active wf-katexmain-n7-active wf-katexmath-i7-active wf-katextypewriter-n4-active wf-katexsize4-n4-active wf-katexsize1-n4-active wf-katexscript-n4-active wf-katexmain-n4-active wf-katexmain-i4-active wf-katexsize3-n4-active wf-active"><!--
	Page saved with SingleFile
	url: http://localhost:44695/
	saved date: Mon Jan 24 2022 21:01:43 GMT+0100 (Central European Standard Time)
	--><meta charset=utf-8>
	<meta name=viewport content="width=device-width, initial-scale=1.0">
	<meta http-equiv=X-UA-Compatible content="ie=edge">
	<title>Markmap</title>
	<style>{margin:0;padding:0}#mindmap{display:block;width:100vw;height:100vh}code[class="language-"],pre[class*="language-"]{color:black;background:none;text-shadow

	# Author: @chaignc
	# Two commands in this script:
	# record2discord => send all typed bash command to your discord channel, see bellow for the blacklist
	# last2discord => send the last typed command to your discord channel.

	DISCORD_WEBHOOK_URL="Your_Discord_WebHook_URL" # UPDATE this with your web hook (take 2 minutes and read about this online)

	_send2discord() {
	# Blacklist some commands
	[[ ! $BASH_COMMAND =~ .autojump. ]] && \

	DISCORD_WEBHOOK_URL="Your_Discord_WebHook_URL"

	_send2discord() {
	# Blacklist some commands
	[[ ! $BASH_COMMAND =~ .autojump. ]] && \
	[[ ! $BASH_COMMAND =~ ^ls.* ]] && \
	[[ ! $BASH_COMMAND =~ ^.?vim.* ]] && \
	[[ ! $BASH_COMMAND =~ ^cat.* ]] && \
	curl -H "Content-Type: application/json" -X POST \
	-d "{\"username\": \"chaignc\", \"content\": \"\`\`\`$BASH_COMMAND\`\`\`\"}" \

	FROM python:3.7

	RUN apt update -y && apt install mono-devel -y
	RUN git clone https://github.com/mhaskar/Octopus && \
	cd Octopus && \
	pip3 install -r requirements.txt \
	&& rm -rf /var/lib/apt/lists/*

	FROM ubuntu:xenial
	# http://phusion.github.io/baseimage-docker/

	RUN apt update && apt install -y socat
	# This ubuntu is required because we need a very specific version of glibc2.23
	# FROM phusion/baseimage:0.11
	RUN useradd -ms /bin/bash ctf
	USER ctf

	COPY ./chall /chall

	b5603d19a31cd29e1b68ba599f21c51e
	love two