Skip to content

Instantly share code, notes, and snippets.

View random-robbie's full-sized avatar
💭
Hacking!

Robbie random-robbie

💭
Hacking!
View GitHub Profile
ID: 4a4f0909-76f6-4d27-87b1-f6cd5f5cbbb7
Title: WP Users Masquerade <= 2.0.0 - Authentication Bypass
Description: The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajax_masq_login' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.
Type: plugin
CVSS Score: 8.8
CVE: CVE-2024-9522
Slug: wp-users-masquerade
Download Link: [Download wp-users-masquerade Version 2.0.0](https://downloads.wordpress.org/plugin/wp-users-masquerade.zip)
#!/bin/bash
# Update Homebrew
brew update
# Install Python 3.11 if not already installed
brew install [email protected]
# Create a virtual environment
python3.11 -m venv openweb-ui-env

Missing Person Search Playbook (UK)

Introduction

When a person goes missing in the UK, it's crucial to act swiftly and methodically to increase the chances of finding them safe and sound. This playbook outlines a series of detailed steps and actions to assist in the search for a missing person.

1. Immediate Actions

  • Notify Authorities: Dial 999 to contact the police immediately and report the missing person. Provide as much information as possible, including the person's name, age, physical description, last known location, and any relevant details about their mental or physical health.
  • Provide Details: Cooperate fully with law enforcement, providing any additional information they request and following their instructions. The police will issue a Missing Persons Report and begin their investigation.
  • Search Immediate Surroundings: If it's safe to do so, conduct a thorough search of the area where the person was last seen or known to be. Look in nearby parks, streets, and buildings.
/var/lib/jenkins/secrets/initialAdminPassword
/var/lib/jenkins/config.xml
/var/lib/jenkins/credentials.xml
/var/lib/jenkins/certificate.pfx
/usr/share/jenkins/ref/init.groovy.d/custom.groovy
/usr/share/jenkins/ref/plugins.txt
/var/lib/jenkins/.gradle
/var/lib/jenkins/gce_keys/google_compute_engine.pub
/var/lib/jenkins/gce_keys/google_compute_engine
/var/lib/jenkins/.ssh/google_compute_engine
#!/bin/bash
# Disable swap
sudo swapoff -a
sudo sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
# Update system
sudo apt update && sudo apt upgrade -y
# Install dependencies
import os
import argparse
import requests
import base64
import re
from requests.packages.urllib3.exceptions import InsecureRequestWarning
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
http_proxy = ""
os.environ['HTTP_PROXY'] = http_proxy

Why is this not working

mkdir u22.10-autoinstall-ISO
cd u22.10-autoinstall-ISO
mkdir source-files
wget https://old-releases.ubuntu.com/releases/kinetic/ubuntu-22.10-live-server-amd64.iso
mkdir source-files
7z -y x ubuntu-22.10-live-server-amd64.iso -osource-files
cd source-files
@random-robbie
random-robbie / sort-ip.py
Created November 15, 2023 08:41
Take a file called ips.txt and sort them by their PTR records
import socket
def get_hosting_platform(ip):
try:
reverse_dns = socket.gethostbyaddr(ip)[0]
if "amazon" in reverse_dns:
return "amazon"
elif "google" in reverse_dns:
return "google"
elif "azure" in reverse_dns:
@random-robbie
random-robbie / sta.go
Created July 10, 2023 08:18
search for django static files from a list of urls and ensure it's json response.
package main
import (
"bufio"
"crypto/tls"
"encoding/json"
"fmt"
"io/ioutil"
"net/http"
"os"
@random-robbie
random-robbie / convert.sh
Created May 25, 2023 16:12
Convert all MKV files in the current directory and make them mp4 compatible with Ipad
#!/bin/bash
# Iterate through all .mkv files in the current directory
for file in *.mkv; do
if [[ -f "$file" ]]; then
# Remove spaces and emoji characters from the file name
new_name=$(echo "$file" | sed -e 's/ /_/g' -e 's/[^[:alnum:]._\-]//g')
if [[ "$new_name" != "$file" ]]; then
mv "$file" "$new_name"
echo "Renamed file: $file -> $new_name"