Skip to content

Instantly share code, notes, and snippets.

View random-robbie's full-sized avatar
💭
Hacking!

Robbie random-robbie

💭
Hacking!
1.8k followers · 153 following
View GitHub Profile
@random-robbie
random-robbie / wordlist.txt
Created May 19, 2020 12:56
bruteforce wordlist for bug bountys
This file has been truncated, but you can view the full file.
20-ev-allgemein
20-years
200
2000
20000719
2001
2001cc
2002
2003
2004
@random-robbie
random-robbie / removejobs.sh
Created May 18, 2020 13:12
revoke binaryedge jobs via api using a text file of job id's
#!/bin/bash
for job in `cat $1`; do
curl -XPOST https://api.binaryedge.io/v1/tasks/$job/revoke -H 'X-Token:YOURBINARYEDGETOKEN'
done
@random-robbie
random-robbie / ssrf-redirector.py
Created May 12, 2020 15:09
#!/usr/bin/env python3
import sys
from http.server import HTTPServer, BaseHTTPRequestHandler
if len(sys.argv)-1 != 2:
print("""
Usage: {} <port_number> <url>
""".format(sys.argv[0]))
sys.exit()
@random-robbie
random-robbie / aem-groovy.md
Last active June 3, 2020 13:49 
POST /bin/groovyconsole/post.servlet?.Cic.ico HTTP/1.1
Host: host
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:63.0) Gecko/20100101 Firefox/63.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Referer: https://test.com
Upgrade-Insecure-Requests: 1
@random-robbie
random-robbie / test
Last active May 28, 2020 10:40
gau $1 | sort -u | grep -v oembed | grep -v .css | grep -v .jpg | grep -v .svg | grep -v .png | grep -v .gif | grep -v .ico | grep -v .mp4 | grep -v .eot | grep -v .webm | grep = | sed s/http\:/https\:/g | sed s/\:80//g |sort -u | tee leads.txt
@random-robbie
random-robbie / grab_plugins.py
Created April 1, 2020 10:49
Grab all Plugins for drupal via drupal gitlab.
import requests
import json
from requests.packages.urllib3.exceptions import InsecureRequestWarning
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
session = requests.Session()
http_proxy = "http://192.168.1.130:8085"
proxyDict = {
"http" : http_proxy,
"https" : http_proxy,
@random-robbie
random-robbie / fun.txt
Created March 30, 2020 15:09
export GOROOT=/snap/bin/go
export GOPATH=$HOME/go
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin
@random-robbie
random-robbie / passthru.txt
Created March 25, 2020 14:23
wordpress plugins that use passthru php function.
4k-icon-fonts-for-visual-composer
6scan-protection
a-wechat
abdul-wp-plugin
accelerated-mobile-pages
access-watch
accessibility-toolbar
ace-edit
ace-editor-for-wp
aceide
@random-robbie
random-robbie / shell_exec.txt
Created March 25, 2020 14:20
wordpress plugins with shell_exec in them.
10web-manager
4k-icon-fonts-for-visual-composer
accelerated-mobile-pages
accept-payments-wp
accu-auto-backup
ace-edit
ace-editor-for-wp
aceide
acelerator
acf-code-field
@random-robbie
random-robbie / php-input.txt
Created March 25, 2020 14:13
wordpress plugins with php://input in their codebase.
1-click-migration
1-click-retweetsharelike
1-flash-gallery
10centmail-subscription-management-and-analytics
123contactform-for-wordpress
123formular-fur-wp
123formulier-wordpress-contactformulier
17track
18-age-gateway
2d-barcodes