ѕυвƒιѕѕιση subfission

👨‍💻

InfoSec, privacy, and programming

🅸🅽🅵🅾🆂🅴🅲, 𝙋𝙧𝙞𝙫𝙖𝙘𝙮, and 𝚙𝚛𝚘𝚐𝚛𝚊𝚖𝚖𝚒𝚗𝚐

subfission / functions.php

Last active April 26, 2018 17:46

Disable XMLRPC API & Pingback for Wordpress

	/**
	Disable XMLRPC API in Wordpress

	This line of code does effectively the same thing as
	this plugin: https://wordpress.org/plugins/disable-xml-rpc/

	NOTE: If you are using JetPack plugin, this will not work.

	Add these lines to the functions.php file:
	**/

subfission / rhel_dhcp_exploit.sh

Last active May 24, 2018 00:57

Bash script for CVE-2018-1111

	#!/bin/bash

	# CVE-2018-1111
	# This script will setup your host as a DHCP provider and attempt to exploit any
	# vulnerable connecting RHEL hosts.

	# REQUIREMENTS:
	# dnsmasq

subfission / wp-multicall-example.xml

Last active June 18, 2018 17:53 — forked from samhotchkiss/wp-multicall-example.xml

Example of Multicall in WordPress

	<?xml version="1.0"?>
	<methodCall>
	<methodName>system.multicall</methodName>
	<params>
	<param>
	<value>
	<array>
	<data>
	<value>
	<struct><member><name>methodName</name><value><string>wp.getAuthors</string></value></member><member><name>params</name><value><array><data><value><string>1</string></value><value><string>zach</string></value><value><string>a</string></value></data></array></value></member></struct>

subfission / hostban.sh

Last active July 1, 2018 21:54

Linux/MacOS bash completion for host domain banning

	# Ban domain with hosts entry. usage: hostban target_domain
	hostban() {
	( "$#" -ne 1 ) && (echo "ERROR: Missing host to ban!"; echo "usage: hostban target_domain"; exit 1)
	[ "$(whoami)" != "root" ] && (return $(sudo ban_host "$1"))
	echo "0.0.0.0 $1" >> /etc/hosts
	}

subfission / csp_seccookie_check.sh

Last active August 8, 2018 07:50

Content Security Policy & Cookie Security Checker

	#!/bin/bash
	#
	# This script will check for the existence of:
	# (1) Content-Security-Policy
	# (2) Insecure cookies within the response header
	#
	# This can be executed directly into shell by using curl pipe bash e.g.:
	# curl -s rawscripturl.url \| bash -s url.to.validate.com
	#
	[ -z "$1" ] && { echo "No argument supplied" && exit 1; }

subfission / install.sh

Created August 13, 2018 03:51

Install Proxmark3 for MacOS

	#!/bin/bash
	#
	# Proxmark3 automated installer - for those of us
	# that love to tinker.
	#
	# Requires: Homebrew

	# Update homebrew
	brew update

subfission / fm_radio_rx.grc

Created August 14, 2018 16:38

Basic FM radio - HackRF

subfission / ssb-interop.js

Created August 27, 2018 22:00

Slack full customization file

	// This file belongs in /Applications/Slack.app/Resources/app.asar.unpacked/src/static/ssb-interop.js

	/**
	* The preload script needs to stay in regular ole JavaScript, because it is
	* the point of entry for electron-compile.
	*/

	if (window.location.href !== 'about:blank') {
	const preloadStartTime = process.hrtime();
	const { ipcRenderer, remote } = require('electron');

subfission / ec2_to_table.sh

Last active October 2, 2018 21:59

AWSCLI | Python3

	#!/bin/bash
	# AWSCLI \| Python3 (aws cli command pipe to python3)
	#
	# This magic one-liner will build a beautiful table view of your AWS ec2 assets.
	# Requires Python3 & Tabulate

	BOLD="$(tput bold)"
	ULINE="$(tput sgr 0 1)"
	END="$(tput sgr0)"

subfission / Paths

Created September 13, 2018 22:59 — forked from TuncerMehmet/PathList

Dir Pathlist