thomashartm

#!/bin/bash
# Call as follows to generate 15 TDs for all instances with a break of 5 seconds: 
#    ./aem_threadumps.sh 15 5
# Call as follows to generate 15 TDs for all instances with a break of 5 seconds and write them in a distinct working directory
#    ./aem_threadumps.sh 15 5 /home/user/data

if [ $# -eq 0 ]; then
	echo >&2 "Creates threaddumps for running aem instances "
    echo >&2 "	  Usage: td  [  [  ] ]"
    echo >&2 "    Defaults: count = 10, delay = 1 (seconds)"

thomashartm

#!/bin/bash
#
# Usage instructions
# Make the script executable:
# 	chmod u+x heapdump.sh
# 
# Show all running aem instances and their pids
# ./heapdumps.sh
# Create a heampdump for a running aem instance
# ./heapdumps.sh <pid>

thomashartm

mvn -Dmaven.surefire.debug="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=6666 -Xnoagent -Djava.compiler=NONE" test -Dsurefire.runOrder=random -DreuseForks=false

thomashartm

#!/bin/bash

CN="localhost"

if [ $# -eq 0 ]; then
	echo >&2 "Creates a certificates folder and adds a certificate and a key"
    echo >&2 "	  Usage: setup-certificate.sh  [ [  ] ]"
    echo >&2 "    Defaults: ${CN}"
fi

thomashartm

#!/bin/bash

# script based on http://osxdaily.com/2013/12/27/fix-there-is-no-connected-camera-error-mac/
# chmod +x kill-camera.sh to make it executable

sudo killall VDCAssistant
sudo killall AppleCameraAssistant

thomashartm

/**
 * Targeted zap script to check for URLs that are prohibited when using the AEM dispatcher.
 * Usage: Select a a node in your site tree. Select the Invoke with Script option from your context menu and select this zapcript. 
 * @author [email protected]
 */
paths = [
    "/admin",
    "/system/console",
    "/dav/crx.default",
    "/crx",

thomashartm

# Find all custom image components by resource type below /content 
SELECT * FROM [nt:unstructured] as r WHERE ISDESCENDANTNODE(r,'/content') AND [sling:resourceType] = 'project/components/par/image'

SELECT * FROM [nt:unstructured] as r WHERE ISDESCENDANTNODE(r,'/content') AND [sling:resourceType] = 'project/components/par/image' AND [fileReference] IS NOT NULL

# Find all users below a certain folder 
SELECT * FROM [rep:User] as r WHERE ISDESCENDANTNODE(r,'/home/users/community/project')

SELECT * FROM [nt:unstructured] as r WHERE ISDESCENDANTNODE(r,'/home/users/community') AND [sling:resourceType] = 'cq/security/components/profile' AND [registrationDate] IS NOT NULL

thomashartm

// ==UserScript==
// @name          XSSMonkey
// @namespace     thartm
// @description   Identifies potential Cross Site Scripting (XSS) sinks in the currently displayed website and provides an easy option to probe them. Based on ph3wl's XSS script. 
// @include       *
// @require       http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
// ==/UserScript==

//
// Set your test string here

thomashartm

// ==UserScript==
// @name        Jinx 2.0
// @namespace   swende.se
// @grant       GM_registerMenuCommand
// @description This is a slightly adapted version of Martin Holst Swende's great GM script Jinx. Please see the original code http://swende.se/projects/jinx.html
// @version     1
// @include     *
// @require     http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
// ==/UserScript==
 

thomashartm

CUSTOM VECTORS

"><img src=x onerror=prompt(1);>

+123'];alert(1);[['

123',alert(1),'

123\",term:alert(1)//\"