Skip to content

Instantly share code, notes, and snippets.

View yeukhon's full-sized avatar

Yeuk Hon Wong yeukhon

  • TikTok USDS / ByteDance
  • New York, NY
  • 10:21 (UTC -04:00)
View GitHub Profile
(env)vagrant@precise64:~$ /home/vagrant/wpscan/wpscan.rb --url http://blogs.skype.com --enumerate --wordlist /home/vagrant/wpscan/password-2011.lst --threads 20
_______________________________________________________________
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_|
WordPress Security Scanner by the WPScan Team
{'osShell': False, 'getUsers': False, 'getPasswordHashes': False, 'uChar': None, 'pivotColumn': None, 'prefix': None, 'code': None, 'googlePage': 1, 'query': None, 'randomAgent': True, 'parameters': {}, 'predictOutput': False, 'wizard': False, 'stopFail': False, 'skip': None, 'dropSetCookie': False, 'dbmsCred': None, 'risk': 1, 'db': None, 'notString': None, 'getRoles': False, 'getPrivileges': False, 'testParameter': None, 'tbl': None, 'trafficFile': None, 'osSmb': False, 'level': 1, 'dumpTable': False, 'hashDBFile': None, 'osBof': False, 'firstChar': None, 'direct': None, 'saFreq': 0, 'tmpPath': None, 'titles': False, 'getSchema': False, 'timeSec': 5, 'regKey': None, 'headers': None, 'authCred': None, 'boundaries': [], 'loadCookies': None, 'dnsName': None, 'hexConvert': False, 'proxyFile': None, 'answers': None, 'threads': 1, 'dbmsHandler': None, 'regType': None, 'search': False, 'uFrom': None, 'requestFile': None, 'noCast': False, 'eta': False, 'dumpPath': None, 'col': None, 'rFile': None, 'cj': None, 'verb
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
<script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
<script class="testbody" type="text/javascript">
/*
const Cc = Components.classes;
const Ci = Components.interfaces;
const Cu = Components.utils;
const Cr = Components.results;
Cu.import("resource://gre/modules/XPCOMUtils.jsm");
@yeukhon
yeukhon / server.py
Created December 5, 2013 20:00
sql-injection
from bottle import route, run, request
import MySQLdb
# connect
db = MySQLdb.connect(host="localhost", user="root", passwd="password", db="testing")
cursor = db.cursor()
@route('/users')
def hello():
@yeukhon
yeukhon / notes.md
Created December 2, 2013 13:53 — forked from dutc/notes.md

schedule

6:30 - 6:40: settling in
6:40 - 7:00: Julian, quick introduction to PyPy
7:00 - 7:10: Andy, quick introduction to CLI
7:10 - 7:15: James, NYC Python announcements
7:15 - 8:30: James, CPython workshop
8:30 - 9:00: mingling + sponsor announcements

themes

@yeukhon
yeukhon / server.py
Last active September 10, 2023 19:29
server.py
# adopt this from https://wiki.python.org/moin/BaseHttpServer
# life would be easier if Bottle was included in stdlib.
import BaseHTTPServer
HOST_NAME = 'localhost'
PORT_NUMBER = 9999
class MyHandler(BaseHTTPServer.BaseHTTPRequestHandler):
def do_GET(s):
<html>
<head>
<title>Hack Mill</title>
<style type="text/css">
body { background-color: #000 }
#center {
width: 100%;
text-align: center;
margin: 1em auto;
}
<!DOCTYPE html>
<html lang="en">
<head>
<script>
! function () {
function e(e, t, i) {
var n, s = "." + window.location.hostname.replace(/.*\.(.+\..+)/, "$1"),
o = new Date;
o.setTime(o.getTime() + 1e3 * 60 * 60 * 24 * i), n = "; expires=" + o.toGMTString(), document.cookie = e + "=" + t + n + "; path=/; domain=" + s
### Configuring Moodle
# only if development=True is passed to extra-vars
- hosts: webservers
gather_facts: no
when: development is defined
vars_files:
- scripts/password.yaml
tags:
- moodle
tasks: