Skip to content

Instantly share code, notes, and snippets.

View DavidHernandez's full-sized avatar
📎

David Hernández DavidHernandez

📎
71 followers · 34 following
View GitHub Profile
@DavidHernandez
DavidHernandez / remote.md
Last active September 16, 2016 11:10
Looking for a remote job?
@DavidHernandez
DavidHernandez / d7-autologin.php
Created October 16, 2014 17:19
This is another PoC for the SA-CORE-2014-005 vulnerability. Instead of updating the users table, activates an anonymous session to change your session into admin.
<?php
/**
* D7 autologin.
* Exploits SA-CORE-2014-005 to change your anonymous session into an uid 1 session.
* In order to work, first you need to have an anonymous session in the sessions table.
* One way to achieve this is to go to the update.php page.
*
* Usage: php d7-autologin.php http://example.com 127.0.0.1
*
@DavidHernandez
DavidHernandez / urls.md
Last active March 22, 2022 17:36 — forked from pr3ssh/urls.md
URLs para el ejercicio de Extraccion de datos