Skip to content

Instantly share code, notes, and snippets.

View DevHjz's full-sized avatar
:octocat:
Developer

Dev Hjz DevHjz

:octocat:
Developer
View GitHub Profile
@DevHjz
DevHjz / CVE-2025-61524.txt
Last active October 8, 2025 15:47
CVE-2025-61524
[Suggested description]
An issue in the permission verification module and organization/application editing interface in Casdoor before 2.62.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after login.
[Vulnerability Type]
Incorrect Access Control
[Vendor of Product]
Casdoor
[Affected Product Code Base]
@DevHjz
DevHjz / okta-logging.json
Created March 27, 2022 12:09 — forked from tuckner/okta-logging.json
A Tines Story to Grab The Last 90 Days of Okta Logs
{
"schema_version": 4,
"name": "Okta Logging",
"description": "Grab logs from Okta for the past 90 days and upload to AWS S3\n\ntags: AWS, Okta, Logging\ncolor: orange\nicons: ☁️🕵️‍♂️📘\nvisibility: public",
"guid": "2569d12e6207efe07398ab18b8fe4845",
"exported_at": "2022-03-22T15:30:01Z",
"agents": [
{
"type": "Agents::HTTPRequestAgent",
"name": "Get Okta Logs",
@DevHjz
DevHjz / hotp.php
Created October 13, 2020 05:24 — forked from oott123/hotp.php
<?php
//配置部分
$password = '这里是验证的密码';
$authkeypair = array(
'帐号标题' => 'Secret key',
'帐号标题2' => 'key2',
);
?>
<!DOCTYPE html PUBLIC "-//WAPFORUM//DTD XHTML Mobile 1.0//EN" "http://www.wapforum.org/DTD/xhtml-mobile10.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">