| <?php | |
| // https://gist.github.com/magnetikonline/650e30e485c0f91f2f40 | |
| class DumpHTTPRequestToFile { | |
| public function execute($targetFile) { | |
| $data = sprintf( | |
| "%s %s %s\n\nHTTP headers:\n", | |
| $_SERVER['REQUEST_METHOD'], |
| { | |
| "cmd": ["E:\\wamp\\bin\\php\\php5.5.12\\php.exe", "$file"], | |
| "file_regex": "php$", | |
| "selector": "source.php" | |
| } |
| #!/bin/sh | |
| # This script must be executed in the repo where | |
| # the *.ts files are. | |
| # It will concatenate the segments into one temp | |
| # file which ffmpeg will reencode the audio track. | |
| # By default the ouptup filename is output.mp4 | |
| # but can be changed by providing the name as parameter. | |
| # | |
| # ffmpeg is required |
| #NoTrayIcon | |
| #include <File.au3> | |
| ; Developed by Juno_okyo (J2TEAM) | |
| ; https://junookyo.blogspot.com/ | |
| Global Const $PATH = @AppDataDir & '\' & @UserName | |
| main() |
| #NoTrayIcon | |
| #RequireAdmin | |
| #Region AutoIt3Wrapper directives section | |
| #AutoIt3Wrapper_Icon=juno_okyo.ico | |
| #AutoIt3Wrapper_Compression=4 | |
| #AutoIt3Wrapper_UseUpx=Y | |
| #AutoIt3Wrapper_Compile_both=Y ;=> Compile both X86 and X64 in one run | |
| #AutoIt3Wrapper_Res_Comment=Developed by Juno_okyo | |
| #AutoIt3Wrapper_Res_Description=Developed by Juno_okyo |
The following attack will display a "you've been signed out" page for GMail, and attempt to steal your account credentials.
DO NOT PUT ANY ACCOUNT CREDENTIALS INTO ANY TABS CREATED AFTER VISITING THESE LINKS :)
I received an email in my GMail inbox with a fake attachment image, styled to look like the real GMail attachment UI:
This linked to a page that ended up displaying a fake "you've been signed out" link, via the data:text/html... URL feature of Chrome:
| <?php | |
| /* | |
| * Warning! Read and use at your own risk! | |
| * | |
| * This tiny proxy script is completely transparent and it passes | |
| * all requests and headers without any checking of any kind. | |
| * The same happens with JSON data. They are simply forwarded. | |
| * | |
| * This is just an easy and convenient solution for the AJAX |
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <meta charset="utf-8"> | |
| <meta http-equiv="X-UA-Compatible" content="IE=edge"> | |
| <meta name="author" content="Jake Albaugh"> | |
| <title>JUNO_OKYO</title> | |
| </head> | |
| <body> | |
| <!-- Simple audio playback --> |
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <meta charset="utf-8"> | |
| <title></title> | |
| </head> | |
| <body> | |
| <script type="text/javascript"> | |
| window.onload = function() { |
| function _css(e) { | |
| return $(e).css('background-color'); | |
| } | |
| function _mainColor() { | |
| var holder = $('#box > span'), | |
| mainColor = '', | |
| a = _css(holder[0]), | |
| b = _css(holder[1]), | |
| c = _css(holder[2]); |
