MurthyCode Murthysagi

## gist:08b75e4888bcfc598cdce5c9408d7c09

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                Murthysagi
                / gist:08b75e4888bcfc598cdce5c9408d7c09
            
            
              Created
              December 14, 2017 12:14
                — forked from jesusprubio/gist:8f092af4ca252e252eab
            
              
                Proposal: A Node.js penetration test framework
              
          
    Proposal: Node.js penetration test framework

Hi guys! Since I started to write Bluebox-ng I've been tracking the different security projects I found written in Node.js. Now we've published the first stable version we think it's the right moment to speak among us (and, of course, everyone interested in it :).
Why?


I think we're rewriting the same stuff in our respective projects again and again. For example, almost any tool supports IPv6 because the functions we need are still not present in the Node core and the libraries I found (IMHO) were not enough.
There're different projects implementing exactly the same thing, ie: port scanners.
We're working in a too new environment, so we need to make it together.


## payload.html
<body onload="get()">

<form id="form-payload" action="?action=profile" method="POST" enctype="multipart/form-data">
  <input type="hidden" name="username" value="your_username"/>
  <input type="hidden" name="status" value="on"/>
  <input type="hidden" id="forged-token" name="token" value=""/>
  <input type="submit" value="go"/>
</form>

<script>

## SPF-records.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                Murthysagi
                / SPF-records.md
            
            
              Created
              December 5, 2016 11:49
                — forked from githubutilities/SPF-records.md
            
              
                SPF Records
              
          
    SPF Records

Sender Policy Framework (SPF) is an email validation system designed to prevent spam by detecting email spoofing.
# get spf record domain from google
dig TXT +short google.com

# get spf record from google
dig @8.8.8.8 TXT +short _spf.google.com

  
## apk-embed-payload.rb
#!/usr/bin/env ruby
# apk_backdoor.rb
# This script is a POC for injecting metasploit payloads on
# arbitrary APKs.
# Authored by timwr, Jack64
#


require 'nokogiri'
require 'fileutils'
	<body onload="get()">

	<form id="form-payload" action="?action=profile" method="POST" enctype="multipart/form-data">
	<input type="hidden" name="username" value="your_username"/>
	<input type="hidden" name="status" value="on"/>
	<input type="hidden" id="forged-token" name="token" value=""/>
	<input type="submit" value="go"/>
	</form>

	<script>
	#!/usr/bin/env ruby
	# apk_backdoor.rb
	# This script is a POC for injecting metasploit payloads on
	# arbitrary APKs.
	# Authored by timwr, Jack64
	#


	require 'nokogiri'
	require 'fileutils'