leonjza

# 2017 - @leonjza
#
# Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC
# Full bug description: https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html

# Usage example:
#
# List available posts:
#
# $ python inject.py http://localhost:8070/

supermarin

# unfuck the terminal colors
set -g default-terminal "screen-256color"

# unfuck the Esc
set -s escape-time 0

# unfuck mouse scrolling
set -g terminal-overrides 'xterm*:smcup@:rmcup@'

# unfuck copy and paste

chilts

var request = require('request');
var unzip   = require('unzip');
var csv2    = require('csv2');

request.get('http://s3.amazonaws.com/alexa-static/top-1m.csv.zip')
    .pipe(unzip.Parse())
    .on('entry', function (entry) {
        entry.pipe(csv2()).on('data', console.log);
    })
;

Honorable

account create', 4, 'Syntax: .account create $account $password\r\n\r\nCreate account and set password to it.');
account delete', 4, 'Syntax: .account delete $account\r\n\r\nDelete account with all characters.');
account onlinelist', 4, 'Syntax: .account onlinelist\r\n\r\nShow list of online accounts.');
account set gmlevel', 4, 'Syntax: .account set gmlevel [$account] #level [#realmid]\r\n\r\nSet the security level for targeted player (can\'t be used at self) or for account $name to a level of #level on the realm #realmID.\r\n\r\n#level may range from 0 to 3.\r\n\r\n#reamID may be -1 for all realms.');
account set password', 4, 'Syntax: .account set password $account $password $password\r\n\r\nSet password for account.');
character erase', 4, 'Syntax: .character erase $name\r\n\r\nDelete character $name. Character finally deleted in case any deleting options.');
server exit', 4, 'Syntax: .server exit\r\n\r\nTerminate trinity-core NOW. Exit code 0.');
server set loglevel', 4, 'Syntax: .server set loglevel #