and0x00

## CVE-2025-29927.bcheck
metadata:
    language: v2-beta
    name: "CVE-2025-29927 - Next.js middleware bypass"
    description: "Checks for differences in responses when using different x-middleware-subrequest header paths"
    author: "Chris Grieger - blueredix.com"
    tags: "next.js", "middleware"

run for each:
    middleware_value = "pages/_middleware",
                       "middleware",

## waf-smoke-test.sh
#!/bin/bash

# 🚀 Discover More: Testing Your Firewall in 60 Seconds: A Lightweight WAF Testing Script That Anyone Can Use
# Learn how this script works and the best practices for WAF testing.
# Read the full article here:
# 👉 https://medium.com/@kochuraa/testing-your-firewall-in-60-seconds-a-lightweight-waf-testing-script-that-anyone-can-use-a7a725fefcb7

# Safe WAF Tester Script
# Usage: ./waf-smoke-test.sh <URL> [-o output.md] [-H "Header: Value"]
# Examples:

## subfyx.sh
#!/bin/bash
# Script to split files into chunks, process each line with "subfy",
# and consolidate results while avoiding duplicate processing via hashes.

# --- Usage ---------------------------------------------------------------
usage() {
    cat <<EOF
Usage: $0 [options] <file1> [file2 ... fileN]
Options:
  --no-hash             Skip hash file creation/verification.

## entropy.sh
#!/bin/bash
if [ "$#" -lt 2 ]; then
  echo "Usage: $0 input_file output_file [--debug]"
  exit 1
fi

input_file="$1"
output_file="$2"
debug_mode=0
if [ "$3" == "--debug" ]; then

## datas_ddmmyyyy.txt
22031985
23031985
24031985
25031985
26031985
27031985
28031985
29031985
30031985
31031985

## datas_ddmmyy.txt
220385
230385
240385
250385
260385
270385
280385
290385
300385
310385

## brazilian_girl_names.txt
aana
abadia
abda
abelina
abelita
abgail
abia
abigail
abigaiu
abilene

## brazilian_boy_names.txt
aantonio
aarao
aaron
abadio
abdala
abdias
abdiel
abdo
abdon
abdoral

## brazilian_names.txt
aana
aantonio
aarao
aaron
abadia
abadio
abda
abdala
abdias
abdiel

## bg_notify.sh
#!/bin/bash

if [ $# -eq 0 ]; then
    echo "No command provided."
    echo "Usage: $0 <command> [arguments...]"
    exit 1
fi

mkdir -p "$HOME/.bg_log"
echo "$(date +'%Y-%m-%d %H:%M:%S') - $*" >> "$HOME/.bg_history"
	metadata:
	language: v2-beta
	name: "CVE-2025-29927 - Next.js middleware bypass"
	description: "Checks for differences in responses when using different x-middleware-subrequest header paths"
	author: "Chris Grieger - blueredix.com"
	tags: "next.js", "middleware"

	run for each:
	middleware_value = "pages/_middleware",
	"middleware",
	#!/bin/bash

	# 🚀 Discover More: Testing Your Firewall in 60 Seconds: A Lightweight WAF Testing Script That Anyone Can Use
	# Learn how this script works and the best practices for WAF testing.
	# Read the full article here:
	# 👉 https://medium.com/@kochuraa/testing-your-firewall-in-60-seconds-a-lightweight-waf-testing-script-that-anyone-can-use-a7a725fefcb7

	# Safe WAF Tester Script
	# Usage: ./waf-smoke-test.sh <URL> [-o output.md] [-H "Header: Value"]
	# Examples:
	#!/bin/bash
	# Script to split files into chunks, process each line with "subfy",
	# and consolidate results while avoiding duplicate processing via hashes.

	# --- Usage ---------------------------------------------------------------
	usage() {
	cat <<EOF
	Usage: $0 [options] <file1> [file2 ... fileN]
	Options:
	--no-hash Skip hash file creation/verification.
	#!/bin/bash
	if [ "$#" -lt 2 ]; then
	echo "Usage: $0 input_file output_file [--debug]"
	exit 1
	fi

	input_file="$1"
	output_file="$2"
	debug_mode=0
	if [ "$3" == "--debug" ]; then
	22031985
	23031985
	24031985
	25031985
	26031985
	27031985
	28031985
	29031985
	30031985
	31031985
	220385
	230385
	240385
	250385
	260385
	270385
	280385
	290385
	300385
	310385
	#!/bin/bash

	if [ $# -eq 0 ]; then
	echo "No command provided."
	echo "Usage: $0 <command> [arguments...]"
	exit 1
	fi

	mkdir -p "$HOME/.bg_log"
	echo "$(date +'%Y-%m-%d %H:%M:%S') - $*" >> "$HOME/.bg_history"