Erwan erwanlr
ethicalhack3r
/ wp_php_object_injection.rb
Last active
February 9, 2022 23:24
Burp Suite Extension to detect PHP Object Injection in WordPress Plugins (read the code comments for additional info)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| java_import 'burp.IBurpExtender' | |
| java_import 'burp.IScannerCheck' | |
| java_import 'burp.IScanIssue' | |
| require 'java' | |
| java_import 'java.util.Arrays' | |
| java_import 'java.util.ArrayList' | |
| # | |
| # You will need to download JRuby's Complete.jar file from http://jruby.org/download and configure Burp Extender with its path. |
random-robbie
/ grab_plugins.py
Created
April 1, 2020 10:49
Grab all Plugins for drupal via drupal gitlab.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import requests | |
| import json | |
| from requests.packages.urllib3.exceptions import InsecureRequestWarning | |
| requests.packages.urllib3.disable_warnings(InsecureRequestWarning) | |
| session = requests.Session() | |
| http_proxy = "http://192.168.1.130:8085" | |
| proxyDict = { | |
| "http" : http_proxy, | |
| "https" : http_proxy, |
NewerOlder