Skip to content

Instantly share code, notes, and snippets.

XSS Locator ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{} Inject this string, and in most cases where a script is vulnerable with no special XSS vector requirements the word "XSS" will pop up. You'll need to replace the "&" with "%26" if you are submitting this XSS string via HTTP GET or it will be ignored and everything after it will be interpreted as another variable. Tip: If you're in a rush and need to quickly check a page, often times injecting the deprecated "<PLAINTEXT>" tag will be enough to check to see if something is vulnerable to XSS by messing up the output appreciably. Basic XSS Attacks Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="s">NS8.1-G</span>|<span class="s">FF1.5</span>] [<span class="s">O8.54</span>] XSS Quick Test '';!--"<XSS>=&{()} If you don't have m
@lcd1232
lcd1232 / 404.html
Created October 16, 2020 19:02
Minimal django app for bug
<html></html>

tmux cheatsheet

As configured in my dotfiles.

start new:

tmux

start new with session name:

@lcd1232
lcd1232 / test.py
Created September 17, 2016 20:29 — forked from christianroman/test.py
Bypass Captcha using 10 lines of code with Python, OpenCV & Tesseract OCR engine
import cv2.cv as cv
import tesseract
gray = cv.LoadImage('captcha.jpeg', cv.CV_LOAD_IMAGE_GRAYSCALE)
cv.Threshold(gray, gray, 231, 255, cv.CV_THRESH_BINARY)
api = tesseract.TessBaseAPI()
api.Init(".","eng",tesseract.OEM_DEFAULT)
api.SetVariable("tessedit_char_whitelist", "0123456789abcdefghijklmnopqrstuvwxyz")
api.SetPageSegMode(tesseract.PSM_SINGLE_WORD)
tesseract.SetCvImage(gray,api)
print api.GetUTF8Text()
@lcd1232
lcd1232 / godville.py
Created August 28, 2016 21:48 — forked from shizeeg/godville.py
Godville.net player stats viewer.
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
Godville player stats viewer. For more info, see <http://godville.net/>
Copyright (C) 2012 sh!zeeg <shizeeg@ya.ru>
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
## Introduction to ggplot2
This is a short demo on how to convert an R Markdown Notebook into an IPython Notebook using knitr and notedown.
Adding a Python Chunk
```{r engine="python"}
def f(x):
return x + 2
f(2)