Antti Virtanen lokori

## 00readme.md

      
              3 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                lokori
                / 00readme.md
            
            
              Created
              June 6, 2016 08:32
                — forked from indrora/00readme.md
            
              
                DeadUpdate: Kickin' it bigtime. 
              
          
    ... my first disclosure. Man, it feels weird doing this.
From the vendor that brought you a
                        vulnerable cloud storage platform comes
                        
           ___              ____  __        __     __ 
          / _ \___ ___ ____/ / / / /__  ___/ /__ _/ /____ 
         / // / -_) _ `/ _  / /_/ / _ \/ _  / _ `/ __/ -_)

//_/_,/_,/_/ ./_,/_,/_/_/

  
## MailinatorAliases
@binkmail.com
@bobmail.info
@chammy.info
@devnullmail.com
@letthemeatspam.com
@mailinater.com
@mailinator.net
@mailinator2.com
@notmailinator.com
@reallymymail.com

## how-to-oscp-final.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                lokori
                / how-to-oscp-final.md
            
            
              Created
              January 16, 2017 15:03
                — forked from unfo/how-to-oscp-final.md
            
          
    How to pass the OSCP


Recon
Find vuln
Exploit
Document it

Recon

Unicornscans in cli, nmap in msfconsole to help store loot in database.

  
## awsenv.sh
#!/bin/bash

# Original: https://gist.github.com/woowa-hsw0/caa3340e2a7b390dbde81894f73e379d

set -eu
umask 0022

TMPDIR=$(mktemp -d awsenv)

echo "TEMPDIR $TMPDIR"

## zap_cli_scan.sh
#!/bin/sh

DOCKER=`which docker`
IMAGE='owasp/zap2docker-weekly'
URL='https://www.example.com'
ZAP_API_PORT='8090'

# Start our container
CONTAINER_ID=`$DOCKER run -d \
  -p $ZAP_API_PORT:$ZAP_API_PORT \

## zap_cli_scan.sh
#!/bin/sh

DOCKER=`which docker`
IMAGE='owasp/zap2docker-weekly'
URL='https://www.example.com'
ZAP_API_PORT='8090'

# Start our container
CONTAINER_ID=`$DOCKER run -d \
  -p $ZAP_API_PORT:$ZAP_API_PORT \

## xml-attacks.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                lokori
                / xml-attacks.md
            
            
              Created
              December 11, 2017 20:46
                — forked from mgeeky/xml-attacks.md
            
              
                XML Vulnerabilities and Attacks cheatsheet
              
          
    XML Vulnerabilities

XML processing modules may be not secure against maliciously constructed data. An attacker could abuse XML features to carry out denial of service attacks, access logical files, generate network connections to other machines, or circumvent firewalls.
The penetration tester running XML tests against application will have to determine which XML parser is in use, and then to what kinds of below listed attacks that parser will be vulnerable.


## website-terminal-copy-paste.html
<!DOCTYPE html>
<html>
  <head>
    <title>Copy-Paste from Website to Terminal</title>
  </head>
  <style>
    .codeblock {
      background-color: lightyellow;
      border: 1px dotted blue;
      margin-left: 50px;

## getdomains.sh
#!/bin/bash

## Y-Tunnukseen perustuva domainejen haku (.fi)

## Esimerkki: getdomains 1093944-1 # MTV Oy
# Laita tämä .bashrc tai .zshrc

# Käyttöesimerkkejä:

# Looppaa Y-tunnuksetn kaikki domainit läpi ja tee kysely

## .bash_profile
# start at home
cd ~

ln -sfv /usr/local/opt/redis/*.plist ~/Library/LaunchAgents


ln -sfv /usr/local/opt/mysql56/*.plist ~/Library/LaunchAgents

export PATH=./node_modules/.bin:$PATH
	@binkmail.com
	@bobmail.info
	@chammy.info
	@devnullmail.com
	@letthemeatspam.com
	@mailinater.com
	@mailinator.net
	@mailinator2.com
	@notmailinator.com
	@reallymymail.com
	#!/bin/bash

	# Original: https://gist.github.com/woowa-hsw0/caa3340e2a7b390dbde81894f73e379d

	set -eu
	umask 0022

	TMPDIR=$(mktemp -d awsenv)

	echo "TEMPDIR $TMPDIR"
	#!/bin/sh

	DOCKER=`which docker`
	IMAGE='owasp/zap2docker-weekly'
	URL='https://www.example.com'
	ZAP_API_PORT='8090'

	# Start our container
	CONTAINER_ID=`$DOCKER run -d \
	-p $ZAP_API_PORT:$ZAP_API_PORT \
	<!DOCTYPE html>
	<html>
	<head>
	<title>Copy-Paste from Website to Terminal</title>
	</head>
	<style>
	.codeblock {
	background-color: lightyellow;
	border: 1px dotted blue;
	margin-left: 50px;
	#!/bin/bash

	## Y-Tunnukseen perustuva domainejen haku (.fi)

	## Esimerkki: getdomains 1093944-1 # MTV Oy
	# Laita tämä .bashrc tai .zshrc

	# Käyttöesimerkkejä:

	# Looppaa Y-tunnuksetn kaikki domainit läpi ja tee kysely
	# start at home
	cd ~

	ln -sfv /usr/local/opt/redis/*.plist ~/Library/LaunchAgents


	ln -sfv /usr/local/opt/mysql56/*.plist ~/Library/LaunchAgents

	export PATH=./node_modules/.bin:$PATH