Skip to content

Instantly share code, notes, and snippets.

View puzanov's full-sized avatar
👨‍💻
Code Away

Oleg Puzanov puzanov

👨‍💻
Code Away
View GitHub Profile

Keybase proof

I hereby claim:

  • I am puzanov on github.
  • I am puzanov (https://keybase.io/puzanov) on keybase.
  • I have a public key whose fingerprint is 49EA 454F 9F02 6788 61CE A971 E9CE EAF3 3CB9 9D6B

To claim this, I am signing this object:

VM1774:1 Uncaught SyntaxError: Unexpected token o in JSON at position 1
at JSON.parse (<anonymous>)
at wmsbridge.js:1
(anonymous) @ wmsbridge.js:1
postMessage (async)
Z._write @ contentscript.js:1
h @ contentscript.js:1
(anonymous) @ contentscript.js:1
a.write @ contentscript.js:1
y @ contentscript.js:1
{
"type":"modules",
"id":"d793162b-3e40-4f57-9255-7aac576eb65e",
"creationDate":"2018-06-01T04:57:48.689Z",
"version":4,
"application":{
"architecture":"x86-64",
"buildId":"20180517114003",
"name":"Firefox",
"version":"60.0.1",
{
"python.linting.pylintArgs": ["--load-plugins", "pylint_django"]
}
@puzanov
puzanov / gist:4f041a60de2133fa5768a86e4f811565
Created December 18, 2017 08:32
stylish.kg coinhive inj
<!DOCTYPE html>
<!--[if IEMobile 7]><html class="iem7" lang="ru" dir="ltr"><![endif]-->
<!--[if lte IE 6]><html class="lt-ie9 lt-ie8 lt-ie7" lang="ru" dir="ltr"><![endif]-->
<!--[if (IE 7)&(!IEMobile)]><html class="lt-ie9 lt-ie8" lang="ru" dir="ltr"><![endif]-->
<!--[if IE 8]><html class="lt-ie9" lang="ru" dir="ltr"><![endif]-->
<!--[if (gte IE 9)|(gt IEMobile 7)]><!--><html lang="ru" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#"><!--<![endif]-->
<head>
@puzanov
puzanov / onvif-SQLi-PoC.txt
Last active September 25, 2017 08:48
Faleemi FSC-880 Authorization bypass via blind SQLi
/* https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce */
POST /onvif/device_service HTTP/1.1
Content-Type: application/soap+xml
Content-Length: 1076
charset: utf-8
Host: 192.168.0.100
Connection: close
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
cat types.php
<?php
function getDB() {
$mysqli = new mysqli("mysql", "", "", "");
if (mysqli_connect_errno()) {
printf("Mysql connection error: %s\n", mysqli_connect_error());
exit();
}
return $mysqli;
redbear@berloga ~/src/zentist $ ./rundev.sh up —build
==================================
|Creating symlinks for dev env...|
==================================
ATTENTION!!!
Please run npm install in your root folder so that linter-eslint functions properly
==================================
| Checking for dangling volumes |
==================================
There are NO dangling volumes
warning.js:36 Warning: Each child in an array or iterator should have a unique "key" prop. Check the render method of `AveragePricePage`. See https://fb.me/react-warning-keys for more information.
in AveragePriceChoice (created by AveragePricePage)
in AveragePricePage
in div (created by PatientWizardCnt)
in div (created by PageTemplate)
in div (created by PageTemplate)
in PageTemplate (created by PatientWizardCnt)
in PatientWizardCnt (created by withApollo(PatientWizardCnt))
in withApollo(PatientWizardCnt) (created by Connect(withApollo(PatientWizardCnt)))
in Connect(withApollo(PatientWizardCnt)) (created by Route)
select
m.source_host,
m.external_link,
m.count,
m.external_host,
m.created,
coalesce(t1.hosttype,'N') as 'source_host_type',
coalesce(t2.hosttype,'N') as 'external_host_type'
from monitor as m
LEFT OUTER JOIN types as t1 ON t1.hostname=m.source_host