rtfmkiesel

// ==UserScript==
// @name         BloodHound Table Quick Export
// @namespace    http://tampermonkey.net/
// @version      1.2
// @description  Adds various export buttons to BloodHound's tabel exporte, mainly useful for Markdown reporting
// @author       github.com/rtfmkiesel
// @match        *://*/*
// @run-at       document-idle
// @grant        GM_setClipboard
// @downloadURL https://gist.githubusercontent.com/rtfmkiesel/8d2f2068aa17963282594ce8ee581d4b/raw/bh_add_quick_export_buttons.js

rtfmkiesel

// ==UserScript==
// @name         BloodHound Copy Query Button
// @namespace    http://tampermonkey.net/
// @version      1.1
// @description  Adds a copy query button to the web UI
// @author       github.com/rtfmkiesel
// @match        *://*/*
// @run-at       document-idle
// @grant        GM_setClipboard
// @downloadURL https://gist.githubusercontent.com/rtfmkiesel/298694c7e8cd5a9509a6b5843305fec8/raw/bh_add_copy_query.js

rtfmkiesel

#!/bin/sh

TARGETDOMAIN="mydomain.dyndns.local"
SSHPORT="22"

echo "[*] Getting current IP"
CURIP=$(cat /etc/fail2ban/jail.local | grep "^ignoreip" | awk -F " " '{print $3}')
echo "[+] Current IP is $CURIP"

echo "[*] Getting new IP"

rtfmkiesel

Plugin: Outline
Affected version: <= 1.5.13
References:

• cqroot/joplin-outline#100
• laurent22/joplin#12083 (comment)

PoC

# XSS

rtfmkiesel

javascript:(() => {
  const version = document.querySelector('#version + td')?.innerText.trim();
  if (!version) {
    alert('missing version');
    return;
  }

  const publisher = document.querySelector('#publisher + td')?.innerText.trim();
  if (!publisher) {
    alert('missing publisher');