尤理衡 (Li-Heng Yu) seadog007

## phpipam.sh
#!/bin/bash

#
# Author: seadog007
# Date: 2021/01/03
# Description: Adding DHCP Lease & Static ARP & IP Whitelist from phpIPAM
#              which makes phpIPAM actually managed IPs
#

ipam='192.168.1.5'

## kong_exploit.sh
#!/bin/bash

# Kong Public Exposed & Unauthorized API Exploit
# Using the API to RCE (even the kong is highly possible in container)
#
# Author: Li-Heng Yu (Jasper Yu) <007seadog@gmail.com>
# Thu April 30, 2020
# MIT License

[ $# -ne 3 ] && echo 'Usage: '$0' <Kong API> <Kong Proxy Entry> <Command>' && echo 'Example: ./kong_exploit.sh "192.168.1.2:8001" "192.168.1.2:8000" "whoami"' && exit

## readme.txt
Play this game by pasting the script in http://www.puzzlescript.net/editor.html

## googlelive_extract.py
#!/usr/bin/env python3
#
# Google Live Photo extractor
# Extracts static photo and video from the live photo taken by Google Camera
#
# Usage:
# $ googlelive_extract.py <image.jpg>
#
# Creates two new files - image_static.jpg and image_video.mp4
#

## export.js
function save() {
    var textToWrite = out;
    var textFileAsBlob = new Blob([textToWrite], {
        type: 'text/json'
    });
    var fileNameToSaveAs = "moves-export.json";

    var downloadLink = document.getElementById("download");
    downloadLink.download = fileNameToSaveAs;
    downloadLink.innerHTML = "";

## run.js
var re = /alt="\(dice20\)"\ rndnum="2"\ \/><[^>]alt="\(dice20\)"\ rndnum="20"\ \/><[^>]*alt="\(bzzz\)"\ rndnum="4"/;
var plurk_id = 1358061688;
var plurk_owner_id = 9194929;
var timer = setInterval(function(){
    var rnd = (new Date().getTime());
    var content = rnd + '\n(dice20)(dice20)(bzzz)'.repeat(10);
    jQuery.post("/Responses/add", {qualifier: ':', content: content, p_uid: plurk_owner_id, plurk_id: plurk_id, lang: 'tr_ch', uid: SiteState.getSessionUser().id}, function(data){
        m = re.exec(data.object.content);
        if(m !== null){
            console.log('Got it');

## hitcon_zeroday_publish_channel_notification.sh
#!/bin/bash
token='token_only'
disable_preview='True'
for i in `seq 1 10`
do
curl -s https://zeroday.hitcon.org/vulnerability/disclosed/page/$i | grep vu-l-data-titl | tr -d $'\t' | \
while read line
do
link=`echo $line | grep -oP '<a\ href="\K.*(?=")'`
title=`echo $line | grep -oP '<a.*">\K.*(?=</a)'`

## fiddler.js
/*
======================
Author: 海豹
Date: 2017/1/22
Version: 1.0.0.0
Description: Fiddler extension for cracking Taiwan MacDonald Coupon app which is available for both Android and iOS version (´・ω・｀)
僅供學術使用 請勿用作非法用途
======================
*/
import System;

## final_flag_myp_design.svg

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                seadog007
                / final_flag_myp_design.svg
            
            
              Created
              October 28, 2016 01:40
            
              
                The final flag design in MYP Design Class
              
          
      Sorry, something went wrong. Reload?
      Sorry, we cannot display this file.
      Sorry, this file is invalid so it cannot be displayed.
      
          Viewer requires iframe.
      
    
## rolling_mean.sh
#!/bin/bash

function gendata(){
for i in `seq 1 $1`
do
        echo $(( ( RANDOM % $2 )  + 1 )) >> data_$$
done
}

echo '##Generate Datas##'
	#!/bin/bash

	#
	# Author: seadog007
	# Date: 2021/01/03
	# Description: Adding DHCP Lease & Static ARP & IP Whitelist from phpIPAM
	# which makes phpIPAM actually managed IPs
	#

	ipam='192.168.1.5'
	#!/bin/bash

	# Kong Public Exposed & Unauthorized API Exploit
	# Using the API to RCE (even the kong is highly possible in container)
	#
	# Author: Li-Heng Yu (Jasper Yu) <007seadog@gmail.com>
	# Thu April 30, 2020
	# MIT License

	[ $# -ne 3 ] && echo 'Usage: '$0' <Kong API> <Kong Proxy Entry> <Command>' && echo 'Example: ./kong_exploit.sh "192.168.1.2:8001" "192.168.1.2:8000" "whoami"' && exit
	#!/usr/bin/env python3
	#
	# Google Live Photo extractor
	# Extracts static photo and video from the live photo taken by Google Camera
	#
	# Usage:
	# $ googlelive_extract.py <image.jpg>
	#
	# Creates two new files - image_static.jpg and image_video.mp4
	#
	function save() {
	var textToWrite = out;
	var textFileAsBlob = new Blob([textToWrite], {
	type: 'text/json'
	});
	var fileNameToSaveAs = "moves-export.json";

	var downloadLink = document.getElementById("download");
	downloadLink.download = fileNameToSaveAs;
	downloadLink.innerHTML = "";
	var re = /alt="\(dice20\)"\ rndnum="2"\ \/><[^>]alt="\(dice20\)"\ rndnum="20"\ \/><[^>]*alt="\(bzzz\)"\ rndnum="4"/;
	var plurk_id = 1358061688;
	var plurk_owner_id = 9194929;
	var timer = setInterval(function(){
	var rnd = (new Date().getTime());
	var content = rnd + '\n(dice20)(dice20)(bzzz)'.repeat(10);
	jQuery.post("/Responses/add", {qualifier: ':', content: content, p_uid: plurk_owner_id, plurk_id: plurk_id, lang: 'tr_ch', uid: SiteState.getSessionUser().id}, function(data){
	m = re.exec(data.object.content);
	if(m !== null){
	console.log('Got it');
	#!/bin/bash
	token='token_only'
	disable_preview='True'
	for i in `seq 1 10`
	do
	curl -s https://zeroday.hitcon.org/vulnerability/disclosed/page/$i \| grep vu-l-data-titl \| tr -d $'\t' \| \
	while read line
	do
	link=`echo $line \| grep -oP '<a\ href="\K.*(?=")'`
	title=`echo $line \| grep -oP '<a.">\K.(?=</a)'`
	/*
	======================
	Author: 海豹
	Date: 2017/1/22
	Version: 1.0.0.0
	Description: Fiddler extension for cracking Taiwan MacDonald Coupon app which is available for both Android and iOS version (´・ω・｀)
	僅供學術使用請勿用作非法用途
	======================
	*/
	import System;
	#!/bin/bash

	function gendata(){
	for i in `seq 1 $1`
	do
	echo $(( ( RANDOM % $2 ) + 1 )) >> data_$$
	done
	}

	echo '##Generate Datas##'