irsdl
/ bambdas_highlighter.java
Created
November 27, 2023 21:54
Highlighting case using Burp Suite Bambda
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // by @irsdl | |
| boolean manualColorHighlightEnabled = true; // e.g. BurpRed anywhere in the request | |
| boolean pwnFoxColorHighlightEnabled = true; // to support PwnFox Firefox extension containers | |
| // BEGIN HIGHLIGHT LOGIC { | |
| boolean hasAlreadyBeenColoured = false; | |
| /* Manual highlight logic to see something like BurpRed */ | |
| if(manualColorHighlightEnabled){ | |
| Pattern manualHighlightPattern = Pattern.compile("burp([a-z]{3,7}+)", Pattern.CASE_INSENSITIVE); // like burpRed or burpYellow |
mhmdiaa
/ js_endpoints_new_tab.js
Created
August 6, 2023 20:22
All credit goes to @renniepak for the original bookmarklet https://twitter.com/renniepak/status/1602620834463588352
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| javascript: (function() { | |
| var scripts = document.getElementsByTagName("script"), | |
| regex = /(?<=(\"|\%27|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\%60))/g; | |
| const results = new Set; | |
| for (var i = 0; i < scripts.length; i++) { | |
| var t = scripts[i].src; | |
| "" != t && fetch(t).then(function(t) { | |
| return t.text() | |
| }).then(function(t) { | |
| var e = t.matchAll(regex); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| var payloads = ["javascript://", "javascript::", "JavaScript:", "javajavascript:script:"]; | |
| function doit(x, index) {setTimeout(function() {location.hash = "#" + x}, 1000 * index)} | |
| payloads.forEach(doit); |
PurpleVibe32
/ vmwk17key.txt
Last active
May 2, 2024 10:05
Free VMware Workstation Pro 17 full license keys
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Install VMWare Workstation PRO 17 (Read it right. PRO!) | |
| Also, these keys might also work with VMWare Fusion 13 PRO. Just tested it. | |
| Sub to me on youtube pls - PurpleVibe32 | |
| if you want more keys - call my bot on telegram. @purector_bot (THE BOT WONT REPLY ANYMORE) - Or: https://cdn.discordapp.com/attachments/1040615179894935645/1074016373228978277/keys.zip - the password in the zip is 102me. | |
| --- | |
| This gist can get off at any time. | |
| PLEASE, DONT COPY THIS. IF YOU FORK IT, DONT EDIT IT. | |
| *If you have a problem comment and people will try to help you! | |
| *No virus |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <head> | |
| <script> | |
| function filter(F) { | |
| F = unescape(F).replace(/\n/g, "").replace(/\r/g, "").replace(/\t/g, "").replace(/javascript:/ig, '').replace(/&/g, '&').replace(/</g, '<').replace(/"/g, '"'); | |
| return F; | |
| } | |
| function locationHashChanged(e) { | |
| var F = location.hash.substring(1); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <head> | |
| <title>Jquery XSS Example</title> | |
| <script src="https://code.jquery.com/jquery-3.6.1.min.js" | |
| integrity="sha256-o88AwQnZB+VDvE9tvIXrMQaPlFFSUTR+nldQm1LuPXQ=" crossorigin="anonymous"></script> | |
| <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.min.js" | |
| integrity="sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=" crossorigin="anonymous"></script> | |
| <script> | |
| function init() { | |
| $("#datepicker").datepicker({ altField: "dangerous if your input reaches here" }); | |
| }; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <head> | |
| <title> | |
| Devtools : initiators | |
| </title> | |
| <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js" | |
| integrity="sha512-aVKKRRi/Q/YV+4mjoKBsE4x3H+BkegoM/em46NNlCqNTmUYADjBbeNefNxYV7giUp0VxICtqdrbqU7iVaeZNXA==" | |
| crossorigin="anonymous" referrerpolicy="no-referrer"></script> | |
| </head> |
Rajchowdhury420
/ script.js
Created
February 27, 2022 14:36
Frida Script To Bypass Android Root Detection and SSL Pinning
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Java.perform(function() { | |
| var RootPackages = ["com.noshufou.android.su", "com.noshufou.android.su.elite", "eu.chainfire.supersu", | |
| "com.koushikdutta.superuser", "com.thirdparty.superuser", "com.yellowes.su", "com.koushikdutta.rommanager", | |
| "com.koushikdutta.rommanager.license", "com.dimonvideo.luckypatcher", "com.chelpus.lackypatch", | |
| "com.ramdroid.appquarantine", "com.ramdroid.appquarantinepro", "com.devadvance.rootcloak", "com.devadvance.rootcloakplus", | |
| "de.robv.android.xposed.installer", "com.saurik.substrate", "com.zachspong.temprootremovejb", "com.amphoras.hidemyroot", | |
| "com.amphoras.hidemyrootadfree", "com.formyhm.hiderootPremium", "com.formyhm.hideroot", "me.phh.superuser", | |
| "eu.chainfire.supersu.pro", "com.kingouser.com" | |
| ]; |
bugbountynights
/ log4j-keywords
Last active
March 25, 2024 22:54
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ${ctx:loginId} | |
| ${map:type} | |
| ${filename} | |
| ${date:MM-dd-yyyy} | |
| ${docker:containerId} | |
| ${docker:containerName} | |
| ${docker:imageName} | |
| ${env:USER} | |
| ${event:Marker} | |
| ${mdc:UserId} |
c7x43t
/ Windows 10 Keys.txt
Created
September 5, 2021 16:02
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Home/Core TX9XD-98N7V-6WMQ6-BX7FG-H8Q99 | |
| Home/Core (Country Specific) PVMJN-6DFY6-9CCP6-7BKTT-D3WVR | |
| Home/Core (Single Language) 7HNRX-D7KGG-3K4RQ-4WPJ4-YTDFH | |
| Home/Core N 3KHY7-WNT83-DGQKR-F7HPR-844BM | |
| Professional W269N-WFGWX-YVC9B-4J6C9-T83GX | |
| Professional N MH37W-N47XK-V7XM9-C7227-GCQG9 | |
| Professional Enterprise | |
| Professional Workstation | |
| Enterprise NPPR9-FWDCX-D2C8J-H872K-2YT43 | |
| Enterprise N DPH2V-TTNVB-4X9Q3-TJR4H-KHJW4 |
NewerOlder