Search Results

Stored / Hosted XSS If the target page has a loose content security policy / cross-origin policy, then you may be able to host xss.js using a Python web server and have the target execute the JavaScript to read the page source stored in url. If there is a vul...

Stored / Hosted XSS If there is a vulnerability where you can store or submit HTML and have it rendered on the page or some other client-side application, then the src=x condition would trigger the onerror= attribute and cause the target to execute the JavaSc...

apple banana pear mango grapes fruit.txt cat fruit.txt | paste -s -d ',' - Using piped input paste -s -d ',' < fruit.txt Using data redirection  

https://mywiki.wooledge.org/BashPitfalls/ also on Archive.org Command execution via unquoted variable Arithmetic expansion leading to command execution Arithmetic expansion in array index leads to command execution Etc...

Assuming you have some means of reading server-side files, these are some examples of places you might look to find build manifests. Using local file read, we read ../../../../../../../../../proc/self/environ and find the Next.js application is Dockerized. W...

$searchPath = 'C:\Program Files' $userName = 'john.doe' Get-ChildItem -ErrorAction 'SilentlyContinue' -Force -File -Recurse -Path "$searchPath" | Where-Object { try { (Get-Acl $_.FullName).Owner -like "*$userName*" } catch {} }

Virtual Environments sudo apt install -y pipx pipx install zkg echo 'export PATH=$PATH:/opt/zeek/bin:$HOME/.local/bin' >> $HOME/.bashrc source $HOME/.bashrc Install Zeek Package zkg autoconfig zkg install geoip-conn sudo -i sed -i.bak 's/^# @load pac...

function getUserInput () { if [ $# -gt 1 ] ; then echo "Usage example: $0" echo "Usage example: $0 -hidden" return else if [ $# -gt 0 ] ; then local arg=$(echo "$1" | tr '[:upper:]'...

[10.6.6.0/24] [10.9.9.0/24] [10.80.80.0/24] | | | | | | | | ...

Gopher Agent Generation Problem Need to generate an agent implant for LINUX TARGET (see diagram), but receive unhelpful error code in the AdaptixClient UI (exit code 1). Solution ./adaptixserver -profile profile.json Launch adaptixserver with profile ltr...

Installation gem install zsteg for dir in $(find "$HOME/.local/share/gem/ruby" -maxdepth 2 -type d -name bin | sort -rh | head -n 1); do export PATH="$PATH:$dir" done Added to my shell  .rc file so that I can call ruby scripts by their installed name

Read with Hexdump sudo -u user.name /usr/bin/hexdump -v -e '/1 "%02x"' /home/user.name/.ssh/id_rsa > hex.dump -v -e '/1 "%02x"' syntax tells hexdump to read byte-per-byte and output in lowercase hexadecimal, whereas hexdump may not preserve the original byte...

Hardware Configuration Memory: Assigned as needed Hard Disk: Add an extra hard disk to the live-boot VM, sized as needd CD / DVD: Live Boot .iso file NIC: Select desired network / VLAN Boot Order .iso file Hard disk NIC Etc. Procedure Partit...