Skip to content

Instantly share code, notes, and snippets.

View l1kw1d's full-sized avatar
🖥️
- https://jprovo.st -

Jonathan Provost l1kw1d

🖥️
- https://jprovo.st -
View GitHub Profile
@l1kw1d
l1kw1d / README.md
Created January 24, 2021 22:21 — forked from smarek/README.md
Inflate gzdeflate contents / decode eIDAS SAMLRequest param

Run like

> decode_saml_request.sh sample_data
@l1kw1d
l1kw1d / wordpress-setup-attack.sh
Created November 9, 2019 00:01 — forked from valorin/wordpress-setup-attack.sh
Proof of concept WordPress setup script attack - sets up a new WP installation and injects a simple shell into /wp-content/themes/twentynineteen/404.php and /wp-hello.php.
#!/bin/bash
#
# WordPress Setup Attack Script
#
# Created by Stephen Rees-Carter (https://stephenreescarter.net/)
#
# This script injects a remote shell into a fresh copy of WordPress that hasn't been set up yet.
# Once the shells have been set up, it removes the config file with the custom database connection to reset the site back to a fresh install.
#
echo 'export PATH=$HOME/local/bin:$PATH' >> ~/.bashrc
. ~/.bashrc
mkdir ~/local
mkdir ~/node-latest-install
cd ~/node-latest-install
curl http://nodejs.org/dist/node-latest.tar.gz | tar xz --strip-components=1
./configure --prefix=~/local
make install # ok, fine, this step probably takes more than 30 seconds...
curl https://www.npmjs.org/install.sh | sh
#!/usr/bin/env node
var program = require('commander');
var request = require('request');
var chalk = require('chalk');
program
.version('0.0.1')
.usage('[options] <keywords>')
.option('-o, --owner [name]', 'Filter by the repositories owner')
@l1kw1d
l1kw1d / index.js
Created May 26, 2014 06:44 — forked from max-mapper/index.js
requirebin sketch
var insertCSS = require('insert-css')
var domify = require('domify')
var css = ".button { display: inline-block; font-family: Arial; background-color: papayawhip; padding: 10px; border: 1px solid salmon; }"
var html = '<div class="button">BUTTON</div>'
// inserts new <style> tag into the <head>
insertCSS(css)
// append the html elements that domify returns to the <body>