ioanlongjing’s gists

ioanlongjing / dfsdfsdf

Created July 27, 2019 09:36

ioanlongjing / bypass-firewall-and-probe-ports.html

Created September 7, 2018 12:46 — forked from Shamar/bypass-firewall-and-probe-ports.html

PoC exploit: bypass a corporate firewall through JavaScript and a DNS

	<html>
	<!-- This is a very simple Proof of Concepts of just one of the possible attacks
	described at https://bugzilla.mozilla.org/show_bug.cgi?id=1487081
	You can give it a try by following the instruction at
	https://dev.to/shamar/the-meltdown-of-the-web-4p1m

	Just please, remember to restore your /etc/hosts after.
	-->
	<head>
	<script type="text/javascript">

ioanlongjing / cloud_metadata.txt

Created June 30, 2018 16:59 — forked from jhaddix/cloud_metadata.txt

Cloud Metadata Dictionary useful for SSRF Testing

	## AWS
	# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories

	http://169.254.169.254/latest/user-data
	http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
	http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
	http://169.254.169.254/latest/meta-data/ami-id
	http://169.254.169.254/latest/meta-data/reservation-id
	http://169.254.169.254/latest/meta-data/hostname
	http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key

ioanlongjing / gist:d06b19178c3e89f48f16ab2ef8511627

Created December 1, 2017 14:28 — forked from SimonSun1988/gist:2ef7db45e46b889783647d941ec15e4d

解決 Ubuntu "can’t set the locale; make sure $LC_* and $LANG are correct" 的錯誤

	## 安裝語系檔

	`$ sudo locale-gen "en_US.UTF-8"`

	## 重新設定語系檔

	`$ sudo dpkg-reconfigure locales`

	## 設定檔

ioanlongjing / aa.php

Created March 6, 2017 06:05

	<?php
	$realm = 'Restricted area';

	//user => password
	$users = array('admin' => 'mypass', 'guest' => 'guest');


	if (empty($_SERVER['PHP_AUTH_DIGEST'])) {
	header('HTTP/1.1 401 Unauthorized');
	header('WWW-Authenticate: Digest realm="'.$realm.

ioanlongjing / hitcon_zeroday_publish_channel_notification.sh

Created February 21, 2017 08:22 — forked from seadog007/hitcon_zeroday_publish_channel_notification.sh

HITCON ZeroDay publish notification to Telegram channel

	#!/bin/bash
	while true
	do
	token='token_only'

	curl -s https://zeroday.hitcon.org/vulnerability/disclosed/page/1 \| grep vu-l-data-titl \| tr -d $'\t' \| \
	while read line
	do
	link=`echo $line \| grep -oP '<a\ href="\K.*(?=")'`
	title=`echo $line \| grep -oP '<a.">\K.(?=</a)'`

Ioan ioanlongjing