Mirhat Yaşar mirhatx

🎯

Focusing

Security researcher

mirhatx / xqwefb.js

Last active May 24, 2024 14:28

sign jwt using a public key via HS256

	const fs = require('fs');
	const jwt = require('jsonwebtoken');

	const publicKey = fs.readFileSync('/x/y/z/public.pem');

	// jwt payload
	const payload = {
	login: "admin"
	};

mirhatx / block.js

Last active December 30, 2021 20:59

Block anyone with .eth in name on twitter

	const Twit = require('twit')

	const T = new Twit({
	consumer_key: '',
	consumer_secret: '',
	access_token: '',
	access_token_secret: '',
	})

	const stream = T.stream('statuses/filter', { track: 'eth', language: 'en' })

mirhatx / clxss.js

Last active May 9, 2021 00:47

X-Forwarded-For Script(cloudflare) for XSS

	const axios = require('axios');
	var fs = require('fs');

	// npm install axios
	// to run it: node file.js file.txt

	// Target server's name may be different from cloudflare
	// Which means we can miss some vulnerabilities

	const array = fs.readFileSync('file.txt', 'utf8').split('\n');

mirhatx / a.java

Created March 1, 2021 22:18

eksi

	package p175m.p176a.p295b.p313b;

	import com.eksiteknoloji.data.entities.GenericResponse;
	import com.eksiteknoloji.data.entities.azure.AzureRegistrationResponseData;
	import com.eksiteknoloji.data.entities.billing.BillingStatusResponseData;
	import com.eksiteknoloji.data.entities.buddyEntries.EksiBuddyEntriesResponseData;
	import com.eksiteknoloji.data.entities.channels.AllChannelListResponseData;
	import com.eksiteknoloji.data.entities.clientInfo.ClientInfoResponseData;
	import com.eksiteknoloji.data.entities.comments.CommentSummaryListResponseData;
	import com.eksiteknoloji.data.entities.directMessage.DirectMessageListResponseData;

mirhatx / admin.js

Last active February 28, 2021 17:06

backend

	const path = require('path');
	const express = require('express');
	const rootDir = require('../util/path');
	const router = express.Router();

	const products = [];

	// /admin/add-product => GET
	router.get('/add-product', (req, res, next) => {
	res.sendFile(path.join(rootDir, 'views', 'add-product.html'));