Cloud Metadata URL List
I landed the SSRF Cloud Metadata technique in a few different scenarios
recently. If you haven’t seen the talk BHUSA 2014 - Bringing a
notes
Simple Ruby Exec with Open and Pipe
I was researching something else and thought this was a cool way to execute a
command through the open method in ruby:
1
open("
Exploiting XXE Vulnerabilities in OXML Documents - Part 1
OXML is a common document format; think docx (Microsoft Word Document), pptx
(Microsoft Powerpoint), xlsx (Excel Spreadsheet), etc.
An OXML document is a zip file
ldapsearch notes
I seem to find open LDAP servers on the Internet more often than I should. Here
are some notes on using ldapsearch
Installing ldapsearch on
Search all Github Repositories for an Organization
gumbler [https://github.com/BuffaloWill/gumbler] is a script I wrote to search
through git commits and introduced in the blog post “Searching Through Git