Skip to content

Instantly share code, notes, and snippets.

View 0xSojalSec's full-sized avatar
🤒
Out sick

GH0ST_3exP10it 0xSojalSec

🤒
Out sick
331 followers · 2.1k following
View GitHub Profile
@0xSojalSec
0xSojalSec / google-dorks
Created November 3, 2022 18:52 — forked from stevenswafford/google-dorks
Listing of a number of useful Google dorks.
" _ _ "
" _ /|| . . ||\ _ "
" ( } \||D ' ' ' C||/ { % "
" | /\__,=_[_] ' . . ' [_]_=,__/\ |"
" |_\_ |----| |----| _/_|"
" | |/ | | | | \| |"
" | /_ | | | | _\ |"
It is all fun and games until someone gets hacked!
@0xSojalSec
0xSojalSec / gist:87bd6be4e0ff1c087bbfae33c36c38d3
Created August 24, 2022 17:54 — forked from melvinsh/gist:c114e844bd975484b51d107ae54f6c1b
Permutations Medium
acc
accept
acceptatie
access
accounts
alpha
alt
api
app
apps
@0xSojalSec
0xSojalSec / Security Engineer - Interview Questions.md
Created August 22, 2022 12:27 — forked from namishelex01/Security Engineer - Interview Questions.md
Cyber security engineer, Security Engineer, Security Analyst, Information Security Analyst and many more names

Core Information Security

  • What is information security and how is it achieved?

  • What are the core principles of information security?

  • What is the CIA triangle?

  • What is non-repudiation (as it applies to IT security)?

@0xSojalSec
0xSojalSec / Security Interview Questions
Created August 22, 2022 12:27 — forked from boodera/Security Interview Questions
Cyber Security is an exotic field, and every next person wants to explore this domain and make a career in it, but the problem is they have no idea how to get in and even if they do, They don’t have any idea on what type of questions they might face in an interview.
Recently
@Miss_Malware
asked for everyone’s favourites security analyst and DFIR interview question that gave me an idea to compile a list of questions which are asked in every interview one way or another. What follows is a list of questions which you may face in an interview.
@0xSojalSec
0xSojalSec / detect_CVE-2021-40444.py
Created August 19, 2022 16:01 — forked from decalage2/detect_CVE-2021-40444.py
Simple script to detect CVE-2021-40444 URLs using oletools
# simple script to detect CVE-2021-40444 exploits in DOCX using oletools
# v0.01 Philippe Lagadec 2021-09-09
# IMPORTANT NOTE: this script detects the few samples identified so far, by looking for "mhtml:" in remote objects URLs.
# But it is not confirmed yet if this detection is generic enough, for example if "mhtml:" is not mandatory.
# Moreover, for now only Office 2007+ files are supported.
# Detection for other file types (RTF, Office 97-2003, ...) will be implemented later.
import sys, zipfile
from oletools import oleobj, ooxml
@0xSojalSec
0xSojalSec / subdomains wildcard detection example
Created August 10, 2022 10:24 — forked from 003random/subdomains wildcard detection example
if [[ "$(dig @1.1.1.1 A,CNAME {test321123,testingforwildcard,plsdontgimmearesult}.$domain +short | wc -l)" -gt "1" ]]; then
echo "[!] Possible wildcard detected."
fi
@0xSojalSec
0xSojalSec / bytearray2exe.cs
Created August 10, 2022 09:15 — forked from decay88/bytearray2exe.cs
Execute base64 encoded byte array from memory without wrting to disk as a disguised process
using System;
using System.IO;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Runtime.InteropServices;
namespace ByteArrayExec
{
@0xSojalSec
0xSojalSec / how to use
Created August 10, 2022 09:00 — forked from carlware/how to use
proxychains and tor (change ip ~10 seconds)
# install
sudo apt-get install proxychains
sudo apt-get install tor
# then update the files /etc/proxychains.conf and /etc/tor/torrc with the given config
# restart tor server
sudo service restart tor
@0xSojalSec
0xSojalSec / waybackurls.py
Created August 8, 2022 16:20 — forked from mhmdiaa/waybackurls.py
import requests
import sys
import json
def waybackurls(host, with_subs):
if with_subs:
url = 'http://web.archive.org/cdx/search/cdx?url=*.%s/*&output=json&fl=original&collapse=urlkey' % host
else:
url = 'http://web.archive.org/cdx/search/cdx?url=%s/*&output=json&fl=original&collapse=urlkey' % host
@0xSojalSec
0xSojalSec / subdomain_wordlist.md
Created July 29, 2022 13:46 — forked from cihanmehmet/subdomain_wordlist.md
Subdomain Wordlist