Skip to content

Instantly share code, notes, and snippets.

View Anon-Exploiter's full-sized avatar
🎯
Making Memes & writing code :)

Syed Umar Arfeen Anon-Exploiter

🎯
Making Memes & writing code :)
656 followers · 0 following
View GitHub Profile
@Anon-Exploiter
Anon-Exploiter / aws-s3-buckets-pentest.txt
Created July 14, 2018 18:35
Useful commands while testing s3 buckets!
aws s3 ls s3://s3buckethere --no-sign-request ## Lists the file in the s3 bucket
aws s3 cp s3://bucketname/filethere.txt . --no-sign-request ## Downloads `filethere.txt` from the s3 bucket in the current directory
aws s3 cp test.txt s3://bucketname --no-sign-request ## Uploads `test.txt` from current directory to the s3 bucket
aws s3api get-bucket-acl --bucket bucketname --no-sign-request ## Shows ACL (Access Control List) of the given bucket
aws s3api get-object-acl --bucket bucketname --key fileons3bucket.ext --no-sign-request ## Shows ACL (Access Control List) of given object in the bucket
@Anon-Exploiter
Anon-Exploiter / automateSubdEnum.sh
Last active July 8, 2022 13:05
For enumeration of subdomains from different scripts -- this will be getting used in a docker image soon
#!/bin/bash
mainPATH=$(pwd)/
bar="---------------------------------------"
echo -e "\n$bar\n\tSubdomains Enumerator\n$bar\n"
read -p "Please enter target (i.e. site.com): " domain
HOST=$domain
@Anon-Exploiter
Anon-Exploiter / Dockerfile
Last active June 9, 2020 09:59
Adding colors with PS1 in Docker container/image in linux distros
FROM kalilinux/kali-rolling:latest
RUN echo "PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '" >> /root/.bashrc
WORKDIR /root/
CMD ["bash"]
@Anon-Exploiter
Anon-Exploiter / firebase_apiKeys_testing.html
Created June 16, 2020 07:40
For testing the Firebase API keys found in Web Applications or in JavaScript Code --
<!DOCTYPE html>
<html>
<head>
<title></title>
</head>
<body>
<script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-app.js"></script>
<!-- If you enabled Analytics in your project, add the Firebase SDK for Analytics -->
@Anon-Exploiter
Anon-Exploiter / cronjob.sh
Last active June 16, 2020 14:08
Taking regular backups of OSCP/OSWE data
#!/bin/bash
archiveName=OSWE-`date +%d_%m_%Y`.tar.gz
cd /home/$USER/
# Cronjob:
# 00 15 * * * /path/cronjob.sh | tee /tmp/cronLogs.txt
tar -czvf $archiveName OSWE/
mv $archiveName /path/ -v
@Anon-Exploiter
Anon-Exploiter / jwtBuster.py
Last active October 20, 2021 11:05
For pentesting the JWT token, fetching it's body, type, and signing it with a random string or pem file (based on type being used). Also, returns None type JWT.
from sys import argv
import json
import jwt
JWTSECRET = "jwtSecretKeyEncryption"
PRIVATEKEY = """-----BEGIN RSA PRIVATE KEY-----
MIIEogIBAAKCAQEAnzyis1ZjfNB0bBgKFMSvvkTtwlvBsaJq7S5wA+kzeVOVpVWw
kWdVha4s38XM/pa/yr47av7+z3VTmvDRyAHcaT92whREFpLv9cj5lTeJSibyr/Mr
@Anon-Exploiter
Anon-Exploiter / commands.matlab
Last active April 28, 2023 18:50
Creating CS:GO server with skins, ws, gloves, knifes, etc. on a Ubuntu Instance
sudo apt-get -y update && \
sudo apt-get -y upgrade && \
sudo apt install software-properties-common && \
sudo add-apt-repository multiverse && \
sudo dpkg --add-architecture i386 && \
sudo apt-get -y update && \
sudo apt-get -y upgrade && \
sudo systemctl reboot
sudo apt-get -y install steamcmd && \
@Anon-Exploiter
Anon-Exploiter / .zshrc
Created September 17, 2020 12:31
.zshrc of Kali Linux 2020.3 including the lit prompt
# ~/.zshrc file for zsh non-login shells.
# see /usr/share/doc/zsh/examples/zshrc for examples
setopt autocd # change directory just by typing its name
#setopt correct # auto correct mistakes
setopt interactivecomments # allow comments in interactive mode
setopt ksharrays # arrays start at 0
setopt magicequalsubst # enable filename expansion for arguments of the form ‘anything=expression’
setopt nonomatch # hide error message if there is no match for the pattern
setopt notify # report the status of background jobs immediately
@Anon-Exploiter
Anon-Exploiter / youtube-playlist-reverse.py
Last active December 22, 2020 04:57
Generating commands for youtube playlist downloading in reverse with index in file name using youtube-dl
import os
playlist = "https://www.youtube.com/user/..."
command = f"youtube-dl -j --flat-playlist --playlist-reverse {playlist} | jq -r '.id' | sed 's_^_https://youtu.be/_'"
output = os.popen(command).read()
print(output)
ytUrls = []
@Anon-Exploiter
Anon-Exploiter / .bashrc
Last active October 23, 2020 09:34
.bashrc
# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples
# If not running interactively, don't do anything
case $- in
*i*) ;;
*) return;;
esac