| # Credit and props to Manoel Abreu @reefbr - Thank you man! | |
| # This one-liner uses dockerized gitleaks to detect a custom toml file with AWS access keys and secret | |
| wget https://gist.githubusercontent.com/iknowjason/64914c08c0512f7380dbe7240812d69d/raw/6044896415ba9adc02a055fe774f67e31ecddad0/aws_key.toml; docker run --rm -v "$PWD:/script" -v <GIT_DIRECTORY_FULL_PATH>/:/code/ --name=gitleaks zricethezav/gitleaks -v detect -c=/script/aws_key.toml -p=/code |
| import nimcrypto | |
| import winim/clr except `[]` # https://s3cur3th1ssh1t.github.io/Playing-with-OffensiveNim/ <-- thank you so much, 2 hours googling I almost went crazy | |
| #[ | |
| All credit goes to @byt3bl33d3r (OffensiveNim) and @s3cur3th1ssh1t | |
| nimble install winim nimcrypto zippy | |
| nim c -d:danger -d:strip --opt:size rsrcDecryptAssembly.nim | |
| slurp = "staticRead" will read the file and store it in the variable (.rdata) on compile time. |
| title = "gitleaks aws secrets config" | |
| [[rules]] | |
| description = "AWS Key ID" | |
| regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}''' | |
| tags = ["key", "AWS"] | |
| [[rules]] | |
| description = "AWS Secret Key2" | |
| regex = '''(?i)aws_secret_key=''' | |
| tags = ["key", "AWS"] |
Assuming You have backend and frontend codes in /home/backend and /home/frontend/ (Use git to upload)
sudo apt-get update
sudo apt-get install python3-pip python3-dev libpq-dev postgresql postgresql-contrib nginx
| # ~/.zshrc file for zsh non-login shells. | |
| # see /usr/share/doc/zsh/examples/zshrc for examples | |
| setopt autocd # change directory just by typing its name | |
| #setopt correct # auto correct mistakes | |
| setopt interactivecomments # allow comments in interactive mode | |
| setopt ksharrays # arrays start at 0 | |
| setopt magicequalsubst # enable filename expansion for arguments of the form ‘anything=expression’ | |
| setopt nonomatch # hide error message if there is no match for the pattern | |
| setopt notify # report the status of background jobs immediately |
| package main | |
| import ( | |
| "flag" | |
| "fmt" | |
| "log" | |
| "os" | |
| "os/signal" | |
| "syscall" | |
| ) |
| echo "" | |
| echo "************ Github Dork Links (must be logged in) *******************" | |
| echo "" | |
| echo " password" | |
| echo "https://github.com/search?q=%22$1%22+password&type=Code" | |
| echo "https://github.com/search?q=%22$without_suffix%22+password&type=Code" | |
| echo "" | |
| echo " npmrc _auth" |
| package main | |
| import ( | |
| "fmt" | |
| "io" | |
| "log" | |
| "os" | |
| ) | |
| func main() { |
| Invoke-Expression 'AMSI Test Sample: 7e72c3ce-861b-4339-8740-0ac1484c1386' |
| package main | |
| /* | |
| * | |
| * This is just a Go implementation of https://github.com/monoxgas/sRDI/ | |
| * Useful if you're trying to generate shellcode for reflective DLL | |
| * injection in Go, otherwise probably not much use :) | |
| * | |
| * The project, shellcode, most comments within this project | |
| * are all from the original project by @SilentBreakSec's Nick Landers (@monoxgas) |
