Skip to content

Instantly share code, notes, and snippets.

View antonydevanchi's full-sized avatar
💭
I may be slow to respond.

Anton Piskunov antonydevanchi

💭
I may be slow to respond.
View GitHub Profile
@dwisiswant0
dwisiswant0 / nucleir.sh
Last active May 3, 2022 12:39
Automate nuclei
nucleir() {
local TPL="$HOME/Documents/nuclei-templates"
[[ -z "${1}" ]] && { echo "-target/-l ?"; return; }
[[ -z "${2}" ]] && { echo "Input target?"; return; }
local T=""
for i in `ls -1d ${TPL}/*/`; do
if [[ ! "${i}" =~ (brute-force|examples|payloads) ]]; then
@antonydevanchi
antonydevanchi / get-user-agents.shitbash
Last active February 7, 2021 20:56
Parse custom Laravel logs and get list with only unique User-Agents
# Okay.
# It's just a few lines in «shitbash» language.
# Shitbash is awesome! It's great tool for scripts which you run once.
# So... Oh, yeah! You can go fuck yourself if you want say something about quality of this line.
cat storage/logs/laravel.log | grep 'User-Agent:' | sort --unique
User-Agent: node-fetch/1.0 (+https://github.com/bitinn/node-fetch)
User-Agent: Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.2.15 Version/10.01
User-Agent: Pandalytics/1.0 (https://domainsbot.com/pandalytics/)
@antonydevanchi
antonydevanchi / get-subdomains.shitbash
Created July 26, 2020 04:46
Parse dnstap.log and get list with only unique subdomains
# Okay.
# It's just a few lines in «shitbash» language.
# Shitbash is awesome! It's great tool for scripts which you run once.
# So... Oh, yeah! You can go fuck yourself if you want say something about quality of this line.
dnstap -r /var/log/knot.tap > /opt/dnstap.log
07:35:58.000000 AQ 0.0.0.0 UDP 42b "domain.tld." IN A
07:35:59.000000 AQ 0.0.0.0 UDP 42b "domain.tld." IN A
07:35:59.000000 AQ 0.0.0.0 UDP 42b "domain.tld." IN AAAA
@antonydevanchi
antonydevanchi / 00-all.txt
Last active March 23, 2023 12:34
List of values HTTP Header "User-Agent" which you may meet in the real world. Crafted by hands from nginx's access.log entire many high-loaded projects
"Mozilla/5.0
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
'Cloud mapping experiment. Contact [email protected]'
'Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/'
() { :; }; echo ; echo ; /bin/cat /etc/passwd
(CASE WHEN (1933=6210) THEN 'Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/531.4 (KHTML, like Gecko) Chrome/3.0.194.0 Safari/531.4' ELSE 1933*(SELECT 1933 FROM DUAL UNION SELECT 6210 FROM DUAL) END)
(CASE WHEN (3405=3405) THEN 3405 ELSE 3405*(SELECT 3405 FROM DUAL UNION SELECT 8193 FROM DUAL) END)
(CASE WHEN (5046=4939) THEN 5046 ELSE 5046*(SELECT 5046 FROM DUAL UNION SELECT 4939 FROM DUAL) END)
(CASE WHEN (7404=7404) THEN 'Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/531.4 (KHTML, like Gecko) Chrome/3.0.194.0 Safari/531.4' ELSE 7404*(SELECT 7404 FROM DUAL UNION SELECT 6679 FROM DUAL) END)
// Конфгурируем Yandex.Cloud provider
provider "yandex" {
zone = "ru-central1-a"
}
// Объявляем переменную с названием Организации на гитхабе.
// К сожалению github provider не создает ресурсы `github_actions_secret` в личных репах
// https://github.com/terraform-providers/terraform-provider-github/issues/422
// К счастью базовая функциональность организаций теперь бесплатна.
variable "github_organization" {
@ThisNils
ThisNils / deviceauth.js
Last active October 9, 2021 22:07
Example on how to create and use device auths.
const request = require('request-promise');
const fs = require('fs').promises;
const BASE_URL = 'https://www.epicgames.com/id/api';
const BASE_PROD = 'https://account-public-service-prod03.ol.epicgames.com/account/api/oauth';
const DEVICE_AUTH = 'https://account-public-service-prod.ol.epicgames.com/account/api/public/account';
const USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36';
const IOS_TOKEN = 'MzQ0NmNkNzI2OTRjNGE0NDg1ZDgxYjc3YWRiYjIxNDE6OTIwOWQ0YTVlMjVhNDU3ZmI5YjA3NDg5ZDMxM2I0MWE=';
const LAUNCHER_TOKEN = 'MzRhMDJjZjhmNDQxNGUyOWIxNTkyMTg3NmRhMzZmOWE6ZGFhZmJjY2M3Mzc3NDUwMzlkZmZlNTNkOTRmYzc2Y2Y=';
#!/bin/bash
#
# 実行方法
#
# Mac のターミナルで以下を入力して実行
# sh -c "$(curl -fsSL https://gist.github.com/blendthink/5ca7dd072db6b0ebe5af8189d2cc5aad/raw)"
#
# 公式のドキュメントは以下
# https://developer.apple.com/documentation/technologies
@Terbau
Terbau / AccountMutation.graphql
Created February 29, 2020 18:15
Epic GraphQL Requests
mutation AccountMutation($twoFactorRequest: TwoFactorRequest!, $type: [String]!) {
Account {
# update two factor authentication
updateTwoFactorAuthentication(twoFactorRequest: $twoFactorRequest) { #Type: AccountMutationStatus
success #Type: Boolean
}
# Remove authentication method
removeThirdPartyLink(type: $type) { #Type: AccountMutationStatus
success #Type: Boolean
}
@russjones
russjones / run.sh
Last active September 23, 2022 14:57
A script to demonstrate Teleport Enhanced Session Recording.
#!/bin/bash
set -euo pipefail
RELEASE="teleport-v4.2.3-linux-amd64-bin.tar.gz"
if [[ $EUID -ne 0 ]]; then
echo "--> Please run this script as root or sudo."
exit 1
fi
@Ruzgfpegk
Ruzgfpegk / wp-perf.md
Last active June 28, 2025 03:36
WordPress Performance & Development tips