Skip to content

Instantly share code, notes, and snippets.

View incogbyte's full-sized avatar
🐀
./../../../../../${jndi:ldap://127.0.0.1#{{${hostName}.{lol}}}/{{random}}}

Rodolfo Tavares incogbyte

🐀
./../../../../../${jndi:ldap://127.0.0.1#{{${hostName}.{lol}}}/{{random}}}
152 followers · 84 following
View GitHub Profile
@incogbyte
incogbyte / wordpress_downloader.py
Created July 29, 2022 14:34
download plugins for wordpress
from shutil import ExecError
import requests
from bs4 import BeautifulSoup
import os
import wget
from concurrent.futures import ThreadPoolExecutor
import zipfile
def wordpress_plugin():
urls = []
@incogbyte
incogbyte / mixunpin.js
Last active April 6, 2026 16:51
Frida script to bypass common methods of sslpining Android
console.log("[*] SSL Pinning Bypasses");
console.log(`[*] Your frida version: ${Frida.version}`);
console.log(`[*] Your script runtime: ${Script.runtime}`);
/**
* by incogbyte
* Common functions
* thx apkunpacker, NVISOsecurity, TheDauntless
* Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that.
* !!! THIS SCRIPT IS NOT A SILVER BULLET !!
@incogbyte
incogbyte / options_brute_microsoft.md
Last active December 20, 2022 12:21
options_brute_microsoft 
OPTIONS /Microsoft.Server-ActiveSync
Host: outlook.office365.com
Connection: Close
MS-ASProtocol: 14.0
Content-Length: 0
Authorization: Basic usermail:pass
@incogbyte
incogbyte / burpsuitePassThrough.txt
Created April 7, 2023 20:26
Burp Proxy Pass Through
Burp Suite > Proxy > Options > TLS Pass Through.
Add these:
*.google\.com
.*.gstatic).com
*.mozilla\.com
.*\.googleapis\.com
*.pkil.goog
@incogbyte
incogbyte / unincodes.txt
Created May 1, 2023 12:08
List of useful unicodes to bypass some filters
#### unicodes - single quote
%u0027
%u02b9
%u02bc
%u02c8
%c0%27
%c0%a
%e0%80%a7
@incogbyte
incogbyte / goodDorks.md
Created May 3, 2023 14:45
Good dorks
  • Postman workspace
  • site:postman.com inurl:/workspace "example"
@incogbyte
incogbyte / devpaths.txt
Created May 4, 2023 00:03
Common Dev Paths
gitlab-ci.yml
gitlab-ci.yaml
gitalaci.yml
gitalaci.yml
build.xml
pom.xml
sonar.yml
sonar.yaml
dev-config.yaml
dev-hml.yaml
@incogbyte
incogbyte / mimetypes.txt
Created May 6, 2023 17:05
Common mime types
text/html
text/plain
text/css
application/json
application/javascript
application/xml
application/pdf
image/jpeg
audio/mpeg
video/mp4
@incogbyte
incogbyte / gist:b03f7794a8e2d2e854bb1539d8c64d51
Created May 11, 2023 22:28
FFUF list of urls and save them into a file by name of the domains
#!/bin/bash
## Author: incogbyte
## Usage: ./ffuf_script.sh input.txt
extract_domain() {
echo "$1" | awk -F/ '{print $3}'
}
@incogbyte
incogbyte / permute_wordlist.txt
Created May 21, 2023 13:53
Permute subdomains wordlist
1
10
11
12
13
14
15
16
17
18