Skip to content

Instantly share code, notes, and snippets.

View mswell's full-sized avatar
🎯
Focusing

Wellington Moraes mswell

🎯
Focusing
View GitHub Profile
@mswell
mswell / nowafpls___8KB.json
Created May 26, 2024 14:14 — forked from Rhynorater/nowafpls___8KB.json
nowafpls - Caido Convert Workflow
{
"description": "Bypass WAFs with 8KB Padding.",
"edition": 2,
"graph": {
"edges": [
{
"source": {
"exec_alias": "exec",
"node_id": 2
},
@mswell
mswell / 30-touchpad.conf
Created May 21, 2024 17:52 — forked from miguelmota/30-touchpad.conf
Arch linux enable tap to click on touchpad
Section "InputClass"
Identifier "touchpad"
Driver "libinput"
MatchIsTouchpad "on"
Option "Tapping" "on"
Option "TappingButtonMap" "lmr"
EndSection
@mswell
mswell / bucket-disclose.sh
Created April 25, 2024 15:45 — forked from fransr/bucket-disclose.sh
Using error messages to decloak an S3 bucket. Uses soap, unicode, post, multipart, streaming and index listing as ways of figure it out. You do need a valid aws-key (never the secret) to properly get the error messages
#!/bin/bash
# Written by Frans Rosén (twitter.com/fransrosen)
_debug="$2" #turn on debug
_timeout="20"
#you need a valid key, since the errors happens after it validates that the key exist. we do not need the secret key, only access key
_aws_key="AKIA..."
H_ACCEPT="accept-language: en-US,en;q=0.9,sv;q=0.8,zh-TW;q=0.7,zh;q=0.6,fi;q=0.5,it;q=0.4,de;q=0.3"
H_AGENT="user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"
@mswell
mswell / _deobfuscating-unminifying-obfuscated-web-app-code.md
Created March 23, 2024 01:01 — forked from 0xdevalias/_deobfuscating-unminifying-obfuscated-web-app-code.md
Some notes and tools for reverse engineering / deobfuscating / unminifying obfuscated web app code
@mswell
mswell / cloud_metadata.txt
Created March 9, 2024 01:09 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## IPv6 Tests
http://[::ffff:169.254.169.254]
http://[0:0:0:0:0:ffff:169.254.169.254]
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
@mswell
mswell / t490-arch-install-steps.sh
Last active March 1, 2024 20:04 — forked from davidpeach/t490-arch-install-steps.sh
T490 arch install steps
# These are the steps I take to install a fresh copy of Arch Linux on to a Lenovo Thinkpad T490
# Spec: i7; 40gb RAM;
# This will go from the very start up to having a base installation ready to add you chosen window manager or desktop environment.
# Make a bootable usb stick with the latest version of Arch Linux on.
# Plug to into computer and boot.
# Connecting to Internet (wifi)
iwctl device list
@mswell
mswell / cloud_metadata.txt
Created November 29, 2023 22:26 — forked from jhaddix/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
@mswell
mswell / gist:348493f33c061b15203f379de8453251
Created February 22, 2023 14:00 — forked from agungf/gist:8803512
Remove passphrase (password) from private RSA key
Should also work for:
[v] any OpenSSH installation
Given, your key is in id_rsa
1
Passphrase is needed?
Try some host which has your public key (id_rsa.pub)
.php
.html
.txt
.htm
.aspx
.asp
.js
.css
.pgsql.txt
.mysql.txt
@mswell
mswell / docker_compose_cheatsheet.md
Created November 17, 2022 19:12 — forked from jonlabelle/docker_compose_cheatsheet.md
Docker Compose Cheatsheet