nullenc0de

#!/bin/bash

# Function to display usage/help information
show_help() {
    cat << EOF
Usage: $(basename "$0") [-h] [-i INPUT]

Reconnaissance automation script that combines multiple tools for thorough target scanning.

Options:

nullenc0de

id: exposed-pki-infrastructure
info:
  name: Exposed Internal PKI Infrastructure Detection
  author: nullenc0de
  severity: critical
  description: Detects exposed internal PKI infrastructure including CRL distribution points and OCSP responders
  tags: pki,exposure,misconfig

requests:
  - method: GET

nullenc0de

from typing import List, Dict, Optional
import os
import json
from datetime import datetime
import threading
from queue import Queue
from nxc.helpers.logger import highlight
import re

class ServiceInfo:

nullenc0de

from datetime import datetime
import xml.etree.ElementTree as ET
from typing import List, Dict, Optional
import os
import re
from impacket.dcerpc.v5.dcom.wmi import WBEMSTATUS
from nxc.helpers.logger import highlight

class TaskVulnerability:
    def __init__(self, name: str, path: str, command: str, author: str, 

nullenc0de

from datetime import datetime
from typing import List, Dict
import re
from nxc.helpers.logger import highlight
from concurrent.futures import ThreadPoolExecutor, as_completed
import json

class NXCModule:
    name = "sensitive_search"
    description = "Search for files containing sensitive data patterns in shares with custom regex support"

nullenc0de

# NetExec Runbook

## No Authentication (Anonymous)

### NFS Enumeration
```bash
netexec nfs TARGET_HOST -u "" -p "" --shares
netexec nfs TARGET_HOST -u "" -p "" --enum-shares
```

nullenc0de

id: prototype-pollution-gadget-detector
info:
  name: Prototype Pollution Gadget Detector
  author: nullenc0de
  severity: high
  description: |
    Detects potential prototype pollution gadgets in web applications that could lead to SSRF, RCE or information disclosure.
  
  # References for the issue
  reference:

nullenc0de

[
    {
        "id": 0,
        "request": {
            "method": "GET",
            "baseURL": "https://{TARGET}.atlassian.net",
            "path": [
                "/secure/Signup!default.jspa"
            ],
            "body": null

nullenc0de

import json
import sys
from collections import Counter

def analyze_openapi_spec(spec):
    endpoint_count = 0
    request_count = 0
    endpoints = []
    method_counts = Counter()
    parameter_counts = Counter()

nullenc0de

class IPv6Packet:
    def __init__(self, main_header_length, extension_headers):
        self.main_header_length = main_header_length
        self.extension_headers = extension_headers

def process_packet(packet):
    total_length = packet.main_header_length
    
    # Vulnerable loop: doesn't check for integer underflow
    for header_length in packet.extension_headers: