nullenc0de

# NetExec Runbook

## No Authentication (Anonymous)

### NFS Enumeration
```bash
netexec nfs TARGET_HOST -u "" -p "" --shares
netexec nfs TARGET_HOST -u "" -p "" --enum-shares
```

nullenc0de

id: prototype-pollution-gadget-detector
info:
  name: Prototype Pollution Gadget Detector
  author: nullenc0de
  severity: high
  description: |
    Detects potential prototype pollution gadgets in web applications that could lead to SSRF, RCE or information disclosure.
  
  # References for the issue
  reference:

nullenc0de

[
    {
        "id": 0,
        "request": {
            "method": "GET",
            "baseURL": "https://{TARGET}.atlassian.net",
            "path": [
                "/secure/Signup!default.jspa"
            ],
            "body": null

nullenc0de

import json
import sys
from collections import Counter

def analyze_openapi_spec(spec):
    endpoint_count = 0
    request_count = 0
    endpoints = []
    method_counts = Counter()
    parameter_counts = Counter()

nullenc0de

class IPv6Packet:
    def __init__(self, main_header_length, extension_headers):
        self.main_header_length = main_header_length
        self.extension_headers = extension_headers

def process_packet(packet):
    total_length = packet.main_header_length
    
    # Vulnerable loop: doesn't check for integer underflow
    for header_length in packet.extension_headers:

nullenc0de

id: suspicious-extensions-rce

info:
  name: Suspicious File Extensions - Potential RCE
  author: Nullenc0de
  severity: medium
  description: Detects files with potentially suspicious extensions that could be used for Remote Code Execution (RCE). Scan your AppData folder.

file:
  - extensions:

nullenc0de

#!/bin/bash

# Configuration
LOCAL_PORT=8834
JUMP_SERVER="[email protected]"
JUMP_KEY="./ssh.pem"
NESSUS_SERVER="[email protected]"
NESSUS_KEY="./ssh.pem"
NESSUS_PORT=8834

nullenc0de

id: aws-cognito-misconfiguration-markers

info:
  name: AWS Cognito Misconfiguration Markers
  author: nullenc0de
  severity: high
  description: Detects potential AWS Cognito misconfigurations by searching for sensitive markers in JavaScript files.
  reference: https://www.yassineaboukir.com/talks/NahamConEU2022.pdf
  tags: aws,cognito,misconfiguration,javascript

nullenc0de

(ip.src in {
    4.0.0.0/8
    9.0.0.0/8
    13.0.0.0/8
    20.0.0.0/8
    23.96.0.0/13
    40.0.0.0/8
    51.0.0.0/8
    52.0.0.0/8
    57.0.0.0/8

nullenc0de

#!/bin/bash

# Function to add items to the todo list
add_to_todo() {
  local item="$1"
  echo "$item" >> "${folder_name}/todo.txt"
}

# Function to send alerts via webhook
send_alert() {