ruevaughn / help.md

Created July 30, 2023 12:19 — forked from Neo23x0/help.md

Offensive Research Guide to Help Defense Improve Detection

I've transformed this gist into a git repository.

Whenever you research a certain vulnerability ask yourself these questions and please answer them for us

Logging

Does the exploited service write a log?
(check ls -lrt /var/log or lsof +D /var/log/ or lsof | grep servicename)

ruevaughn / ivre-docker.sh

Created July 30, 2023 12:14 — forked from natesubra/ivre-docker.sh

ivre docker quick run

	# https://github.com/cea-sec/ivre/blob/master/doc/DOCKER.md

	docker pull ivre/db
	docker pull ivre/web

	docker run -d --name ivredb --hostname ivredb \
	--volume "`pwd`/var_lib_mongodb":/var/lib/mongodb \
	--volume "`pwd`/var_log_mongodb":/var/log/mongodb \
	-v /ivredbvol \
	ivre/db

ruevaughn / models.py

Created July 30, 2023 12:11 — forked from hakib/models.py

building-interactive-voice-response-ivr-system-python-django-twilio

	from django.db import models


	class Theater(models.Model):

	class Meta:
	verbose_name = 'Theater'
	verbose_name_plural = 'Theaters'

	name = models.CharField(max_length=50)

ruevaughn / miyagi.py

Created July 30, 2023 12:11 — forked from grizmio/miyagi.py

a function for python2.7 agi using pyst2, it dials an extension with pjsip and get the result status. Useful in a simple ivr

	#!/bin/python2.7

	# python2.7 agi using pyst2
	# A function to dial an extension with pjsip and get the result status

	from asterisk.agi import * # pyst2


	def dial_pjsip(anexo=''):
	"""

ruevaughn / playerror.lua

Created July 30, 2023 12:09 — forked from avimar/playerror.lua

Avi's Freeswitch play error lua script

	calling_card = session:getVariable("calling_card_ivr")


	cause = session:getVariable("originate_disposition")
	cause2=session:getVariable("bridge_hangup_cause")
	if cause == nil then cause="none" end
	session:execute("log", "DEBUG Hangup cause: "..cause);

	if cause2 == nil then cause2="none" end
	session:execute("log", "DEBUG bridge hangup cause: "..cause2);

ruevaughn / machoreader.py

Created July 28, 2023 11:47 — forked from carlospolop/machoreader.py

Print information about a macho binary using python

	import plistlib
	import struct
	import logging
	import lief
	import sys
	from typing import List
	from macholib import MachO, mach_o

	logger = logging.getLogger(__name__)

ruevaughn / find-aws-region.py

Created July 9, 2023 08:15 — forked from LyftGalactic/find-aws-region.py

A quick script to determine AWS Region from IP Address

	from ipaddress import ip_network, ip_address
	import json
	import requests
	import sys

	def find_aws_region():
	ip_json = requests.get('https://ip-ranges.amazonaws.com/ip-ranges.json')
	#ip_json = json.load(open('ip-ranges.json'))
	ip_json = ip_json.json()
	prefixes = ip_json['prefixes']

ruevaughn / content_discovery_nullenc0de.txt

Created July 9, 2023 08:14 — forked from nullenc0de/content_discovery_nullenc0de.txt

content_discovery_nullenc0de.txt

This file has been truncated, but you can view the full file.

	/
	$$$lang-translate.service.js.aspx
	$367-Million-Merger-Blocked.html
	$defaultnav
	${idfwbonavigation}.xml
	$_news.php
	$search2
	£º
	.0
	/0

ruevaughn / auto_git_query

Created July 9, 2023 08:11 — forked from nullenc0de/auto_git_query

Automated Github Queries (Can open 29 tabs at a time)

	https://github.com/search?q=BROWSER_STACK_ACCESS_KEY= OR BROWSER_STACK_USERNAME= OR browserConnectionEnabled= OR BROWSERSTACK_ACCESS_KEY=&s=indexed&type=Code
	https://github.com/search?q=CHROME_CLIENT_SECRET= OR CHROME_EXTENSION_ID= OR CHROME_REFRESH_TOKEN= OR CI_DEPLOY_PASSWORD= OR CI_DEPLOY_USER=&s=indexed&type=Code
	https://github.com/search?q=CLOUDAMQP_URL= OR CLOUDANT_APPLIANCE_DATABASE= OR CLOUDANT_ARCHIVED_DATABASE= OR CLOUDANT_AUDITED_DATABASE=&s=indexed&type=Code
	https://github.com/search?q=CLOUDANT_ORDER_DATABASE= OR CLOUDANT_PARSED_DATABASE= OR CLOUDANT_PASSWORD= OR CLOUDANT_PROCESSED_DATABASE=&s=indexed&type=Code
	https://github.com/search?q=CONTENTFUL_PHP_MANAGEMENT_TEST_TOKEN= OR CONTENTFUL_TEST_ORG_CMA_TOKEN= OR CONTENTFUL_V2_ACCESS_TOKEN=&s=indexed&type=Code
	https://github.com/search?q=-DSELION_BROWSER_RUN_HEADLESS= OR -DSELION_DOWNLOAD_DEPENDENCIES= OR -DSELION_SELENIUM_RUN_LOCALLY=&s=indexed&type=Code
	https://github.com/search?q=ELASTICSEARCH_PASSWORD= OR ELASTICSEARCH_USERNAME= OR EMAIL_NOTIFI

ruevaughn / auto_git_query

Created July 9, 2023 08:10 — forked from ehsahil/auto_git_query

Automated Github Queries (Can open 29 tabs at a time)

	https://github.com/search?q=BROWSER_STACK_ACCESS_KEY= OR BROWSER_STACK_USERNAME= OR browserConnectionEnabled= OR BROWSERSTACK_ACCESS_KEY=&s=indexed&type=Code
	https://github.com/search?q=CHROME_CLIENT_SECRET= OR CHROME_EXTENSION_ID= OR CHROME_REFRESH_TOKEN= OR CI_DEPLOY_PASSWORD= OR CI_DEPLOY_USER=&s=indexed&type=Code
	https://github.com/search?q=CLOUDAMQP_URL= OR CLOUDANT_APPLIANCE_DATABASE= OR CLOUDANT_ARCHIVED_DATABASE= OR CLOUDANT_AUDITED_DATABASE=&s=indexed&type=Code
	https://github.com/search?q=CLOUDANT_ORDER_DATABASE= OR CLOUDANT_PARSED_DATABASE= OR CLOUDANT_PASSWORD= OR CLOUDANT_PROCESSED_DATABASE=&s=indexed&type=Code
	https://github.com/search?q=CONTENTFUL_PHP_MANAGEMENT_TEST_TOKEN= OR CONTENTFUL_TEST_ORG_CMA_TOKEN= OR CONTENTFUL_V2_ACCESS_TOKEN=&s=indexed&type=Code
	https://github.com/search?q=-DSELION_BROWSER_RUN_HEADLESS= OR -DSELION_DOWNLOAD_DEPENDENCIES= OR -DSELION_SELENIUM_RUN_LOCALLY=&s=indexed&type=Code
	https://github.com/search?q=ELASTICSEARCH_PASSWORD= OR ELASTICSEARCH_USERNAME= OR EMAIL_NOTIFI

Chase Jensen ruevaughn