Skip to content

Instantly share code, notes, and snippets.

@rzymek
rzymek / bash.md
Created March 15, 2018 11:11
bash scripting workshop notes

Onelines

wget -r -l1 www.lingarogroup.com/about-us

cd www.lingarogroup.com  # use TAB completion

parameter expantion

Done by the shell, before it gets to the command:

echo c*

@rzymek
rzymek / github_bugbountyhunting.md
Created October 7, 2017 07:25 — forked from EdOverflow/github_bugbountyhunting.md
My tips for finding security issues in GitHub projects.

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output
@rzymek
rzymek / vscode
Created September 12, 2017 20:13
visual studio code plugins
ext install path-autocomplete
ext install tslint
ext install typescript-hero
@rzymek
rzymek / createPDF.gs
Last active September 8, 2017 19:48 — forked from andrewroberts/createPDF.gs
This is a Google Apps Script that creates a PDF file using a Google Doc template and the values in a Google Spreadsheet. More details can be found at www.andrewroberts.net/2014/10/google-apps-script-create-pdf/
// dev: andrewroberts.net
// Replace this with ID of your template document.
var TEMPLATE_ID = ''
// var TEMPLATE_ID = '1wtGEp27HNEVwImeh2as7bRNw-tO4HkwPGcAsTrSNTPc' // Demo template
// Demo script - http://bit.ly/createPDF
// You can specify a name for the new PDF file here, or leave empty to use the
// name of the template.
@rzymek
rzymek / ReorderableList.js
Created September 1, 2017 20:06 — forked from jlroettger/ReorderableList.js
React DND and Material UI - Reorderable List
import React, { Component } from 'react'
import { Link } from 'react-router'
// Drag and Drop
import { DragDropContext } from 'react-dnd'
import HTML5Backend from 'react-dnd-html5-backend'
// Material UI
import { List } from 'material-ui/List'
import Subheader from 'material-ui/Subheader'
class ReorderableList extends Component {
@rzymek
rzymek / index.html
Created July 5, 2017 07:52
graphiql
<!--
* Copyright (c) Facebook, Inc.
* All rights reserved.
*
* This source code is licensed under the license found in the
* LICENSE file in the root directory of this source tree.
-->
<!DOCTYPE html>
<html>
<head>
@rzymek
rzymek / curl-format
Created January 18, 2017 16:46
curl -w "@curl-format" -o /dev/null -s ...
\n
time_namelookup: %{time_namelookup}\n
time_connect: %{time_connect}\n
time_appconnect: %{time_appconnect}\n
time_pretransfer: %{time_pretransfer}\n
time_redirect: %{time_redirect}\n
time_starttransfer: %{time_starttransfer}\n
----------\n
time_total: %{time_total}\n
\n
@rzymek
rzymek / pre-commit
Created January 10, 2017 16:17
NOCOMMIT pre-commit hook
#!/bin/bash
# Place in .git/hooks
# chmod +x .git/hooks/pre-commit
FILES_PATTERN='(\..+)?$'
FORBIDDEN='(@?NOCOMMIT|@?COMMITFAIL)'
if ( git diff --cached --name-only | grep -E $FILES_PATTERN | xargs grep -E --with-filename -n $FORBIDDEN ); then
echo "ERROR: @COMMITFAIL or @NOCOMMIT found. Exiting to save you from yourself."
exit 1
@rzymek
rzymek / mbtiles-osmand.sql
Created December 5, 2016 17:58
Extend mbtiles with osmand's .sqllitedb compatibility
-- Unfortunately osmand's .sqlitedb and .mbtiles use the same table name, but with different columns
alter table tiles rename to mbtiles;
-- osmand uses inverted y numbering (compared to mbtiles)
-- The formula to calculate inverted y is: y' = (2^z - 1) - y
-- As sqlite does not support pow() function, here's a table of precalculated (2^z-1) for z from 0 to 25.
create table maxy (y integer, z integer);
CREATE UNIQUE INDEX IF NOT EXISTS maxy_index on maxy (z,y);
insert into maxy(y,z) values(0,0);
@rzymek
rzymek / run.sh
Created November 26, 2016 12:10
adoptable storage
adb shell sm list-disks
adb shell sm list-volumes all
adb shell sm set-force-adoptable true
adb shell sm partition disk:179,64 private
adb shell sm set-force-adoptable false