Skip to content

Instantly share code, notes, and snippets.

View sancelisso's full-sized avatar
💻
CyberSecurity Analyst | OSCP | CEH Practical | eJPT | CTF Player

Sancelisso sancelisso

💻
CyberSecurity Analyst | OSCP | CEH Practical | eJPT | CTF Player
View GitHub Profile
@Zeyad-Azima
Zeyad-Azima / shodrecon.py
Created May 2, 2021 22:46
A simple shodan recon script for bug bounty
#By: Zeyad Azima (https://github.com/Zeyad-Azima)
# install:
## pip3 install requests
## pip3 install shodan
# Run: python3 shodrecon.py target
import shodan, requests, json, threading, sys
# Your Api key here
API_KEY = ""
@sancelisso
sancelisso / ssrf.sh
Created May 8, 2020 11:57 — forked from hussein98d/ssrf.sh
This script takes a domain name and a callback server, parses links , appends SSRF parameters and fire the requests.
echo "Blind SSRF testing - append to parameters and add new parameters @hussein98d"
echo "Usage: bash script.sh domain.com http://server-callbak"
echo "This script uses https://github.com/ffuf/ffuf, https://github.com/lc/gau, https://github.com/tomnomnom/waybackurls"
if [ -z "$1" ]; then
echo >&2 "ERROR: Domain not set"
exit 2
fi
if [ -z "$2" ]; then
echo >&2 "ERROR: Sever link not set"
exit 2
@hussein98d
hussein98d / ssrf.sh
Created May 7, 2020 02:09
This script takes a domain name and a callback server, parses links , appends SSRF parameters and fire the requests.
echo "Blind SSRF testing - append to parameters and add new parameters @hussein98d"
echo "Usage: bash script.sh domain.com http://server-callbak"
echo "This script uses https://github.com/ffuf/ffuf, https://github.com/lc/gau, https://github.com/tomnomnom/waybackurls"
if [ -z "$1" ]; then
echo >&2 "ERROR: Domain not set"
exit 2
fi
if [ -z "$2" ]; then
echo >&2 "ERROR: Sever link not set"
exit 2
@andripwn
andripwn / poc.js
Created January 23, 2020 16:29
PDF Bypass - Cross-site Scripting (XSS)
app.alert("XSS")
# Author: @chaignc
# Two commands in this script:
# record2discord => send all typed bash command to your discord channel, see bellow for the blacklist
# last2discord => send the last typed command to your discord channel.
DISCORD_WEBHOOK_URL="Your_Discord_WebHook_URL" # UPDATE this with your web hook (take 2 minutes and read about this online)
_send2discord() {
# Blacklist some commands
[[ ! $BASH_COMMAND =~ .*autojump.* ]] && \
@TolgaBagci
TolgaBagci / Cisco Packet Tracer 7.2.1.md
Last active May 8, 2021 12:25
Cisco Packet Tracer 7.2.1

How to Download Cisco Packet Tracer 7.3.0

Cisco has released Cisco Packet Tracer 7.3.0, a specific, powerful and free program that Cisco Networking Academy has developed for its students.

Cisco Packet Tracer 7.3 has many new features. The redesigned theme of Packet Tracer 7.3.0 looks great.

Users who want to download Cisco Packet Tracer 7.3.0 can register with the Netacad website and download the program to their computers.

How to Download Cisco Packet Tracer 7.3.0 for Windows 32 Bit/64 Bit and Linux 64 Bit

@nickrouty
nickrouty / rd-class-text-extraction.php
Created May 9, 2018 04:14
Class for extraction the text from doc, docx, xlsx, pptx and wrapper for 3rd party pdf to text library.
<?php
/**
* Class RD_Text_Extraction
*
* Example usage:
*
* $response = RD_Text_Extraction::convert_to_text($path_to_valid_file);
*
* For PDF text extraction, this class requires the Smalot\PdfParser\Parser class.
@YannBouyeron
YannBouyeron / Le chiffrage RSA avec le module PyCrypto.md
Last active May 15, 2023 01:17
Le chiffrement RSA avec le module PyCrypto.

Le chiffrement RSA avec le module PyCrypto.

Le chiffrement RSA est un chiffrement asymétrique.

Le principe du chiffrement asymétrique

Oumar voudrait pouvoir correspondre secrètement avec Aminata , sans que Sarah ne puisse lire les messages que Aminata lui envoie. Oumar génère un jeu de deux clés de chiffrement:

  • une clé publique , qu'il envoie à Aminata, et qui permettra à Aminata de chiffrer les messages qu'elle enverra à Oumar
@AliMD
AliMD / install-doceker.md
Last active October 24, 2023 07:30
Install docker on linux as easy as possible

Install Docker on linux

Any distribution of architecture as easy as possible.

# Install docker latest version from original website
curl -fsSL https://get.docker.com/ | sh

# Adding your user to the "docker" group
sudo usermod -aG docker $(whoami)
## you will have to log out and back in for this to take effect!

radare2

load without any analysis (file header at offset 0x0): r2 -n /path/to/file

  • analyze all: aa
  • show sections: iS
  • list functions: afl
  • list imports: ii
  • list entrypoints: ie
  • seek to function: s sym.main