st3rven’s gists

st3rven / m365_osint_recon.py

Created August 27, 2025 20:23 — forked from HackingLZ/m365_osint_recon.py

	#!/usr/bin/env python3
	"""
	M365 OSINT Reconnaissance Tool
	Based on techniques from: https://dstreefkerk.github.io/2025-07-m365-email-osint-after-lockdown/

	This script performs modern M365/Azure AD reconnaissance after Microsoft's lockdown of traditional
	enumeration methods. It uses multiple validation techniques to discover organizational information
	and attempts to infer MOERA domains.
	"""

st3rven / reconftw.cfg

Created March 11, 2025 01:07 — forked from jhaddix/reconftw.cfg

reconFTW config file: NO google/osint, wordlist creation, nuclei js analysis

	#################################################################
	# reconFTW config file #
	#################################################################

	# General values
	tools=~/Tools # Path installed tools
	SCRIPTPATH="$( cd "$(dirname "$0")" >/dev/null 2>&1 ; pwd -P )" # Get current script's path
	profile_shell=".$(basename $(echo $SHELL))rc" # Get current shell profile
	reconftw_version=$(git rev-parse --abbrev-ref HEAD)-$(git describe --tags) # Fetch current reconftw version
	generate_resolvers=false # Generate custom resolvers with dnsvalidator

st3rven / query_chrome_history.py

Last active February 14, 2024 18:17

Script that allows you to query for urls in 'History' file of the Chrome browser

	import os
	import shutil
	import sqlite3
	import sys
	from datetime import datetime, timedelta
	import argparse
	import warnings

	parser = argparse.ArgumentParser(description="This script allows you to query for urls in a 'History' file of the Chrome browser",
	formatter_class=argparse.ArgumentDefaultsHelpFormatter)

st3rven / mixunpin.js

Created December 12, 2022 17:15 — forked from incogbyte/mixunpin.js

Frida script to bypass common methods of sslpining Android

	console.log("[*] SSL Pinning Bypasses");
	console.log(`[*] Your frida version: ${Frida.version}`);
	console.log(`[*] Your script runtime: ${Script.runtime}`);

	/**
	* by incogbyte
	* Common functions
	* thx apkunpacker, NVISOsecurity, TheDauntless
	* Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that.
	* !!! THIS SCRIPT IS NOT A SILVER BULLET !!

st3rven / wp_fix_permissions.sh

Created August 2, 2020 03:30

fix permissions for wordpress

	#!/bin/bash
	#
	# from http://codex.wordpress.org/Hardening_WordPress#File_permissions
	#
	#
	WP_OWNER=nginx # <-- wordpress owner ( for default : nginx )
	WP_GROUP=nginx # <-- wordpress group ( for default : nginx )
	WP_ROOT= /../././ # <-- wordpress root directory
	WS_GROUP=nginx # <-- webserver group ( for default : nginx )

st3rven / vmware_vmmon_fix.sh

Last active February 2, 2025 10:15

Fix for vmware vmmon and vmnet issues

	#!/bin/sh

	# Uncomment this is you want some more verbose output to see what is happening
	#set -x

	## Variables
	# Change this directory name if you want to place these somewhere else
	_projectdir=~/projects
	_gitrepo=https://github.com/mkubecek/vmware-host-modules.git
	if [ $(grep -q "workstation.product.version" /etc/vmware/config;echo $?) -eq 0 ];then

sterven st3rven