Skip to content

Instantly share code, notes, and snippets.

View sudoaza's full-sized avatar

aza sudoaza

  • Buenos Aires, Argentina
View GitHub Profile
@sudoaza
sudoaza / parsepdf.py
Created August 26, 2024 09:27
Quick and dirty parse PDF file and extract objects/images
import re
import zlib
import argparse
from PIL import Image
def parse_args():
parser = argparse.ArgumentParser(description='Decompress data using zlib')
parser.add_argument('pdf_file', help='The PDF file to analyze')
return parser.parse_args()
@sudoaza
sudoaza / brute_commit.py
Created October 24, 2024 13:00
Bruteforce private commits by their short hash. Based on research from Truffle Sec https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github
#!/usr/bin/env python3
"""
Brute force commit hashes on GitHub projects.
Example usage:
brute_commit.py user/repo >> found_commits.txt
mkdir dump_dir; wget -c -i found_commits.txt -P dump_dir
trufflehog filesystem dump_dir
"""