Lem E. Tweakit superswan

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

This page is a curated collection of Jupyter/IPython notebooks that are notable for some reason. Feel free to add new content here, but please try to only include links to notebooks that include interesting visual or technical content; this should not simply be a dump of a Google search on every ipynb file out there.

Important contribution instructions: If you add new content, please ensure that for any notebook you link to, the link is to the rendered version using nbviewer, rather than the raw file. Simply paste the notebook URL in the nbviewer box and copy the resulting URL of the rendered version. This will make it much easier for visitors to be able to immediately access the new content.

Note that Matt Davis has conveniently written a set of bookmarklets and extensions to make it a one-click affair to load a Notebook URL into your browser of choice, directly opening into nbviewer.

Charts are from different sources and thus colors are inconsistent, please carefully read the chart's legends.

Like this? Check React Native vs Flutter: https://gist.github.com/tkrotoff/93f5278a4e8df7e5f6928eff98684979

Stack Overflow trends

https://insights.stackoverflow.com/trends?tags=reactjs%2Cvue.js%2Cangular%2Csvelte%2Cangularjs%2Cvuejs3

	# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
	# tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

	# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
	# https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

	# New function naming schema:
	# Verbs:
	# Get : retrieve full raw data sets
	# Find : ‘find’ specific data entries in a data set

	if [ "$#" -ne 3 ]; then
	echo "Usage: nmap-tcp-full.sh <TCP-QUICK-RESULTS.XML> <TARGET> <OUTPUT-FILENAME>"
	exit 1
	fi

	nmap -nvv -Pn -sSV -T1 -p$(cat $1 \| grep portid \| grep protocol=\"tcp\" \| cut -d'"' -f4 \| paste -sd "," -) --version-intensity 9 -A -oA $3 $2

	#!/usr/bin/python
	#!/usr/bin/env python
	#######################################################################
	#' Gunz ButterFly Macro '#
	#' [email protected] '#
	#' Copyright © 2018 Twiender™ '#
	#' Copyright © 2018 CloudBots® '#
	#' All Rights Reserved. '#
	#######################################################################
	import keyboard #https://github.com/boppreh/keyboard.git


	type Set struct {
	list map[int]struct{} //empty structs occupy 0 memory
	}

	func (s *Set) Has(v int) bool {
	_, ok := s.list[v]
	return ok
	}

	# Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://api.cacher.io/raw/0fcd76d0761e565a8c4e/10eb91268af60bb8abb2/start-cleanup'))

	Function Start-Cleanup {
	<#
	.SYNOPSIS
	Automate cleaning up a C:\ drive with low disk space

	.DESCRIPTION
	Cleans the C: drive's Window Temperary files, Windows SoftwareDistribution folder,
	the local users Temperary folder, IIS logs(if applicable) and empties the recycling bin.

	#!/usr/bin/env python
	#
	# Scrape Doh provider URLs from Curl's DNS-over-HTTPS wiki (https://raw.githubusercontent.com/wiki/curl/curl/DNS-over-HTTPS).
	#
	# Example usage: ./scrape_doh_providers.py '"{} - {}".format(o["url"], o["name"])'
	#
	import argparse
	import re
	import urllib.request

	0
	00
	01
	02
	03
	1
	1.0
	10
	100
	1000