Thomas Patzke thomaspatzke

Loves to build InfoSec-related tools.

526 followers · 26 following

Code published here is private and not affiliated with my employer.
Germany
http://patzke.org
@[email protected]

View GitHub Profile

Recently created

Least recently created

Recently updated

Least recently updated

thomaspatzke / find_unique.sh

Created January 7, 2015 13:59

Generate a list of files with unique content

find -type f -exec sha256sum {} \; | sort | perl -ne '($h, $f) = /^(\S+)\s+(.*)$/; if (defined $ph && $ph ne $h || !defined $ph) { print "$f\n" } $ph = $h; $pf = $f;'

thomaspatzke / extract_post_parameters_from_burpexport-without_xmlstarlet.sh

Created January 19, 2015 13:24

Extract POST parameter (here javax.faces.ViewState) from files with saved HTTP requests

grep javax.faces.ViewState POSTs.xml | perl -mURI::Escape -ne '/javax\.faces\.ViewState=(.*?)&/; print URI::Escape::uri_unescape($1); print "\n"' | sort -u

thomaspatzke / .vimrc

Last active December 4, 2018 08:50

My .vimrc

	set nocompatible

	set rtp+=~/.vim/bundle/Vundle.vim
	call vundle#begin()
	Plugin 'gmarik/Vundle.vim'
	Plugin 'tpope/vim-fugitive'
	Plugin 'davidhalter/jedi-vim'
	Plugin 'vim-latex/vim-latex'
	Plugin 'vim-syntastic/syntastic'
	Plugin 'scrooloose/nerdtree'

thomaspatzke / Burp-SessionHandlingActionReplaceIDInResponse.py

Created February 2, 2015 11:19

This is a template for a Burp extension that can be used as session handling macro action. It pulls an identifier (here: last part of location header from redirection response) from the first macro response and puts it in the given place of the current request (here: last URL path component). Adapt as needed at the places marked with "CONFIG" co…

	from burp import (IBurpExtender, ISessionHandlingAction)
	import re

	class BurpExtender(IBurpExtender, ISessionHandlingAction):
	def registerExtenderCallbacks(self, callbacks):
	self.callbacks = callbacks
	self.helpers = callbacks.getHelpers()
	callbacks.setExtensionName("Path Parameter Session Handling Action")
	self.callbacks.registerSessionHandlingAction(self)
	self.out = callbacks.getStdout()

thomaspatzke / CSRFToken.py

Created February 3, 2015 14:01

Burp extension: extract CSRF tokens from responses of selected Burp tools and update them with a custom session handling rule.

	from burp import (IBurpExtender, IBurpExtenderCallbacks, ISessionHandlingAction, IHttpListener)
	import re

	class BurpExtender(IBurpExtender, ISessionHandlingAction, IHttpListener):
	def registerExtenderCallbacks(self, callbacks):
	self.callbacks = callbacks
	self.helpers = callbacks.getHelpers()
	callbacks.setExtensionName("Session CSRF Token Handling")
	self.callbacks.registerSessionHandlingAction(self)
	self.callbacks.registerHttpListener(self)

thomaspatzke / hexdump.py

Last active August 29, 2015 14:20

Hex-only dump in Python in one line

print("\n".join([" ".join(["{:02x}".format(c) for c in bin[i:i+16]]) for i in range(0, len(bin), 16)]))

thomaspatzke / net-config.sh

Created January 19, 2016 22:46

Shell script to quickly switch between real Internet connection (NAT) and simulated (INetSim)

	#!/bin/bash

	case "$1" in
	router)
	sysctl -w net.ipv4.ip_forward=1
	iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
	systemctl start dnsmasq.service
	;;
	router-stop)
	sysctl -w net.ipv4.ip_forward=0

thomaspatzke / create_deleter.py

Created January 30, 2016 22:29

Create file deletion script from two 'openssl sha1' outputs. Deletions are done in files referenced in source hash file.

	#!/usr/bin/python3

	from sys import argv, exit
	import re

	hashline_re = re.compile('^SHA1$(.?)$= (.)$')

	dsthashes = dict()

	if len(argv) < 4:

thomaspatzke / nmap-open-ports.sh

Last active December 12, 2023 13:33

Extract all open ports in Host:Port format from nmap XML output

xmlstarlet sel -t -m '//port/state[@state="open"]/parent::port' -v 'ancestor::host/address/@addr' -o : -v './@portid' -n nmap-output.xml

thomaspatzke / proxy_http_connect-portscanner.sh

Created September 1, 2016 13:28

Simple HTTP CONNECT Proxy Portscanner

for (( p=0; p <= 65535; p++ )); do echo "Probing port $p"; echo -n "Port $p: " >> portscan.log; (echo CONNECT targethost:$p HTTP/1.1; echo) | nc -q 3 proxyhost proxyport | head -1 >> portscan.log; done

Older Newer