Skip to content

Instantly share code, notes, and snippets.

View uriellberdeja's full-sized avatar
🏠
Working from home

Uriel Berdeja uriellberdeja

🏠
Working from home
View GitHub Profile
@uriellberdeja
uriellberdeja / frida.js
Created June 11, 2024 05:49
Frida scrpt to hook al methods from a list of classes
Java.perform(()=> {
function getFridaTypeName(javaTypeName) {
const typeMap = {
'void': 'void',
'boolean': 'boolean',
'byte': 'byte',
'char': 'char',
'short': 'short',
'int': 'int',
'long': 'long',
@uriellberdeja
uriellberdeja / frida-compile-jnitrace-engine-package.json
Created June 11, 2024 05:53
Configuration that supports usage of frida-compile along with jnitrace-engine
{
"name": "example",
"version": "1.0.0",
"description": "",
"scripts": {
"build": "frida-compile main.ts -o build.js -c"
},
"author": "",
"license": "ISC",
"devDependencies": {

Notes:

Regarding the interception of HTTP:

We did it through USB reverse tunneling and iptable rules local to the phone.

@uriellberdeja
uriellberdeja / README.md
Last active July 20, 2024 15:04
burp-suite-handy-tips

Filter emails:

[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}

WAF fingerprinting capabilities are banning my Burp browser

Use firefox

@uriellberdeja
uriellberdeja / youtube-parent-guard.js
Created July 16, 2024 23:10
YouTube Parent Guard
// ==UserScript==
// @name YOUTUBE_PARENT_GUARD
// @namespace NAMESPACE
// @version 0.1
// @description Youtube parentig tool
// @match http*://*/*
// @include http*://*/*
// @copyright 2024+, YOURNAME
// ==/UserScript==
@uriellberdeja
uriellberdeja / drvscan.cpp
Created July 19, 2024 03:50 — forked from adrianyy/drvscan.cpp
vulnerable driver scanner
#include <string>
#include <vector>
#include <fstream>
#include <iostream>
#include <filesystem>
#include <Windows.h>
#include <winternl.h>
static_assert( sizeof( void* ) == 8 );
@uriellberdeja
uriellberdeja / vcvarsall.ps1
Created July 19, 2024 18:25
Initialize Visual Studio Developer Powershell from a regular Powershell 7 and Powershell 5.1 session
$paths = @(
"C:\Program Files\Microsoft Visual Studio\2022\Community",
"C:\Program Files\Microsoft Visual Studio\2022\BuildTools",
"C:\Program Files (x86)\Microsoft Visual Studio\2019\Community",
"C:\Program Files (x86)\Microsoft Visual Studio\2019\BuildTools"
)
$VsInstallPath = $null
foreach ($basePath in $paths) {
@uriellberdeja
uriellberdeja / WFUZZ_WIN_NOTES.md
Last active July 20, 2024 15:12
Wfuzz Windows Notes

Use version 3.11, if installed from store the path might be like this:

C:\Users\Redghost\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.11*

Configure launcher to use python version 3.11 and run python using py launcher to initialize virtualenv

py --list 
@uriellberdeja
uriellberdeja / Bash-cheatsheet.md
Created July 29, 2024 23:42
Bash cheatsheet for Pentesters
$ git log --oneline --graph --decorate --all

Create an alias:

$ git config --global alias.tree 'log --oneline --graph --decorate --all'

Then run

@uriellberdeja
uriellberdeja / cups-browsed.md
Created September 26, 2024 22:13 — forked from stong/cups-browsed.md
CUPS disclosure leaked online. Not my report. The original author is @evilsocket

Original report

  • Affected Vendor: OpenPrinting
  • Affected Product: Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and cups-filters.
  • Affected Version: All versions <= 2.0.1 (latest release) and master.
  • Significant ICS/OT impact? no
  • Reporter: Simone Margaritelli [[email protected]]
  • Vendor contacted? yes The vendor has been notified trough Github Advisories and all bugs have been confirmed: