yehgdotnet

( find . -type d -name ".git" && find . -name ".gitignore" && find . -name ".gitmodules" ) | xargs rm -rf

yehgdotnet

git add -A
echo "Press enter to commit"
read varname
git commit --all -m "$1"
echo "Press enter to push"
read varname
git push

yehgdotnet

import sys
import requests
import threading
import HTMLParser
from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler

'''
Description: Reverse MSSQL shell through xp_cmdshell + certutil for exfiltration
Author: @xassiz
'''

yehgdotnet

xxd -p .DS_Store  |  sed 's/00//g' | tr -d '\n' | sed 's/\([0-9A-F]\{2\}\)/0x\1 /g' | xxd -r -p | strings | sed 's/ptb[LN]ustr//g'

yehgdotnet

# https://github.com/python-security/pyt - python secure code scanner

@echo off 
IF %1.==. GOTO No1
IF %2.==. GOTO Missing_Argument

set dir=%1
set type=%2

dir /s /b %dir% | find ".py" > source_listing.txt

yehgdotnet

# https://docs.djangoproject.com/en/2.0/ref/settings/

# https://docs.djangoproject.com/en/2.0/ref/settings/#csrf-cookie-httponly
# Ensure malicious script cannot access CSRF cookie 
CSRF_COOKIE_HTTPONLY = True

# https://docs.djangoproject.com/en/2.0/ref/settings/#csrf-use-sessions
#  Using session is safer than cookie as the former is server-side storage whilst the former is client-side stoage
CSRF_USE_SESSIONS = True

yehgdotnet

def load_env(env_name):
    import os
    if not os.environ.get(env_name):
       print(env_name + " is not defined")
       raise SystemExit
    else:   
        env_name = os.environ[env_name]      

yehgdotnet

gplaycli.conf
[Credentials]
gmail_address=
gmail_password=
token=True
android_ID=
language=en_US
token_url=
[Cache]
token=~/.cache/gplaycli/token

yehgdotnet

{ 
  "name" : "hacker", 
  "level" : "1337"
}

yehgdotnet

ac
ad
ae
af
ag
ai
al
am
an
ao