Syed Umar Arfeen Anon-Exploiter

## aws-s3-buckets-pentest.txt
aws s3 ls s3://s3buckethere --no-sign-request                                                       ## Lists the file in the s3 bucket
aws s3 cp s3://bucketname/filethere.txt . --no-sign-request                                         ## Downloads `filethere.txt` from the s3 bucket in the current directory
aws s3 cp test.txt s3://bucketname --no-sign-request                                                ## Uploads `test.txt` from current directory to the s3 bucket
aws s3api get-bucket-acl --bucket bucketname --no-sign-request                                      ## Shows ACL (Access Control List) of the given bucket
aws s3api get-object-acl --bucket bucketname --key fileons3bucket.ext --no-sign-request             ## Shows ACL (Access Control List) of given object in the bucket

## automateSubdEnum.sh
#!/bin/bash

mainPATH=$(pwd)/
bar="---------------------------------------"

echo -e "\n$bar\n\tSubdomains Enumerator\n$bar\n"

read -p "Please enter target (i.e. site.com): " domain

HOST=$domain

## Dockerfile
FROM kalilinux/kali-rolling:latest
RUN echo "PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '" >> /root/.bashrc

WORKDIR /root/
CMD ["bash"]

## firebase_apiKeys_testing.html
<!DOCTYPE html>
<html>
<head>
	<title></title>
</head>
<body>

    <script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-app.js"></script>

    <!-- If you enabled Analytics in your project, add the Firebase SDK for Analytics -->

## cronjob.sh
#!/bin/bash

archiveName=OSWE-`date +%d_%m_%Y`.tar.gz
cd /home/$USER/

# Cronjob:
# 00 15 * * * /path/cronjob.sh | tee /tmp/cronLogs.txt

tar -czvf $archiveName OSWE/
mv $archiveName /path/ -v

## jwtBuster.py
from sys import argv

import json
import jwt


JWTSECRET 	= "jwtSecretKeyEncryption"
PRIVATEKEY 	= """-----BEGIN RSA PRIVATE KEY-----
MIIEogIBAAKCAQEAnzyis1ZjfNB0bBgKFMSvvkTtwlvBsaJq7S5wA+kzeVOVpVWw
kWdVha4s38XM/pa/yr47av7+z3VTmvDRyAHcaT92whREFpLv9cj5lTeJSibyr/Mr

## commands.matlab
sudo apt-get -y update && \
	sudo apt-get -y upgrade && \
	sudo apt install software-properties-common && \
	sudo add-apt-repository multiverse && \
	sudo dpkg --add-architecture i386 && \
	sudo apt-get -y update && \
	sudo apt-get -y upgrade && \
	sudo systemctl reboot

sudo apt-get -y install steamcmd && \

## .zshrc
# ~/.zshrc file for zsh non-login shells.
# see /usr/share/doc/zsh/examples/zshrc for examples

setopt autocd              # change directory just by typing its name
#setopt correct            # auto correct mistakes
setopt interactivecomments # allow comments in interactive mode
setopt ksharrays           # arrays start at 0
setopt magicequalsubst     # enable filename expansion for arguments of the form ‘anything=expression’
setopt nonomatch           # hide error message if there is no match for the pattern
setopt notify              # report the status of background jobs immediately

## youtube-playlist-reverse.py
import os

playlist 	= "https://www.youtube.com/user/..."
command 	= f"youtube-dl -j --flat-playlist --playlist-reverse {playlist} | jq -r '.id' | sed 's_^_https://youtu.be/_'"

output 		= os.popen(command).read()
print(output)

ytUrls 		= []

## .bashrc
# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples

# If not running interactively, don't do anything
case $- in
    *i*) ;;
      *) return;;
esac
	aws s3 ls s3://s3buckethere --no-sign-request ## Lists the file in the s3 bucket
	aws s3 cp s3://bucketname/filethere.txt . --no-sign-request ## Downloads `filethere.txt` from the s3 bucket in the current directory
	aws s3 cp test.txt s3://bucketname --no-sign-request ## Uploads `test.txt` from current directory to the s3 bucket
	aws s3api get-bucket-acl --bucket bucketname --no-sign-request ## Shows ACL (Access Control List) of the given bucket
	aws s3api get-object-acl --bucket bucketname --key fileons3bucket.ext --no-sign-request ## Shows ACL (Access Control List) of given object in the bucket
	#!/bin/bash

	mainPATH=$(pwd)/
	bar="---------------------------------------"

	echo -e "\n$bar\n\tSubdomains Enumerator\n$bar\n"

	read -p "Please enter target (i.e. site.com): " domain

	HOST=$domain
	FROM kalilinux/kali-rolling:latest
	RUN echo "PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '" >> /root/.bashrc

	WORKDIR /root/
	CMD ["bash"]
	<!DOCTYPE html>
	<html>
	<head>
	<title></title>
	</head>
	<body>

	<script src="https://www.gstatic.com/firebasejs/7.6.1/firebase-app.js"></script>

	<!-- If you enabled Analytics in your project, add the Firebase SDK for Analytics -->
	#!/bin/bash

	archiveName=OSWE-`date +%d_%m_%Y`.tar.gz
	cd /home/$USER/

	# Cronjob:
	# 00 15 * * * /path/cronjob.sh \| tee /tmp/cronLogs.txt

	tar -czvf $archiveName OSWE/
	mv $archiveName /path/ -v
	from sys import argv

	import json
	import jwt


	JWTSECRET = "jwtSecretKeyEncryption"
	PRIVATEKEY = """-----BEGIN RSA PRIVATE KEY-----
	MIIEogIBAAKCAQEAnzyis1ZjfNB0bBgKFMSvvkTtwlvBsaJq7S5wA+kzeVOVpVWw
	kWdVha4s38XM/pa/yr47av7+z3VTmvDRyAHcaT92whREFpLv9cj5lTeJSibyr/Mr
	sudo apt-get -y update && \
	sudo apt-get -y upgrade && \
	sudo apt install software-properties-common && \
	sudo add-apt-repository multiverse && \
	sudo dpkg --add-architecture i386 && \
	sudo apt-get -y update && \
	sudo apt-get -y upgrade && \
	sudo systemctl reboot

	sudo apt-get -y install steamcmd && \
	# ~/.zshrc file for zsh non-login shells.
	# see /usr/share/doc/zsh/examples/zshrc for examples

	setopt autocd # change directory just by typing its name
	#setopt correct # auto correct mistakes
	setopt interactivecomments # allow comments in interactive mode
	setopt ksharrays # arrays start at 0
	setopt magicequalsubst # enable filename expansion for arguments of the form ‘anything=expression’
	setopt nonomatch # hide error message if there is no match for the pattern
	setopt notify # report the status of background jobs immediately
	import os

	playlist = "https://www.youtube.com/user/..."
	command = f"youtube-dl -j --flat-playlist --playlist-reverse {playlist} \| jq -r '.id' \| sed 's_^_https://youtu.be/_'"

	output = os.popen(command).read()
	print(output)

	ytUrls = []
	# ~/.bashrc: executed by bash(1) for non-login shells.
	# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
	# for examples

	# If not running interactively, don't do anything
	case $- in
	i) ;;
	*) return;;
	esac