Dana Epp DanaEpp

## guid_reaper.py
#!/bin/env python3

import argparse
import datetime
import re
import sys
import uuid

###############################################################################
# Based off of Daniel Thatcher's guid tool

## dump-endpoints.jq
.paths | to_entries | map(select(.key | test("^x-") | not)) | map ( .key as $path | .value | to_entries | map( select( .key | IN("get", "put", "post", "delete", "options", "head", "patch", "trace")) | { method: .key, path: $path, summary: .value.summary?, deprecated: .value.deprecated?  })[] ) | map( .method + "\t" + .path + "\t" + .summary + (if .deprecated then " (deprecated)" else "" end)) []

## request_logger.py
#!/bin/env python3

"""
request_logger.py

A simple HTTP server that will dump the requests being mirrored from an implant on an API server

WARNING: This will record all header and body content of a request to a JSON file. To reduce the risk of
information disclosure, care should be placed in the ACL of the output file.

## ssti-payloads.txt
{{7*7}}
${7*7}
<%= 7*7 %>
${{7*7}}
#{7*7}
*{7*7}

## txt_to_postman_b64_json.py
#!/usr/bin/env python3

from argparse import ArgumentParser, Namespace
import os
import base64
import json

def main(srcFile: str, dstFile:str) -> None:

        if not os.path.isfile(srcFile):

## har_capture_reader.py
rom base64 import b64decode
import os
from typing import Iterator, Union
import json_stream

# This HAR capture reader was taken from mitmproxy2swagger and slightly modified to work for our needs.
# See https://github.com/alufers/mitmproxy2swagger/blob/master/mitmproxy2swagger/har_capture_reader.py

class HarFlowWrapper:
    def __init__(self, flow: dict):

## sensitive_data_detector.py
import json
import sys
from typing import List
from dataclasses import dataclass

from presidio_analyzer import AnalyzerEngine, RecognizerResult
import argparse
from har_capture_reader import HarCaptureReader

analyzer: AnalyzerEngine = AnalyzerEngine()
	#!/bin/env python3

	import argparse
	import datetime
	import re
	import sys
	import uuid

	###############################################################################
	# Based off of Daniel Thatcher's guid tool
	#!/bin/env python3

	"""
	request_logger.py

	A simple HTTP server that will dump the requests being mirrored from an implant on an API server

	WARNING: This will record all header and body content of a request to a JSON file. To reduce the risk of
	information disclosure, care should be placed in the ACL of the output file.
	#!/usr/bin/env python3

	from argparse import ArgumentParser, Namespace
	import os
	import base64
	import json

	def main(srcFile: str, dstFile:str) -> None:

	if not os.path.isfile(srcFile):
	rom base64 import b64decode
	import os
	from typing import Iterator, Union
	import json_stream

	# This HAR capture reader was taken from mitmproxy2swagger and slightly modified to work for our needs.
	# See https://github.com/alufers/mitmproxy2swagger/blob/master/mitmproxy2swagger/har_capture_reader.py

	class HarFlowWrapper:
	def __init__(self, flow: dict):
	import json
	import sys
	from typing import List
	from dataclasses import dataclass

	from presidio_analyzer import AnalyzerEngine, RecognizerResult
	import argparse
	from har_capture_reader import HarCaptureReader

	analyzer: AnalyzerEngine = AnalyzerEngine()