Skip to content

Instantly share code, notes, and snippets.

Keybase proof

I hereby claim:

  • I am Ge0rg3 on github.
  • I am georgeomnet (https://keybase.io/georgeomnet) on keybase.
  • I have a public key whose fingerprint is 6772 8038 4305 B845 C683 E396 B5A3 FFF0 ACAD E1BD

To claim this, I am signing this object:

@Ge0rg3
Ge0rg3 / PVD.py
Last active March 22, 2022 00:53
Python Pixel Value Differencing test implementation. Can iterate via ROW/COL, and optionally in zigzag.
import numpy as np
import math
from PIL import Image
img = "pvd_test.png"
RANGES = [8, 8, 16, 32, 64, 128]
SECRET_STRING = "HELLO WORLD "*50
# Generate range table
RANGE_TABLE = []
@Ge0rg3
Ge0rg3 / python_2d_iteration.py
Created March 20, 2022 20:51
Reference code for iterating through a 2d array (not literally, in this sense) via either Row/Col, and optionally in a zigzag pattern.
pixels_array = [
0, 1, 2, 3,
4, 5, 6, 7,
8, 9, 10, 11
]
width, height = (4, 3)
order = "ROW"
zigzag = True
import re
import requests as rq
from subprocess import Popen
from time import sleep
gift_card_regex = r"[0-9a-z]{4}\s[0-9a-z]{4}\s[0-9a-z]{4}\s[0-9a-z]{4}"
while True:
try:
resp = rq.get("https://discord.com/api/v9/guilds/870275171938873395/messages/search?author_id=864079810829484062", headers={

Keybase proof

I hereby claim:

  • I am ge0rg3 on github.
  • I am georgeomnet (https://keybase.io/georgeomnet) on keybase.
  • I have a public key ASBWXP-OSg9kHKlXWk8dNKmI8xeHghRoiR3NclKJ9eV75go

To claim this, I am signing this object:

@Ge0rg3
Ge0rg3 / bucket_finder.rb
Created May 30, 2020 16:12
DigiNinja's bucket_finder tool, but optimised for use as a sub-process (stdout is immediately flushed to terminal).
#!/usr/bin/env ruby
# == Bucket Finder - Trawl Amazon S3 buckets for interesting files
#
# Each group of files on Amazon S3 have to be contained in a bucket and each bucket has to have a unique
# name across the system. This means that it is possible to bruteforce names, this script does this and more
#
# For more information on how this works see my blog post "Whats in Amazon's buckets?" at
# http://www.digininja.org/blog/whats_in_amazons_buckets.php
#
@Ge0rg3
Ge0rg3 / s3scanner.py
Last active June 12, 2020 18:34
s3scanner.py, but configured for use as a sub-program. For example, all data is sent to stdout, coloured logging is disabled and everything is compiled to one file.
#!/usr/bin/env python3
"""
This copy of s3scanner has been condensed from two files -> one, and logging has been changed to printing.
This way, it can be used as a sub-program instead of a main program
You can find the original s3scanner script at https://github.com/sa7mon/S3Scanner
The file is split into three components: imports, file 1 (s3utils.py) and file 2 (s3scanner.py)
"""
# Ensure everything is flushed immediately
@Ge0rg3
Ge0rg3 / flumberbuckets.py
Last active June 12, 2020 18:37
Flumberbuckets, but optimized for use as a subtask. For example, outputs are flushed immediately, paths are relative and terminal sizes aren't checked.
#!/usr/bin/env python3
import threading, argparse, subprocess, botocore.session, os, sys
from queue import Queue
parser = argparse.ArgumentParser('./flumberbuckets.py [options] -i [bucket]')
group = parser.add_mutually_exclusive_group(required=True)
group.add_argument('-w', '--wordlist', dest='wordlist', help='location of wordlist from which permutations of keyword will be generated')
group.add_argument("-s", "--single", dest="single", help="check a single bucket only", action='store_const', const=True, default=False)
@Ge0rg3
Ge0rg3 / sandcastle.py
Last active June 12, 2020 18:37
Same algorithm as Sandcastle (https://github.com/0xSearches/sandcastle), but less clunky (and with annoying status messages). Also keeps flushing messages.
#!/usr/bin/env python3
import requests as rq
import sys
if len(sys.argv) < 3:
print("Usage: python sandcastle.py companyname wordlist.txt", flush=True)
exit()
company = sys.argv[1]
wordlist_dir = sys.argv[2]
@Ge0rg3
Ge0rg3 / lazys3.rb
Last active May 9, 2020 05:23
lazys3, but edited. this version has a custom wordlist dir, regular stdout flushing and a nice ending message :)
#!/usr/bin/env ruby
require 'net/http'
require 'timeout'
$stdout.sync = true
class S3
attr_reader :bucket, :domain, :code
def initialize(bucket)