Skip to content

Instantly share code, notes, and snippets.

View MrThreat's full-sized avatar

MrThreat

  • @grotezinfosec
View GitHub Profile
@MrThreat
MrThreat / gist:fbeb32888feea84b4e9e0d86f96903d0
Created October 13, 2017 18:58
curl | site | page | link dumper
curl http://$1 2>&1 |grep -o -E 'href="([^"#]+)"' |cut -d'"' -f2 |sort -u |sed '/^\// d'
while read line; do torsocks curl $line 2>&1 |grep -o -E 'href="([^"#]+)"' |cut -d'"' -f2 |sort -u |sed '/^\// d' | \
grep -o -P '.{0,16}.onion' | sort -u;done <list.lst
@MrThreat
MrThreat / gist:abe6ae837e0bf6b41e4234e6bb7ae8de
Created October 13, 2017 19:16
clipboard |email extract + sort |clipboard
#!/bin/bash
clear
rm temp.txt
pbpaste> temp.txt
cat temp.txt | grep -o '[[:alnum:]+\.\_\-]*@[[:alnum:]+\.\_\-]*' $file | sort | uniq -i |pbcopy
@MrThreat
MrThreat / gist:052a5d44f23d0d0919aae69938243b5f
Created October 13, 2017 19:22
ip to host to domain | sorted
while read line; do host $line | cut -d ' ' -f 5 | rev | cut -c 2- | rev \
|grep -v "(" >> domains.txt ; done <ips.lst
proxychains curl ifconfig.co
@MrThreat
MrThreat / gist:10f57b39a0b88b1d32f88563bb992f29
Created October 13, 2017 21:18
Download a list of files |loop
while read line; do axel "$line"; done <$1
@MrThreat
MrThreat / gist:da6f106d87824e792a3148fa0fa4b8b4
Created October 13, 2017 21:24
Debian updater | cleaner
apt-get update && apt-get autoclean -y && apt-get clean -y && apt-get autoremove -y
find /tmp -ctime +10 -exec rm -rf {} +
apt-get update && apt-get upgrade -y && apt-get dist-upgrade -y
apt-get update && apt-get autoclean -y && apt-get clean -y && apt-get autoremove -y
@MrThreat
MrThreat / gist:1316341ec5e29118a4505918f16a6998
Created October 13, 2017 21:36
clone site recursively and generate hashes for documents
#!/bin/bash
domain=$1
location=$2
if [[ $# -eq 0 ]] ; then
echo '-------------------------------'
echo 'please supply url, e.g C2'
echo '-------------------------------'
exit 0
fi
if [[ $# -eq 1 ]] ; then
@MrThreat
MrThreat / gist:fb5cbef22ae590b3525697c75b03b104
Last active October 13, 2017 23:15
get ip geolocation powershell v2 |v3 |v3.0+ | and curl nix*
<#
For peerlyst @grotezinfosec
Requires powershelgl 3.0
If your running nix* use:
curl http://freegeoip.net/xml/
OR
Powershell V2 (flare VM [malware analysis]
(new-object System.Net.WebClient).DownloadString("http://freegeoip.net/xml/")
@MrThreat
MrThreat / gist:b814b4193f45e20d20851c7371d24a02
Created October 15, 2017 06:51
Yararule generator | Dockerfile!
# yaragen Dockerfile
#
# make sure to have this file called "Dockerfile" without quotes.
# docker build -t yaragen .
# docker run --rm -ti yaragen -h
# Pull the base image.
FROM ubuntu:16.04
# Install pre-requisites.