Skip to content

Instantly share code, notes, and snippets.

View RealFakeAccount's full-sized avatar
🔲
Todo: Set Status

RealFakeAccount RealFakeAccount

🔲
Todo: Set Status
View GitHub Profile
@Huntinex
Huntinex / report.py
Last active March 8, 2024 12:53
Automatic bug bounty report generator
import poe, sys
client = poe.Client("<POE_API_KEY_HERE>")
title=sys.argv[1]
path=sys.argv[2]
more=""
if len(sys.argv) > 3:
more="\" and here is more information: "+sys.argv[3]
message="""generate a bug bounty report for me (hackerone.com), the title of the bug is """+title+""" and the vulnerability path is \""""+path+more+"""
(?i)((access_key|access_token|admin_pass|admin_user|algolia_admin_key|algolia_api_key|alias_pass|alicloud_access_key|amazon_secret_access_key|amazonaws|ansible_vault_password|aos_key|api_key|api_key_secret|api_key_sid|api_secret|api.googlemaps AIza|apidocs|apikey|apiSecret|app_debug|app_id|app_key|app_log_level|app_secret|appkey|appkeysecret|application_key|appsecret|appspot|auth_token|authorizationToken|authsecret|aws_access|aws_access_key_id|aws_bucket|aws_key|aws_secret|aws_secret_key|aws_token|AWSSecretKey|b2_app_key|bashrc password|bintray_apikey|bintray_gpg_password|bintray_key|bintraykey|bluemix_api_key|bluemix_pass|browserstack_access_key|bucket_password|bucketeer_aws_access_key_id|bucketeer_aws_secret_access_key|built_branch_deploy_key|bx_password|cache_driver|cache_s3_secret_key|cattle_access_key|cattle_secret_key|certificate_password|ci_deploy_password|client_secret|client_zpk_secret_key|clojars_password|cloud_api_key|cloud_watch_aws_access_key|cloudant_password|cloudflare_api_key|cloudflare_auth_k
@Esonhugh
Esonhugh / pwnsh.sh
Last active May 9, 2022 23:02
pwnsh for good wraper for the reverse netcat shell
function pwnsh(){
case "$1" in
nc)
rlwrap $*
;;
tty)
stty -raw echo;fg
;;
re)
@darrenpmeyer
darrenpmeyer / burp-hidpi.md
Created October 19, 2020 21:34
Pixel Doubling / HiDPI display support for BurpSuite

Running BurpSuite on a HiDPI display, and that makes the interface window tiny and unreadable?

Just set the _JAVA_OPTIONS environment variable so that it includes -Dsun.java2d.uiScale=2

On Linux, you can edit the BurpSuiteCommunity executable shell script wherever it's been installed, to include the following line near the top (below the #! line, though!):

export _JAVA_OPTIONS="-Dsun.java2d.uiScale=2"
@TarlogicSecurity
TarlogicSecurity / kerberos_attacks_cheatsheet.md
Created May 14, 2019 13:33
A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module: