Skip to content

Instantly share code, notes, and snippets.

View aels's full-sized avatar
💭
No business. Everyone will die.

Lavander aels

💭
No business. Everyone will die.
View GitHub Profile
https://blog.syss.com/posts/meshhacks/
https://whiteknightlabs.com/2023/05/23/unleashing-the-unseen-harnessing-the-power-of-cobalt-strike-profiles-for-edr-evasion/
https://gitpush--force.com/commits/2026/06/lies-we-tell-ourselves-about-email/
https://core-jmp.org/2026/05/cve-2026-41873-apache-pony-mail-ssrf-crlf-rewrite/
https://tips.hackerschoice.org/
https://www.elastic.co/security-labs/oxloader-malware-loader-infostealer?utm_source=organic-social&utm_medium=twitter&utm_campaign=campaign&utm_content=20895946773&linkId=964478899
https://0xmaz.me/posts/LACUNA-Chain-Ghost-Frames-defeats-All-EDR-layers-of-call-stack-based-detection/
https://cert.pl/en/posts/2026/05/autonomous-fuzzing/
https://performance.dev/how-is-linear-so-fast-a-technical-breakdown
https://saza.re/posts/rover/
@aels
aels / hunter.how_scrapper.py
Last active December 29, 2025 20:06
So, hunter.how is easy to scrape, but they fixed some shit and allow to take only ~2500 results from one free account (and create next and next and another one). Depth limit of search is 10k results. First, copy "search" request in "network" tab of dev tools clicking "copy as cURL". Then paste it into this ai-sloppy python script on the first la…
import re, json, pycurl, time, os
from io import BytesIO
def parse_curl_command(curl_command):
"""Parse curl command and extract parameters"""
url_match = re.search(r"curl\s+'([^']+)'|curl\s+\"([^\"]+)\"|curl\s+(\S+)", curl_command)
if not url_match:
raise ValueError("URL not found in curl command")
url = url_match.group(1) or url_match.group(2) or url_match.group(3)
"use strict";
this.default_tr = this.default_tr || {};
(function(_) {
var window = this;
try {
var qh, rh, sh, Dh, Qh, Rh, Sh, Yh, ai, bi, di, ei, ii, hi, oi, ri, yh;
qh = function(a) {
if (!_.Wa || !_.Xa)
return !1;
for (var b = 0; b < _.Xa.brands.length; b++) {
@aels
aels / export_gmail_inbox_emails_to_csv.gs
Created May 20, 2025 03:56
Google Script for exporting emails from gmail to exel sheet in google docs
function getEmailsToSheet() {
const sheet = SpreadsheetApp.getActiveSpreadsheet().getActiveSheet();
const threads = GmailApp.search("in:inbox", 0, 1000); // Replace with your search query
const messages = threads.map(thread => thread.getMessages()).flat();
// Get the last row of the sheet
const lastRow = sheet.getLastRow();
// Initialize a header row if the sheet is empty
if (lastRow === 0) {
@aels
aels / extract_emails_imap.py
Created March 23, 2025 18:46
extract emails from mailbox via imap.
import imaplib
import email
import time
from email.header import decode_header
from concurrent.futures import ThreadPoolExecutor
import threading
def process_email(msg_data, output_file, lock):
try:
email_body = msg_data[0][1]
admin
123456
password
12345678
666666
111111
1234567
qwerty
siteadmin
administrator
1.1.1.0/24
1.116.128.0/18
1.71.16.0/20
100.11.0.0/16
100.20.0.0/14
100.24.0.0/13
101.102.128.0/17
101.110.0.0/18
101.160.0.0/11
101.226.0.0/16
301lab.es
a-led.it
coacb.com
hotmail.com
outlook.com
ipa.com.tr
netmax.pl
live.com
buu.ac.th
upcmail.nl
This file has been truncated, but you can view the full file.
notary.vip.126.com,123.58.177.74,threatminer
webmail.mail.126.com,123.126.96.204,threatminer
dxyy.mail.126.com,123.126.96.184,threatminer
passport2.vip.126.com,59.111.239.53,crtsh
hw.mail.126.com,103.129.252.34,threatminer
c15460nfkii28870140ewdw45668uci2316rqnq930.mail.126.com,123.126.96.184,alienvault
r.mail.126.com,123.126.96.184,alienvault
cloud.mail.126.com,220.181.15.159,crtsh
freemail.126.com,103.129.252.34,alienvault
3g.126.com,123.126.96.184,threatminer
126.com
163.com
1und1.de
a1.net
active24.com
aikis.or.jp
aol.com
arcor.de
bay.wind.ne.jp
biglobe.ne.jp