Skip to content

Instantly share code, notes, and snippets.

@ajxchapman
ajxchapman / gist:e88adeed1b1bb1582ac46ed2ed0b1b97
Last active June 4, 2019 19:13
Wfuzz a host that keeps timing out
#!/bin/bash
WORDLIST="wordlist.txt"
OUTPUT="output.txt"
TARGET="https://example.com/FUZZ"
if [ ! -f _wordlist.txt ] || [ `wc -l _wordlist.txt | cut -f 1 -d " "` -eq 0 ]
then
sort -u $WORDLIST > _wordlist.txt
if [ -f $OUTPUT ]
then
@ajxchapman
ajxchapman / README.md
Last active April 29, 2019 17:31
Installing Apache Guacamole
  1. Install Docker
# https://docs.docker.com/install/linux/docker-ce/ubuntu/
apt-get update
apt-get install -y apt-transport-https ca-certificates curl gnupg-agent software-properties-common
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
apt-get update
apt-get install -y docker-ce docker-ce-cli containerd.io
docker run hello-world
@ajxchapman
ajxchapman / blind_sqli.py
Created April 2, 2019 08:47
MySQL / MariaDB blind SQLi exploitation script
import argparse
import binascii
import math
import requests
import sys
import urllib.parse
import zlib
session = requests.session()
def get_boolean(query):
@ajxchapman
ajxchapman / wordlist_generator.py
Created March 8, 2019 10:45
Wordlist generator based on observed words from given URLs
import re
import requests
import inflect
seed_urls = [
"http://www.example.com",
]
cookies = {"session" : "2eyhsb2dnZxWRJ9biI6dHJ1ZXr0"}
prefixes = ["get", "set", "get_", "set_"]
@ajxchapman
ajxchapman / chrome_screenshot.js
Created July 11, 2017 13:44
Node script to screenshot web pages using chrome debugging protocol
// npm install chrome-remote-interface minimist
const CDP = require('chrome-remote-interface');
const argv = require('minimist')(process.argv.slice(2));
const file = require('fs');
const spawn = require('child_process').spawn;
const net = require('net');
const crypto = require('crypto');
const url = argv.url || 'https://www.google.com';
const id = argv.id || crypto.createHash('sha256').update(url).digest("hex");
@ajxchapman
ajxchapman / pickle.py
Created March 29, 2018 08:19
PythonPickle
import argparse
import pickle
import sys
if sys.version_info < (3, 0, 0):
_exec = None
buff = sys.stdout # Buffer to write binary strings to
else:
import builtins