Skip to content

Instantly share code, notes, and snippets.

View binkybear's full-sized avatar

binkybear

373 followers · 15 following
View GitHub Profile
@MohamedAlaa
MohamedAlaa / tmux-cheatsheet.markdown
Last active May 1, 2024 03:34
tmux shortcuts & cheatsheet

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname
@willurd
willurd / web-servers.md
Last active April 28, 2024 21:38
Big list of http static server one-liners

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000
@dAnjou
dAnjou / flask-upload
Created June 5, 2012 12:35
Flask upload example
<VirtualHost *>
ServerName example.com
WSGIDaemonProcess www user=max group=max threads=5
WSGIScriptAlias / /home/max/Projekte/flask-upload/flask-upload.wsgi
<Directory /home/max/Projekte/flask-upload>
WSGIProcessGroup www
WSGIApplicationGroup %{GLOBAL}
Order deny,allow
@sukima
sukima / XORCipher.js
Last active March 20, 2024 07:28
A Super simple encryption cipher using XOR and Base64 in JavaScript
// XORCipher - Super simple encryption using XOR and Base64
//
// Depends on [Underscore](http://underscorejs.org/).
//
// As a warning, this is **not** a secure encryption algorythm. It uses a very
// simplistic keystore and will be easy to crack.
//
// The Base64 algorythm is a modification of the one used in phpjs.org
// * http://phpjs.org/functions/base64_encode/
// * http://phpjs.org/functions/base64_decode/
@worawit
worawit / SafeArrayRedim.cpp
Last active January 18, 2024 08:23
CVE-2014-6332
/*
* reversed SafeArrayRedim() in oldaut32.dll (Windows XP)
* for CVE-2014-6332
*/
typedef struct tagSAFEARRAY
{
USHORT cDims; // number of dimensions
USHORT fFeatures; // type of elements
ULONG cbElements; // byte size per element
@tpai
tpai / instructions.md
Last active September 22, 2022 11:20
use both Tor and Privoxy with Mac OSX

1. install

brew install tor
brew install privoxy

2. copy and modify config file




  


  




    


          
    

      

        
        

          

              @byt3bl33d3r
          

          

            
                byt3bl33d3r
                / raw2ps_shellcode.py
            
            

              Created
              September 13, 2015 12:12
            

              
                Converts raw shellcode to a PowerShell compatible byte array (helpful when using custom shellcode with Invoke-Shellcode.ps1)
              
          

        

      

        

  

    
    


        



  


  

        

          
          import sys
        

        

          
          

        

        

          
          ps_shellcode = '@('
        

        

          
          

        

        

          
          with open(sys.argv[1], 'rb') as shellcode:
        

        

          
          	byte = shellcode.read(1)
        

        

          
          	while byte != '':
        

        

          
          		ps_shellcode += '0x{}, '.format(byte.encode('hex'))
        

        

          
          		byte = shellcode.read(1)
        

  





    


  




    


          
    

      

        
        

          

              @KyleHanslovan
          

          

            
                KyleHanslovan
                / DomainEnumeration.bat
            
            

              Created
              June 25, 2016 12:36
            

              
                Post-exploitation host/domain survey using native Windows commands.
              
          

        

      

        

  

    
    


        



  


  

        

          
          whoami & hostname & ipconfig /all & net user /domain 2>&1 & net group /domain 2>&1 & net group "domain admins" /domain 2>&1 & net group "Exchange Trusted Subsystem" /domain 2>&1 & net accounts /domain 2>&1 & net user 2>&1 & net localgroup administrators 2>&1 & netstat -an 2>&1 & tasklist 2>&1 & sc query 2>&1 & systeminfo 2>&1 & reg query "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default" 2>&1
        

  





    


  




    


          
    

      

        
        

          

              @enten
          

          

            
                enten
                / alfred.sh
            
            

              Last active
              July 24, 2016 15:19
            

          

        

      

        

  

    
    


        



  


  

        

          
          #!/system/bin/sh
        

        

          
          set -u
        

        

          
          ## ========================================================================================
        

        

          
          ## alfred  : manages an ArchLinux rootfs for enable LXC usage on Android
        

        

          
          ## ========================================================================================
        

        

          
          PROGNAME="alfred"
        

        

          
          PROGVERS="0.0.6"
        

        

          
          PROGCONF="/data/$PROGNAME"
        

        

          
          PROGHELP="Usage: $PROGNAME [cmd]
        

  





    


  




    


          
    

      

        
        

          

              @jakewarren
          

          

            
                jakewarren
                / github_dorks.txt
            
            

              Last active
              June 29, 2016 21:13
            

          

        

      

        

  

    
    


        



  


  

        

          
          #md5 hash of most used password 123456
        

        

          
          #ref: https://twitter.com/TekDefense/status/294556153151647744
        

        

          
          https://github.com/search?q=e10adc3949ba59abbe56e057f20f883e&type=Code&ref=searchresults
        

        

          
          

        

        

          
          #DB_PASSWORD
        

        

          
          #ref: http://seclists.org/fulldisclosure/2014/Mar/343
        

        

          
          https://github.com/search?q=define%28%22DB_PASSWORD%22&type=Code&ref=searchresults
        

        

          
          

        

        

          
          #Possible SQL injection
        

        

          
          #ref: http://seclists.org/fulldisclosure/2013/Jun/15