Skip to content

Instantly share code, notes, and snippets.

Keybase proof

I hereby claim:

  • I am daehee on github.
  • I am daehee (https://keybase.io/daehee) on keybase.
  • I have a public key whose fingerprint is 9CEB 92CC 5AE5 79E8 31FE 9F1F 8939 E398 1A5D 0084

To claim this, I am signing this object:

@daehee
daehee / five_minutes.yml
Created September 9, 2019 15:05 — forked from ryane/five_minutes.yml
five_minutes.yml
---
- hosts: all
vars:
UBUNTU_COMMON_ROOT_PASSWORD: 'xxxxx'
UBUNTU_COMMON_DEPLOY_PASSWORD: 'xxxxx'
UBUNTU_COMMON_LOGWATCH_EMAIL: user@example.com
ubuntu_common_deploy_user_name: deploy
ubuntu_common_deploy_public_keys:
- ~/.ssh/id_rsa.pub
@daehee
daehee / unfollow.js
Created September 14, 2019 05:06 — forked from JamieMason/unfollow.js.md
Unfollow everyone on twitter.com
// Unfollow everyone on twitter.com, by Jamie Mason (https://twitter.com/fold_left)
// https://gist.github.com/JamieMason/7580315
//
// 1. Go to https://twitter.com/YOUR_USER_NAME/following
// 2. Open the Developer Console. (COMMAND+ALT+I on Mac)
// 3. Paste this into the Developer Console and run it
(() => {
const followButtonQuery = '[data-testid$="-unfollow"]';
const confirmButtonQuery = '[data-testid="confirmationSheetConfirm"]';
const sleep = ({ seconds }) =>
@daehee
daehee / unlike.js
Created September 14, 2019 05:09
Unlike all your liked tweets
// Unlike all your liked tweets
// This is derived Twitter Unfollow script, by Jamie Mason (https://twitter.com/fold_left)
// https://gist.github.com/JamieMason/7580315
//
// 1. Go to https://twitter.com/YOUR_USER_NAME/likes
// 2. Open the Developer Console. (COMMAND+ALT+I on Mac)
// 3. Paste this into the Developer Console and run it
(() => {
const unlikeButtonQuery = '[data-testid="unlike"]';
const confirmButtonQuery = '[data-testid="confirmationSheetConfirm"]';
@daehee
daehee / jsparser_scrape.js
Created September 21, 2019 06:23
Scrape JSParser results to generate paths wordlist
// Run in console from results page
var wl = "";
$('.file h2').each(function() {wl += "\n" + $(this).text()});
@daehee
daehee / go-setup.sh
Last active November 26, 2019 15:20
go-setup.sh
#!/bin/bash
VERSION="1.13.4"
wget https://storage.googleapis.com/golang/go$VERSION.linux-amd64.tar.gz
tar xvfz go$VERSION.linux-amd64.tar.gz
sudo chown -R root:root ./go
sudo rm -rf /usr/local/go
sudo mv go /usr/local/
source ~/.zshrc
@daehee
daehee / main.go
Created November 26, 2019 20:00
Bruteforce MongoDB Credentials with Regex Match Payload
package main
import (
"fmt"
"net/http"
"net/url"
"strings"
)
// Build a rune slice of printable ASCII characters, excluding some special characters that would break the regex
@daehee
daehee / main.go
Created January 8, 2020 17:56
Emdee five for life (HTB Web Challenge)
package main
import (
"crypto/md5"
"fmt"
"io/ioutil"
"log"
"net/http"
"net/url"
"regexp"
@daehee
daehee / main.go
Created January 14, 2020 22:57
ezpz (HTB Web Challenge)
package main
import (
"bufio"
"encoding/base64"
"encoding/json"
"fmt"
"log"
"net/http"
"os"
@daehee
daehee / cleanips.sh
Created February 20, 2020 19:17
strip out CDNs from list of IPs (cloudflare, akamai, incapsula, sucuri)
#!/bin/bash
# Call with domain name <e.g. tesla.com> as arg $1
scanned () {
cat $1 | sort -u | wc -l
}
## segregating cloudflare IP from non-cloudflare IP
iprange="173.245.48.0/20 103.21.244.0/22 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 188.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/12 172.64.0.0/13 131.0.72.0/22"
for ip in `cat $1-ipz.txt`; do