Skip to content

Instantly share code, notes, and snippets.

View devpwn's full-sized avatar
🥷
#include<stdio.h>

devpwn devpwn

🥷
#include<stdio.h>
  • Sn1f1t
  • between 0x0000000000000000 - 0xffffffffffffffff
  • X @d3vpwn
View GitHub Profile
@devpwn
devpwn / dorks.md
Created April 1, 2023 17:22
Interesting google dorks

target site:hackmd.io target site:gist.github.com target site:codepen.io site:postman.com + target inurl:s3.amazonaws.com intitle:"loggi"

@devpwn
devpwn / watchDog.js
Created March 29, 2023 19:52
Watch Dog iOS bypass
const dontTerminate =
[
'br.com.john.doe.app'
];
const FBSProcessTerminationRequest = ObjC.classes.FBSProcessTerminationRequest;
const terminateReq = FBSProcessTerminationRequest['+ requestForProcess:withLabel:']
var oldImpl = terminateReq.implementation;
terminateReq.implementation = ObjC.implement(terminateReq, function (handle, selector, process, label) {
@devpwn
devpwn / iosSysCalls.js
Created March 28, 2023 19:38
iOS Syscall Frida
function logtrace(ctx) {
var content = Thread.backtrace(ctx.context, Backtracer.ACCURATE).map(DebugSymbol.fromAddress).join('\n') + '\n';
if (content.indexOf('SubstrateLoader') == -1 && content.indexOf('JavaScriptCore') == -1 &&
content.indexOf('FLEXing.dylib') == -1 && content.indexOf('NSResolveSymlinksInPathUsingCache') == -1 &&
content.indexOf('MediaServices') == -1 && content.indexOf('bundleWithPath') == -1 &&
content.indexOf('CoreMotion') == -1 && content.indexOf('infoDictionary') == -1 &&
content.indexOf('objectForInfoDictionaryKey') == -1) {
console.log(content);
return true;
}
@devpwn
devpwn / dump.js
Created January 30, 2021 22:29
Dump subdomains from builtwith inside browser
/*
Built With insert captcha at https://builtwith.com/relationships/<domain.name>
To get the domains inside the browser console just copy and paste the script below after
https://builtwith.com/relationships/<domain.name>
Example/Usage:
Go to https://builtwith.com/relationships/example.com
press F12 > Console > Copy and paste the script below inside the console
and after that, type dump_domains() <with parentheses>