Skip to content

Instantly share code, notes, and snippets.

View dhondta's full-sized avatar

Alex dhondta

View GitHub Profile
@dhondta
dhondta / README.md
Last active July 31, 2023 22:17
Tinyscript tool for replacing text in files from a target folder and based on a JSON dictionary of replacement patterns

DocTextMasker

A simple Tinyscript-based tool for recursively replacing disturbing/undesired text inside documents contained in a given folder based on a JSON dictionary defining regular expressions and the replacements to be applied.

This can be installed using:

$ pip install tinyscript
$ tsm install doc-text-masker
$ wget https://gist.githubusercontent.com/dhondta/5cae9533240471eac155bd51593af2e0/raw/replacements.json
@dhondta
dhondta / README.md
Last active July 31, 2023 22:17
Tinyscript tool for assembling audio files and altering frequencies and speed factor

Audio Assembler

This Tinyscript-based tool, based on PyDub, allows to append audio files, filter the result as voice frequency and alter the playback speed.

This can be installed using:

$ pip install tinyscript
$ tsm install audio-assembler
@dhondta
dhondta / README.md
Last active July 31, 2023 22:18
Tinyscript tool for filtering a wordlist from STDIN based on Fcrackzip-like criteria to STDOUT or a file

WLF

This Tinyscript-based tool allows to filter a wordlist from STDIN to STDOUT or an output file. This is particularly interesting for dictionary attacks.

This can be installed using:

$ pip install tinyscript
$ tsm install wlf
@dhondta
dhondta / README.md
Last active February 11, 2024 10:36
Tinyscript steganography tool implementing the Least Significant Bit algorithm

StegoLSB

This Tinyscript-based tool allows to apply steganography based on LSB (Least Significant Bit) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegolsb

@dhondta
dhondta / README.md
Last active February 10, 2024 12:52
Tinyscript steganography tool implementing the Pixel Value Differencing algorithm

StegoPVD

This Tinyscript-based tool allows to apply steganography based on PVD (Pixel Value Differencing) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegopvd

@dhondta
dhondta / README.md
Last active February 10, 2024 10:28
Tinyscript cryptography tool implementing the Solitaire Cipher algorithm

Solitaire-Cipher

This Tinyscript-based tool implements the Solitaire Encryption Algorithm of Bruce Schneier.

$ pip install tinyscript
$ tsm install solitaire-cipher

@dhondta
dhondta / README.md
Last active April 27, 2020 19:55
Simple lexer module for parsing a line of arguments and keyword-arguments, useful for CLI tools

Arguments Lexer

Simple arguments lexer for parsing a line of arguments and keyword-arguments.

The ValueLexer evaluates strings (delimited by single or double quotes), booleans, floats, integers and also binary, octal or hexadecimal (to an integer).

The ArgumentsLexer ensures that the input line of arguments has the form:

arg1 arg2 ... argN kw1=val1 kw2=val2 ... kwM=valM
@dhondta
dhondta / README.md
Last active February 10, 2024 10:28
Tinyscript Proof-of-Concept tool using PyBots for exploiting a Code Execution vulnerability in ClipperCMS

ClipperCMS 1.3.0 Code Execution Exploit

This is a variation of this exploit using Tinyscript and Pybots for uploading a shell.

$ pip install tinyscript
$ tsm install clippercms-shell-uploader
@dhondta
dhondta / README.md
Last active July 31, 2023 22:21
Modification of Firefox-Decrypt to support dictionary attack

Firefox-Decrypt modified for dictionary attack on master password

This script is the modification of this excellent project, a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles, to make it support dictionary attack. This is published as a Gist as the related PR was refused (for a reason I completely understand) and with the consent of the author.

$ pip install tinyscript
$ tsm install firefox_decrypt_modified

For the main options, please refer to the original project. You can provide a wordlist of master passwords for a dictionary attack as follows:

@dhondta
dhondta / README.md
Last active July 31, 2023 22:22
Tinyscript Proof-of-Concept tool using PyBots for exploiting an SSTI vulnerability in Craft CMS (CVE-2018-14716)

Craft CMS SEOmatic 3.1.4 SSTI Exploit (CVE-2018-14716)

This is an automation of this exploit using Tinyscript and Pybots for getting config settings or user properties.

$ pip install tinyscript
$ tsm install craftcms-seomatic-ssti