Skip to content

Instantly share code, notes, and snippets.

View dhondta's full-sized avatar

Alex dhondta

View GitHub Profile
@dhondta
dhondta / README.md
Last active August 8, 2026 08:04
Tinyscript steganography tool implementing the Pixel Indicator Technique

StegoPIT

This Tinyscript-based tool allows to apply steganography based on PIT (Pixel Indicator Technique) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegopit

StegoEMD

This Tinyscript-based tool allows to apply steganography based on EMD (Exploiting Modification Direction) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegoemd

@dhondta
dhondta / README.md
Last active July 3, 2026 20:43
Tinyscript steganography tool implementing the Pixel Value Differencing algorithm

StegoPVD

This Tinyscript-based tool allows to apply steganography based on PVD (Pixel Value Differencing) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegopvd

@dhondta
dhondta / README.md
Last active June 19, 2026 08:08
Tinyscript steganography tool implementing the Least Significant Bit algorithm

StegoLSB

This Tinyscript-based tool allows to apply steganography based on LSB (Least Significant Bit) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegolsb

@dhondta
dhondta / README.md
Last active March 29, 2026 18:47
Tinyscript steganography tool based on base32/64 padding

Paddinganograph

This Tinyscript-based tool allows to unhide data hidden in base32/base64 strings. It can take a PNG or JPG in input to retrieve an EXIF value as the input data.

This can be installed using:

$ pip install tinyscript
$ tsm install paddinganograph

Git Permissions Recovery

This is a small tool using Tinyscript to restore permissions under a Git repository (e.g. when a bad backup and restore method messed up with file permissions).

$ pip install pybots tinyscript
$ tsm install git-perm-recovery
@dhondta
dhondta / README.md
Last active January 17, 2026 12:11
Tinyscript tool for downloading the .git folder from a disclosed Web-hosted repository

Git Web Recovery

This is a small tool using Tinyscript and PyBots for downloading a .git folder left on a Web server. Note that this tool does NOT rely on Directory Indexing.

$ pip install pybots tinyscript
$ tsm install git-web-recovery

@dhondta
dhondta / README.md
Last active October 31, 2025 15:02
Tinyscript tool for making an evil Pickle

Evil Pickle creation tool

This is a Tinyscript wrapper for this Gist, working with Python 2 and 3.

$ pip install tinyscript
$ tsm install evil-pickle-maker
@dhondta
dhondta / README.md
Last active August 9, 2025 09:11
Tinyscript tool for getting IP locations from an email (EML file)

Get Email Origin

This Tinyscript-based allows to load an email and to parse the receivers, indicating where the found IP addesses originate from.

This can be installed using:

$ pip install ipaddress mail_parser maxminddb-geolite2 tinyscript
$ tsm install get-email-origin
@dhondta
dhondta / README.md
Last active June 9, 2025 08:00
Proof-of-Concept for python-xdg 0.25 Python code injection (CVE-2019-12761)

CVE-2019-12761 - Code Injection in Python's xdg Module

Description

A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.

References