Skip to content

Instantly share code, notes, and snippets.

View dwisiswant0's full-sized avatar
💀
Bashturbation

Dwi Siswanto dwisiswant0

💀
Bashturbation
1.7k followers · 74 following
View GitHub Profile
@dwisiswant0
dwisiswant0 / keybase.md
Created March 27, 2020 16:40

Keybase proof

I hereby claim:

  • I am dwisiswant0 on github.
  • I am dw1 (https://keybase.io/dw1) on keybase.
  • I have a public key ASCF82HreTfbL9miy_M7Z4uVh730qsavwNeJMuLpCif8vAo

To claim this, I am signing this object:

@dwisiswant0
dwisiswant0 / cctv.sh
Created April 30, 2020 02:39
RTSP Stream All Channel CCTV Sync via MPV
#!/bin/bash
HOST="192.168.1.10"
USER="admin"
PASS="password"
NAME="My Home"
for i in {1..4}; do
URI="rtsp://${HOST}:554/user=${USER}&password=${PASS}&channel=${i}&stream=1/trackID=3"
[[ ${i} -eq "1" ]] && MPV="mpv '${URI}' " || MPV+="--external-file='${URI}' "
@dwisiswant0
dwisiswant0 / a2dp.py
Created May 17, 2020 18:54 — forked from pylover/a2dp.py
Fixing bluetooth stereo headphone/headset problem in ubuntu 16.04, 16.10 and also debian jessie, with bluez5.
#! /usr/bin/env python3.5
"""
Fixing bluetooth stereo headphone/headset problem in ubuntu 16.04 and also debian jessie, with bluez5.
Workaround for bug: https://bugs.launchpad.net/ubuntu/+source/indicator-sound/+bug/1577197
Run it with python3.5 or higher after pairing/connecting the bluetooth stereo headphone.
This will be only fixes the bluez5 problem mentioned above .
@dwisiswant0
dwisiswant0 / rules.json
Created May 18, 2020 08:49
Threat Model Rules
{
"threat": [
{
"cat": "Common Web Attack",
"url": "https:\/\/github.com\/enygma\/expose\/raw\/master\/src\/Expose\/filter_rules.json"
}
],
"filter": [
{
"cat": "Bad IP Address",
@dwisiswant0
dwisiswant0 / extract-repos.js
Created May 20, 2020 01:28
Extract Repos from GitHub Search
links = document.querySelectorAll("[class='link-gray']");
repo = "";
for(var i = 0; i<links.length; i++) repo += links[i].href + "\n";
console.log(repo)
@dwisiswant0
dwisiswant0 / nuclei-scan.sh
Last active July 8, 2022 13:46
Automate nuclei for given hosts
#!/bin/bash
OUT="~/nuclei-results/$1"
TPL="~/nuclei-templates"
mkdir -p ${OUT}
SUB=$(subfinder -d $1 -silent | httprobe | tee ${OUT}/$1.txt)
cd ${TPL}; git pull origin master && cd -
for tpl in $(find $TPL -name "*.yaml"); do $GOPATH/bin/nuclei -l ${OUT}/$1.txt -t $tpl -o "${OUT}/$(basename "$tpl" .yaml).txt"; done
find ${OUT} -name "*.txt" -size 0 -delete
@dwisiswant0
dwisiswant0 / is_cloudflare.py
Created May 25, 2020 00:46
Check if an IP is owned by Cloudflare
#!/bin/env python
# Credits goes to @sw33tLie
from ipaddress import ip_network, ip_address
cidrs = ["173.245.48.0/20","103.21.244.0/22","103.22.200.0/22","103.31.4.0/22","141.101.64.0/18","108.162.192.0/18","190.93.240.0/20","188.114.96.0/20","197.234.240.0/22","198.41.128.0/17","162.158.0.0/15","104.16.0.0/12","172.64.0.0/13","131.0.72.0/22"]
def is_cloudflare(ip):
for cidr in cidrs:
net = ip_network(cidr)
@dwisiswant0
dwisiswant0 / .bash_profile
Created May 27, 2020 07:38
SQLi & XSS Vulnerability Scanner
###
# ▶ go get -u github.com/lc/gau
# ▶ go get -u github.com/tomnomnom/qsreplace
# ▶ go get -u github.com/tomnomnom/hacks/kxss
# ▶ go get -u github.com/hahwul/dalfox
# ▶ git clone https://github.com/dwisiswant0/DSSS
###
gauq() {
@dwisiswant0
dwisiswant0 / google-dorks
Created June 18, 2020 11:15 — forked from stevenswafford/google-dorks
Listing of a number of useful Google dorks.
" _ _ "
" _ /|| . . ||\ _ "
" ( } \||D ' ' ' C||/ { % "
" | /\__,=_[_] ' . . ' [_]_=,__/\ |"
" |_\_ |----| |----| _/_|"
" | |/ | | | | \| |"
" | /_ | | | | _\ |"
It is all fun and games until someone gets hacked!
@dwisiswant0
dwisiswant0 / wp-plugin-sqli.json
Created July 1, 2020 17:08
gf Pattern for Detect SQL Injection in WordPress Plugin # Case-study: https://dl.packetstormsecurity.net/papers/general/detect-sql-wp.pdf
{
"flags": "-HanrPz",
"pattern": "('|\")SELECT[\\S+\\n\\r\\s]+FROM[\\S+\\n\\r\\s]+('|\").*(\\.|\\{).*[\\S+\\n\\r\\s]+;"
}