| console.log("[*] SSL Pinning Bypasses"); | |
| console.log(`[*] Your frida version: ${Frida.version}`); | |
| console.log(`[*] Your script runtime: ${Script.runtime}`); | |
| /** | |
| * by incogbyte | |
| * Common functions | |
| * thx apkunpacker, NVISOsecurity, TheDauntless | |
| * Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that. | |
| * !!! THIS SCRIPT IS NOT A SILVER BULLET !! |
| #!/bin/bash | |
| sudo apt install fontconfig | |
| cd ~ | |
| wget https://github.com/ryanoasis/nerd-fonts/releases/download/v2.1.0/Meslo.zip | |
| mkdir -p .local/share/fonts | |
| unzip Meslo.zip -d .local/share/fonts | |
| cd .local/share/fonts | |
| rm *Windows* | |
| cd ~ |
| #!/usr/bin/env python3 | |
| """ | |
| A tool to generate log4j payloads for JNDI injection for testing WAFs. | |
| Author: incogbyte | |
| """ | |
| import random | |
| import string | |
| import argparse |
| #!/bin/bash | |
| RED='\033[0;31m' | |
| GREEN='\033[0;32m' | |
| YELLOW='\033[1;33m' | |
| BLUE='\033[0;34m' | |
| NC='\033[0m' | |
| WORK_DIR="./apk_extractor_temp" | |
| OUTPUT_DIR="./ExtractedAPKs" |
| import re | |
| import sys | |
| def extract_subdomains(filename): | |
| subdomains = set() | |
| pattern = r"(?:https?://)?(?:www\.)?([^.]+\.[^.]+)" | |
| with open(filename, 'r') as file: | |
| for line in file: | |
| match = re.search(pattern, line) |
| .mlab.com+password | |
| WFClient+Password+extension:ica | |
| access_key | |
| access_token | |
| admin_pass | |
| admin_user | |
| algolia_admin_key | |
| algolia_api_key | |
| alias_pass | |
| alicloud_access_key |
| <!DOCTYPE html> | |
| <html lang="en"> | |
| <head> | |
| <meta charset="UTF-8" /> | |
| <title>Cam + Mic Capture Demo</title> | |
| <style> | |
| body { font-family: system-ui, sans-serif; padding: 1rem; } | |
| #video { max-width: 350px; border-radius: 8px; background: #000; } | |
| #controls { margin-top: 1rem; } | |
| button { padding: .6rem 1rem; margin-right: .5rem; } |
Convert Debian 10 to Kali Linux on Google Cloud or Any Debian
After you create an account on Google Cloud, and create your VPS using Debian 10, follow the below guide to convert your Debian to Kali Linux Latest Version:
Step 1:
apt-get update -y && apt-get full-upgrade -y && apt-get dist-upgrade -y && apt autoremove -y && apt autoclean
| import urllib.parse | |
| """ | |
| By @incogbyte | |
| Python script that generates diff encodings techniques. | |
| Those techniques can be used to bypass HTTP WAF. | |
| """ | |
| def generate_encodings(input_string): | |
| encodings = {} |
Generate temporary AWS credentials using unauth user 1.1 - Get the poolId 2.1 - IdendityID 3.1 - Use the following command on aws-cli "example" $ aws cognito-identity get-id --identity-pool-id "us-east-1:f3400f4e-6a41-47db-834c-4af6d56e8359" --region "us-east-1"
3.2 - Use the following command to get aws credentials $ aws cognito-identity get-credentials-for-identity --identity-id "us-east-1:f3400f4e-6a41-47db-834c-4af6d56e8359" --region "us-east-1"