Skip to content

Instantly share code, notes, and snippets.


Nikita Medvedev nikallass

View GitHub Profile
nikallass / Kali 2017.1 x64, Docker-ce Install script
Last active Feb 21, 2020
Kali 2017.1 x64, Docker-ce Install script
View Kali 2017.1 x64, Docker-ce Install script
# update apt-get
export DEBIAN_FRONTEND="noninteractive"
sudo apt-get update
# remove previously installed Docker
sudo apt-get remove docker docker-engine* lxc-docker*
# install dependencies 4 cert
nikallass /
Last active Oct 14, 2021
Certificate Transparency OSINT tool. It uses to query domain name.
if [ "$1" == "-h" ] || [ "$1" == "--help" ] || [[ $# -eq 0 ]]
me=`basename "$0"`
echo "Find subdomains in certificate transparency log."
echo -e "Usage:\n\t./${me} [domain]"
echo -e "Example:\n\t./${me}"
exit 1
if [ "$1" == "-h" ] || [ "$1" == "--help" ]
me=`basename "$0"`
echo "Find information about TCP/IP ports."
echo -e "Usage:\n\t./${me} [port|service]"
echo -e "Example:\n\t./${me} snmp\n\t./${me} 3389"
exit 1
nikallass / cmd.jsp
Created Apr 30, 2018
Simple JSP cmd shell
View cmd.jsp
<%@ page import="java.util.*,*"%>
Commands with JSP
<INPUT TYPE="text" NAME="cmd">
<INPUT TYPE="submit" VALUE="Send">
nikallass / file-browser.jsp
Last active Mar 29, 2022
File browser + cmd JSP shell (win+linux without modification)
View file-browser.jsp
jsp File browser 1.2.1
nikallass added OS check, so shell can be executed on Windows and Linux without modifying now.
Copyright (C) 2003-2006 Boris von Loesch
This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the
Free Software Foundation; either version 2 of the License, or (at your option)
any later version.
nikallass /
Created May 10, 2018
Fix armitage scan crash
in armitage/armitage.jar
in /scripts/
replace line 381:
from: if ($text ismatch '... (.*?):(\d+) - TCP OPEN') {
to: if ($text ismatch '... (.*?): +- \1:(\d+) - TCP OPEN') {
nikallass /
Last active Apr 30, 2021
Search PTRarchive for subdomains and IPs
if [ "$1" == "-h" ] || [ "$1" == "--help" ] || [[ $# -eq 0 ]]
me=`basename "$0"`
echo "Find subdomains in PTR-archive"
echo -e "Usage:\n\t./${me} [domain]"
echo -e "Example:\n\t./${me}"
echo -e "\t./${me} -v # Verbose output, includes IPs."
exit 1
View github-recon
“Hackme.tld” API_key
“Hackme.tld” secret_key
“Hackme.tld” aws_key
“Hackme.tld” Password 
“Hackme.tld” FTP
“Hackme.tld” login
“Hackme.tld” github_token
“Hackme.tld” http:// & https://  
“Hackme.tld” amazonaws
“Hackme.tld” digitaloceanspaces
nikallass / subdomain.rb
Last active Oct 13, 2019 — forked from ehsahil/subdomain.rb
Subdomain OSINT script, running several best tools.
View subdomain.rb
#Tools based on a resolver.rb by @melvinsh
#Modified by @ehsahil for Personal Use.
#Modified by @nikallass for Personal Use.
require 'socket'
require 'colorize'
if ARGV[0] == nil

Config Apache with /etc/apache2/conf-available/le.conf:

Alias /.well-known/acme-challenge/ "/var/www/html/.well-known/acme-challenge/"
<Directory "/var/www/html/">
    AllowOverride None
    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
    Require method GET POST OPTIONS