nil0x42

#!/usr/bin/env python3

# @nil0x42

import sys
from selenium import webdriver
from time import sleep
import requests
import pickle
import json

nil0x42

## GENERIC

SocksPort   9050
Transport   9040
DNSPort     9053
ControlPort 9051

# map onion services to internal IP
AutomapHostsOnResolve 1

nil0x42

Awesome Github OSINT

nil0x42's tips & tricks

📜 get-github-followers-twitter.py

• Scrape twitter account of all github followers of target user on GitHub

📜 get-github-stargazers-twitter.py

• Scrape twitter account of all stargazers of target project on GitHub

nil0x42

🌐 Shields.io

• https://shields.io/
• Quality metadata badges for open source projects

🌐 Badgen

• https://badgen.net/
• Fast badge generating service

🌐 glitch.com/~octicons

• https://glitch.com/~octicons

nil0x42

#!/bin/bash

# author: @nil0x42
# store your neo4j BloodHound databases in specific directories
# so you can keep one clean DB per engagement

# add me to you personal ~/bin directory, with chmod +x
# & enjoy this stupid bloodhound/neo4j multiplexer

function fail () {

nil0x42

#!/bin/bash

# author: @nil0x42
# Quickly decompile a .jar AND its interesting classes for reversing

PROCYON="procyon-decompiler"
JAR="jar"
OUT="$1.decompile"

if [[ $# -ne 1 ]] || [[ "$1" != *".jar" ]]; then

nil0x42

# author: @nil0x42
# OPSEC, anti-forensics, bash

# - Preserve file's `mtime` after edition
# - Prevent vim from using .swp & .viminfo

vim-OPSEC(){ cp -fp "$1" /tmp/x && vim -ni NONE /tmp/x && touch -r "$1" /tmp/x && cp -fp /tmp/x "$1";}

nil0x42

#!/usr/bin/env python3
#author: @nil0x42
# Usage:
#   $ export GITHUB_TOKEN="<YOUR GITHUB TOKEN>"
#   $ ./get-github-followers-twitter.py <GITHUB USER>
import sys, os, requests, json

LOGIN = sys.argv[1]
GH_TOKEN = os.environ.get("GITHUB_TOKEN")
graphql = """

nil0x42

# Get_Early_Stargazers #OSINT #recon trick, by @nil0x42

# Get list of first people to star a GitHub repository.
# Those are more likely to be closely connected to target org/user

# Run this query with wanted owner/name in GitHub GraphQL explorer:
#   - https://developer.github.com/v4/explorer/

query Get_Early_Stargazers {
  repository(owner: "sherlock-project", name: "sherlock") {

nil0x42

#!/usr/bin/env python3

# author: @nil0x42
# Usage example:
#   $ export GITHUB_TOKEN="<YOUR GITHUB TOKEN>"
#   $ ./get-githus-stargazers-twitter.py "rapid7/metasploit-framework"
import sys, os, requests, json

OWNER, REPO = sys.argv[1].split("/")
GH_TOKEN = os.environ.get("GITHUB_TOKEN")