Keybase proof
I hereby claim:
- I am notdodo on github.
- I am edoardo_rosa (https://keybase.io/edoardo_rosa) on keybase.
- I have a public key whose fingerprint is 1220 9C4A 9062 019F 3D1D 9B77 BDC2 40F8 81A5 C413
To claim this, I am signing this object:
View list.txt
| && | |
| 0&&0 | |
| 1&&1 | |
| 119.18.20.137&&22022 | |
| 1234&&1234 | |
| 12345&&12345 | |
| 154.29.178.51&&22 | |
| 192.185.196.181&&22 | |
| 24online&&24online | |
| 2Wire&&2Wire |
notdodo
/ extractrsa.py
Created May 1, 2020
Old script use to extract shared prime from a number of public RSA keys (i.e. generated by malware)
View extractrsa.py
| #!/usr/bin/env python3 | |
| # | |
| # author: notdodo | |
| # | |
| import os | |
| import sqlite3 | |
| import itertools | |
| from multiprocessing import Pool | |
| try: | |
| import gmpy2 |
notdodo
/ keybase.md
Created Apr 1, 2020
View keybase.md
View lastrofi.zsh
| #!/usr/bin/env zsh | |
| if ! hash lpass 2>/dev/null; then | |
| echo "Lastpass not installed" | |
| exit -1 | |
| fi | |
| if ! hash xsel 2>/dev/null; then | |
| echo "xsel not installed" | |
| exit -1 |
View ecfuck.sh
| #!/usr/bin/bash | |
| # | |
| # Author notdodo | |
| # | |
| # | |
| ############################################################################### | |
| # SCENARIO #################################################################### | |
| ############################################################################### |
notdodo
/ ssround.zsh
Last active May 13, 2020
Stealth Scan a list of IPs/subnets with Nmap and multiple from random and multiple VPNs to avoid IP filtering.
View ssround.zsh
| #!/usr/bin/env zsh | |
| trap ctrl_c INT | |
| # | |
| # author: notdodo | |
| # | |
| # Scan a set of IPs/subnets using multiple VPN profiles | |
| # | |
| # Default values of arguments | |
| local IPS="" | |
| local CREDENTIALS_FILE="./credentials.txt" |
notdodo
/ lfi_generator.py
Created Oct 27, 2019
Create PHP dockers (that are available on the official channel) to create a LFI test laboratory
View lfi_generator.py
| #!/usr/bin/env python3 | |
| import glob | |
| import requests | |
| import subprocess | |
| import sys | |
| from bs4 import BeautifulSoup | |
| from grp import getgrgid | |
| from os import stat, path, chown | |
| from pwd import getpwuid |
notdodo
/ mashell.py
Last active Oct 14, 2020
Execute command using HEX or CHAR encoding. Bypass WAF and IPS filtering enabling RCE using xp_cmdshell: https://knifesec.com/evading-sql-injection-filters-to-get-rce/
View mashell.py
| #!/usr/bin/env python3 | |
| # Injector script to get a pseudo-interactive shell using xp_cmdshell | |
| # Source post: | |
| # Author: notdodo | |
| # https://twitter.com/_d_0_d_o_ | |
| # | |
| # USAGE: python3 ./mashell.py "whoami /priv" | |
| # | |
| import binascii | |
| import hashlib |
notdodo
/ parse_dump.py
Last active Mar 17, 2020
Parse `sqlmap` dumps from data breaches or leaks file into a JSON file
View parse_dump.py
| #!/usr/bin/env python3 | |
| # -*- encoding: ascii -*- | |
| # | |
| # AUTHOR: Edoardo Rosa dodo https://github.com/notdodo | |
| # | |
| # DESCRIPTION: Parse `sqlmap` dumps from data breaches or leaks into JSON files | |
| # | |
| # Some files have shitty encoding/chars and they must be educated: | |
| # sed -i 's/[^[:print:]\t]//g; s/\\r//g' *.txt | |
| import click |
notdodo
/ OSCPbuffer.md
Last active Jan 26, 2019
View OSCPbuffer.md
Speed up videos
document.getElementById("video").playbackRate = 1.5;VPN - NM
[vpn]
dev-type=tap
NewerOlder