Skip to content

Instantly share code, notes, and snippets.

View notdodo's full-sized avatar
☁️
randomASDF' or '1'='1

Edoardo Rosa notdodo

☁️
randomASDF' or '1'='1
View GitHub Profile
@notdodo
notdodo / addjstopdf.py
Last active March 27, 2020 21:55
Add embedded JavaScript script to a PDF document (python3)
#!/usr/bin/env python3
# https://gist.github.com/edoz90/a441f2bdfc8c99c1999db0a3e8495fb6
# Author: notdodo
try:
from PyPDF2 import PdfFileWriter, PdfFileReader
import click
except ModuleNotFoundError:
print("pip install pypdf2 click")
import sys
@notdodo
notdodo / getETH.py
Last active February 28, 2018 08:48
Check current informations from ethermine API and ETH/EUR value
#!/usr/bin/env python3
import aiohttp
import asyncio
import async_timeout
import datetime
from colored import fg, stylize, attr
wallet_address = "ADDRESS"
urlAPI = "https://api.ethermine.org/miner/{}".format(wallet_address)
coinbase = "https://www.coinbase.com/api/v2/prices/ETH-EUR/spot"
@notdodo
notdodo / share_eth0.zsh
Created February 7, 2018 17:44
Share WIFI network with a wired device (i.e.: RaspberryPI) using dnsmasq
#!/usr/bin/env zsh
INTERFACE_WIRED="enp6s0"
INTERFACE_INTERNET="wlp2s0"
sudo ip addr add 192.168.2.1/24 dev ${INTERFACE_WIRED}
# NAT
sudo iptables -A FORWARD -o eth0 -i ${INTERFACE_WIRED} -s 192.168.2.0/24 -m conntrack --ctstate NEW -j ACCEPT
sudo iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -t nat -F POSTROUTING
@notdodo
notdodo / anti-memcached.py
Last active March 12, 2018 18:16
List of all memcached servers from shodan and script to kill (flush_all) DDoSing IPs.
#!/usr/bin/env python
import json
import socket
import urllib.request
from random import shuffle
def send_flush(s):
s.sendall("{}\r\n".format("flush_all").encode())
print(s.recv(4096).decode().strip())
@notdodo
notdodo / caesar.py
Last active May 4, 2018 13:59
Caesar Cipher bruteforcer with basic support for advanced string trasformation
#!/usr/bin/env python3
import sys
import base64
try:
import click
except Exception as e:
print(e)
print("Install click")
sys.exit(-1)
@notdodo
notdodo / steghide_brute.py
Last active September 8, 2019 15:32
CTF Multicore bruteforcer for `steghide`
#!/usr/bin/env python3
# -*- encoding: utf-8 -*-
import multiprocessing as mp
import os
import subprocess
import time
import sys
try:
import click
from colored import fg, stylize
@notdodo
notdodo / add_wp_user.sql
Created November 6, 2018 16:43
Add a Wordpress Admin user from MySQL
INSERT INTO `wp_users` (`user_login`, `user_pass`, `user_nicename`, `user_email`, `user_status`) VALUES ('edoz90', MD5('passwordASD'), 'administrator', 'asd@asd.it', '0');
INSERT INTO `wp_usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, (SELECT max(id) FROM wp_users), 'wp_capabilities', 'a:1:{s:13:"administrator";s:1:"1";}');
INSERT INTO `wp_usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, (SELECT max(id) FROM wp_users), 'wp_user_level', '10');
@notdodo
notdodo / cleanvba.zsh
Created December 31, 2018 14:33
Clean VBA: this script should remove unused variables in obfuscated VBAs (should work also for other files)
#!/usr/bin/env zsh
#
toclean=${1}
while read line; do
local length=$(echo -n ${line} | \wc -m)
if [[ ${length} -ge 50 ]]; then
local match=$(echo ${line} | \awk '{print $1}')
local file_match=$(\rg -i ${match} * -c | \awk -F ':' '{print $1}')

Speed up videos

document.getElementById("video").playbackRate = 1.5;

VPN - NM

[vpn]
dev-type=tap
@notdodo
notdodo / parse_dump.py
Last active March 17, 2020 18:10
Parse `sqlmap` dumps from data breaches or leaks file into a JSON file
#!/usr/bin/env python3
# -*- encoding: ascii -*-
#
# AUTHOR: Edoardo Rosa dodo https://github.com/notdodo
#
# DESCRIPTION: Parse `sqlmap` dumps from data breaches or leaks into JSON files
#
# Some files have shitty encoding/chars and they must be educated:
# sed -i 's/[^[:print:]\t]//g; s/\\r//g' *.txt
import click