Dominique RIGHETTO righettod

## rp_session_cookie.py
import http.client

def obtains_session_cookie():
    """
    Function to obtain an session cookie from the reverse proxy Microsoft ISA.

    :return The value of the "Set-Cookie" response HTTP header.
    """
    # Build and send request
    req_body = "curl=Z2FstoreZ2F&flags=0&forcedownlevel=0&formdir=9&username=LOGIN&password=PASSWORD&SubmitCreds=Ouvrir+une+session"

## GetApkFromSmartphoneWithADB.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                righettod
                / GetApkFromSmartphoneWithADB.md
            
            
              Last active
              October 5, 2019 08:28
            
              
                Retrieve Android APK from Smartphone using ADB.
              
          
List package in order to find application package name: adb shell pm list packages
Display package path: adb shell pm path [PACKAGE_NAME]
Download APK: adb pull [PACKAGE_PATH]


## git_repos_full_backup.py
import requests
import colorama
import os
import git
import argparse
import shutil
import json
from git import Repo
from termcolor import colored

## rpc-req.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                righettod
                / rpc-req.md
            
            
              Last active
              February 16, 2021 19:08
            
              
                Request template to test XML RPC service exposed from CMS like Drupal, Wordpress...
              
          
    XML RPC method exposed:

system.multicall
system.methodSignature
system.getCapabilities
system.listMethods
system.methodHelp

Request template:
<?xml version="1.0"?>

  
## check_cve_state.py
#!/usr/bin/python
# -*- coding: utf-8 -*-
"""
Script to verify, for a set of CVE, if the MITRE has released them
and if a link to the security advisory on the CVE owner site has been added.

Dependencies: pip install requests
"""
import requests
import collections

## payloads.txt
# The situation is the following:
# Your enter ab in a feature and it return data to you but when your enter ab' it indicate that there is not data found.
#
# So, does it means that there is no SQLi because ab' is well handled OR the error is catched
# and a "not data found message" is returned?
#
# The goal here is to submit a payload that, if interpreted by the SQL DB, will give ab and then data will be returned
# then indicating that there is a SQLi because the payload is interpreted.
ab';#
ab';--

## ws_soap_fuzz.py
# Simple dirty script to fuzz a SOAP request using the Burp Sniper approach:
#     See https://portswigger.net/burp/documentation/desktop/tools/intruder/positions
# Dependencies:
#     pip install lxml requests_ntlm requests tabulate tqdm
import requests
import urllib3
from requests_ntlm import HttpNtlmAuth
from lxml import etree as ET
from tabulate import tabulate
from hashlib import sha1

## clickjacking-payload-template.html
<head>
   <!-- Big up to https://portswigger.net/web-security/clickjacking labs :) -->
   <style>
      .target_website {
      position:relative;
      width:800px;
      height:400px;
      #Set opacity to 0.5 to see overlay allowing preparation of the attack
      #Set opacity to 0.00001 to made the target frame site transparent and bypass some browser protection on opacity like one in chrome for example
      #See https://www.w3schools.com/css/css_image_transparency.asp

## pdf_metadata_cleanup.md

      
              1 file
            
          
              1 fork
            
          
              6 comments
            
          
              2 stars
            
          
                righettod
                / pdf_metadata_cleanup.md
            
            
              Last active
              May 23, 2023 14:21
            
              
                Java and C# code to cleanup the metadata from a PDF document.
              
          
    Code sample

All librairies used are free and open source.
Java

/* 
  See https://pdfbox.apache.org 
  See https://mvnrepository.com/artifact/org.apache.pdfbox/pdfbox for released artifacts

  
## Android-Utils.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                righettod
                / Android-Utils.md
            
            
              Last active
              January 2, 2020 09:31
            
              
                Utility PowerShell module when manipulating APK on Windows
              
          
    The code has been transformed to the following project
	import http.client

	def obtains_session_cookie():
	"""
	Function to obtain an session cookie from the reverse proxy Microsoft ISA.

	:return The value of the "Set-Cookie" response HTTP header.
	"""
	# Build and send request
	req_body = "curl=Z2FstoreZ2F&flags=0&forcedownlevel=0&formdir=9&username=LOGIN&password=PASSWORD&SubmitCreds=Ouvrir+une+session"
	import requests
	import colorama
	import os
	import git
	import argparse
	import shutil
	import json
	from git import Repo
	from termcolor import colored
	#!/usr/bin/python
	# -- coding: utf-8 --
	"""
	Script to verify, for a set of CVE, if the MITRE has released them
	and if a link to the security advisory on the CVE owner site has been added.

	Dependencies: pip install requests
	"""
	import requests
	import collections
	# The situation is the following:
	# Your enter ab in a feature and it return data to you but when your enter ab' it indicate that there is not data found.
	#
	# So, does it means that there is no SQLi because ab' is well handled OR the error is catched
	# and a "not data found message" is returned?
	#
	# The goal here is to submit a payload that, if interpreted by the SQL DB, will give ab and then data will be returned
	# then indicating that there is a SQLi because the payload is interpreted.
	ab';#
	ab';--
	# Simple dirty script to fuzz a SOAP request using the Burp Sniper approach:
	# See https://portswigger.net/burp/documentation/desktop/tools/intruder/positions
	# Dependencies:
	# pip install lxml requests_ntlm requests tabulate tqdm
	import requests
	import urllib3
	from requests_ntlm import HttpNtlmAuth
	from lxml import etree as ET
	from tabulate import tabulate
	from hashlib import sha1
	<head>
	<!-- Big up to https://portswigger.net/web-security/clickjacking labs :) -->
	<style>
	.target_website {
	position:relative;
	width:800px;
	height:400px;
	#Set opacity to 0.5 to see overlay allowing preparation of the attack
	#Set opacity to 0.00001 to made the target frame site transparent and bypass some browser protection on opacity like one in chrome for example
	#See https://www.w3schools.com/css/css_image_transparency.asp