Skip to content

Instantly share code, notes, and snippets.

View s0md3v's full-sized avatar

Somdev Sangwan s0md3v

View GitHub Profile
@s0md3v
s0md3v / test.ps1
Last active March 6, 2024 22:38
google magika bypass
#def _tokenize(code, comments, comment_strings, containers):
# """
# tokenizes sources code to find hardcoded strings
# returns list of hardcoded strings
# """
# string = container = comment_end = ''
# state = 'look'
# skip = 0
# comment = False
# all_strings = []
The reviewer is only going to look at your resume for like 10 seconds!
No buzzwords like “I am a hardworking, ambitious, problem solver, curious” etc. GET TO THE POINT
No photo because it can result bias based on looks, gender, ethnicity
One page only
No fancy progress bars for skills etc.
Nothing fancy as it might not get scanned by a automated reviewer set up by the hiring guy
Tailor your resume to each job that you apply to
Don’t name your resume something silly e.g. untitled.pdf and no silly filetypes. It should be “Resume - First Last.pdf”
@s0md3v
s0md3v / regex
Created November 30, 2022 17:05
b match b
b+ is match bbbbbbbbbbbbbbbbbbbbbbbbb
+ is 1 or more matches
[bd] is match b d
[bd]+ is match bbbdddbbdbdbdbdbdbd, bbbbbddddddd, bbbbbbbbbb, dddddddddddd
b* bbbbbbbbbbbbbbbbbbbbbbbbb
* is 0 or more matches
[^x] matches everything but x
(ab+|bc+) will match both abbbbbbb and bccccccccccc, its a OR statement
0123456789 \d
Orgnization
- find their child companies (crunchbase)
- reverse search copyright (Copyright Example Inc. 2018-2022)
- job description (tech stack, apply for a job with fake ID)
- asn (ips)
- emails (scraping, bruteforcing)
- bruteforcing
- phishing
- spoofing
- domain
@s0md3v
s0md3v / shodan_ports.txt
Created April 15, 2022 18:02
list of ports scanned by shodan
7
11
13
15
17
19
20
21
22
23
@s0md3v
s0md3v / cod.py
Created March 10, 2021 18:52
poc for cod mobile gunsmith helper
# Author: Somdev Sangwan (@s0md3v)
#
# GPL v3 License
# Copyright 2021 Somdev Sangwan
import itertools
attachments = {
'tactical suppressor': {
'type': 'muzzle',
@s0md3v
s0md3v / waffer.py
Created December 16, 2020 10:12
enumerates working event handlers
import requests
with open("events", "r") as events:
for event in events:
event = event.rstrip("\n")
print(requests.get("http://game1.aliyundemo.com/demo/xss.php?name=<x/%s=" % event).status_code, event)
@s0md3v
s0md3v / events
Created December 16, 2020 10:10
event handlers
bruh
onabort
onactivate
onafterprint
onafterscriptexecute
onafterupdate
onanimationend
onanimationiteration
onanimationstart
onariarequest
@s0md3v
s0md3v / concurrency.go
Last active October 15, 2020 08:52
concurrency in golang
package main
import (
"sync"
"net/http"
)
func example_function(){
// function to be run concurrently
}
<script>
window.addEventListener("message", function(message){
document.write("I heard '" + message.data + "'")
});
</script>