Skip to content

Instantly share code, notes, and snippets.

View thevillagehacker's full-sized avatar
🎯
Focusing

Naveen J thevillagehacker

🎯
Focusing
76 followers · 6 following
View GitHub Profile
@thevillagehacker
thevillagehacker / ssl-bypass.js
Created June 30, 2020 03:10 — forked from vj0shii/ssl-bypass.js
setTimeout(function(){
Java.perform(function (){
console.log("[*] Script loaded")
var MenuActivity = Java.use("sg.vantagepoint.mstgkotlin.MenuActivity")
StartActivity.RootDetection.overload().implementation = function() {
console.log("[*] isDeviceRooted function invoked")
return false
}
console.log("");
console.log("[.] Cert Pinning Bypass/Re-Pinning");
@thevillagehacker
thevillagehacker / all.txt
Created September 26, 2020 03:43 — forked from jhaddix/all.txt
all wordlists from every dns enumeration tool... ever. Please excuse the lewd entries =/
This file has been truncated, but you can view the full file.
.
..
........
@
*
*.*
*.*.*
🐎
@thevillagehacker
thevillagehacker / content_discovery_all.txt
Created September 26, 2020 03:43 — forked from jhaddix/content_discovery_all.txt
a masterlist of content discovery URLs and files (used most commonly with gobuster)
This file has been truncated, but you can view the full file.
`
~/
~
ים
___
__
_
@thevillagehacker
thevillagehacker / tmux-help.md
Created November 23, 2020 09:41

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname
@thevillagehacker
thevillagehacker / android-ssl-bypass.js
Created November 23, 2020 09:51
/*
Android SSL Re-pinning frida script v0.2 030417-pier
$ adb push burpca-cert-der.crt /data/local/tmp/cert-der.crt
$ frida -U -f it.app.mobile -l frida-android-repinning.js --no-pause
https://techblog.mediaservice.net/2017/07/universal-android-ssl-pinning-bypass-with-frida/
UPDATE 20191605: Fixed undeclared var. Thanks to @oleavr and @ehsanpc9999 !
*/
@thevillagehacker
thevillagehacker / GraphQL-Introspection.graphql
Created November 24, 2020 08:25
query IntrospectionQuery {
__schema {
queryType { name }
mutationType { name }
subscriptionType { name }
types {
...FullType
}
directives {
name
@thevillagehacker
thevillagehacker / ffuf_oneline.sh
Created December 8, 2020 04:08
# Basic Usage
ffuf -w wordlist.txt -u http://127.0.0.1:8000/api/FUZZ/6 -o output.txt -replay-proxy http://127.0.0.1:8080
# Basic Usage With a Cookie
ffuf -w wordlist.txt -u http://127.0.0.1:8000/api/FUZZ/6 -o output.txt -replay-proxy http://127.0.0.1:8080 -b "laravel_session=eyJpdiI6Ii8wQU11dTVlUkg2alRHUXBIVzlGSnc9PSIsInZhbHVlIjoiOWs3YllJWTdqNC9xa1pMeFRvMFh0OE1vRFpaWm9GSzFkRktVZS9yUHBDM0lIazZ4K0NsbndxWVIxQ05VZWhqZUZaR0RGQWlFdmdDc24yWllYRklGSXI5STd2b05Pam4yRXIwV1BUWkZhUnFLNUFzOWsycmRHcnlxS0FqRWNsSnEiLCJtYWMiOiI3ZTliMmM2YzIxOTExNDE0NmVjYTYyMGI4Nzg4YzJiYjNmNjVkNDI1YzEyODYwMzY5YzczNzY3NTUwZDk0OGYzIn0%3D;"
# Adding a delay
ffuf -w wordlist.txt -u http://127.0.0.1:8000/api/FUZZ/6 -o output.txt -replay-proxy http://127.0.0.1:8080 –p 1 –t 3
# Adding a delay (new method)
@thevillagehacker
thevillagehacker / main.go
Created January 3, 2021 02:45
Filter-Resolved from tomnomnom
package main
import (
"bufio"
"flag"
"fmt"
"net"
"os"
"sync"
)
@thevillagehacker
thevillagehacker / Cloud_Meta_Data_history.md
Last active January 25, 2021 10:39
@thevillagehacker
thevillagehacker / JavascriptRecon.md
Created January 28, 2021 01:58
My Javascript Recon Process - BugBounty

Description

This is a simple guide to perform javascript recon in the bugbounty

Steps

  • The first step is to collect possibly several javascript files (more files = more paths,parameters -> more vulns)