Skip to content

Instantly share code, notes, and snippets.

View uriellberdeja's full-sized avatar
🏠
Working from home

Uriel Berdeja uriellberdeja

🏠
Working from home
View GitHub Profile
@uriellberdeja
uriellberdeja / default_trusted_dotnet_binaries.txt
Last active October 17, 2024 01:31
Default Trusted .NET Binaries in Windows 10 and Windows 11
AddInProcess.exe *
AddInProcess32.exe *
AddInUtil.exe
aspnet_compiler.exe
aspnet_regbrowsers.exe *
spnet_regsql.exe *
CasPol.exe *
ComSvcConfig.exe
DataSvcUtil.exe
dfsvc.exe
@uriellberdeja
uriellberdeja / any_term_dropdown.sh
Created October 2, 2024 04:19
Set any terminal as quake, set kitty as quake, set alacritty as quake, set xterm as quake. Set pulldown terminal.
#!/usr/bin/env bash
# AUTHOR: gotbletu (@gmail|twitter|youtube|github|lbry)
# https://www.youtube.com/user/gotbletu
# DESC: turn any terminal into a dropdown terminal
# DEMO: https://www.youtube.com/watch?v=mVw2gD9iiOg
# DEPEND: coreutils xdotool wmutils (https://github.com/wmutils/core | https://aur.archlinux.org/packages/wmutils-git/)
# CLOG: 2022-03-05 else statement to allow terminal to jump to current virtual desktop if is visible on another desktop
# 2022-02-28 added auto launch terminal if none running by https://github.com/aaccioly
# 2021-02-10 use comm to match window name and class, this avoids terminal windows with different names
# 2015-02-15 0.1
@uriellberdeja
uriellberdeja / cups-browsed.md
Created September 26, 2024 22:13 — forked from stong/cups-browsed.md
CUPS disclosure leaked online. Not my report. The original author is @evilsocket

Original report

  • Affected Vendor: OpenPrinting
  • Affected Product: Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and cups-filters.
  • Affected Version: All versions <= 2.0.1 (latest release) and master.
  • Significant ICS/OT impact? no
  • Reporter: Simone Margaritelli [evilsocket@gmail.com]
  • Vendor contacted? yes The vendor has been notified trough Github Advisories and all bugs have been confirmed:
@uriellberdeja
uriellberdeja / Bash-cheatsheet.md
Created July 29, 2024 23:42
Bash cheatsheet for Pentesters
$ git log --oneline --graph --decorate --all

Create an alias:

$ git config --global alias.tree 'log --oneline --graph --decorate --all'

Then run

@uriellberdeja
uriellberdeja / WFUZZ_WIN_NOTES.md
Last active July 20, 2024 15:12
Wfuzz Windows Notes

Use version 3.11, if installed from store the path might be like this:

C:\Users\Redghost\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.11*

Configure launcher to use python version 3.11 and run python using py launcher to initialize virtualenv

py --list 
@uriellberdeja
uriellberdeja / vcvarsall.ps1
Created July 19, 2024 18:25
Initialize Visual Studio Developer Powershell from a regular Powershell 7 and Powershell 5.1 session
$paths = @(
"C:\Program Files\Microsoft Visual Studio\2022\Community",
"C:\Program Files\Microsoft Visual Studio\2022\BuildTools",
"C:\Program Files (x86)\Microsoft Visual Studio\2019\Community",
"C:\Program Files (x86)\Microsoft Visual Studio\2019\BuildTools"
)
$VsInstallPath = $null
foreach ($basePath in $paths) {
@uriellberdeja
uriellberdeja / drvscan.cpp
Created July 19, 2024 03:50 — forked from adrianyy/drvscan.cpp
vulnerable driver scanner
#include <string>
#include <vector>
#include <fstream>
#include <iostream>
#include <filesystem>
#include <Windows.h>
#include <winternl.h>
static_assert( sizeof( void* ) == 8 );
@uriellberdeja
uriellberdeja / youtube-parent-guard.js
Created July 16, 2024 23:10
YouTube Parent Guard
// ==UserScript==
// @name YOUTUBE_PARENT_GUARD
// @namespace NAMESPACE
// @version 0.1
// @description Youtube parentig tool
// @match http*://*/*
// @include http*://*/*
// @copyright 2024+, YOURNAME
// ==/UserScript==
@uriellberdeja
uriellberdeja / README.md
Last active July 20, 2024 15:04
burp-suite-handy-tips

Filter emails:

[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}

WAF fingerprinting capabilities are banning my Burp browser

Use firefox

Notes:

Regarding the interception of HTTP:

We did it through USB reverse tunneling and iptable rules local to the phone.