Aung Khant yehgdotnet

## rduck-pinbrute.py
#!/usr/bin/env python
# rduck-pinbrute: Generate Duckyscript file that brute forces all 4-digit
# PIN values for use in attacking Android devices.  Prioritizes common
# PIN values before resorting to exhaustive 0000-9999 search.
# Joshua Wright, josh@willhackforsushi.com. Public Domain.
#
# Inspired by Darren Kitchen script:
# https://forums.hak5.org/index.php?/topic/28165-payload-android-brute-force-4-digit-pin/

# Data Genetics high probability list

## delete-git-recursively.sh
( find . -type d -name ".git" && find . -name ".gitignore" && find . -name ".gitmodules" ) | xargs rm -rf

## mandros.py
import sys
import requests
import threading
import HTMLParser
from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler

'''
Description: Reverse MSSQL shell through xp_cmdshell + certutil for exfiltration
Author: @xassiz
'''

## tlds
ac
ad
ae
af
ag
ai
al
am
an
ao

## vpn.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                yehgdotnet
                / vpn.md
            
            
              Created
              October 23, 2019 11:50
                — forked from joepie91/vpn.md
            
              
                Don't use VPN services.
              
          
    Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.
Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.
A Russian translation of this article can be found here, contributed by Timur Demin. There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.
Why not?


## GraphQL-Introspection-Query-Url-Encoded
query%20IntrospectionQuery%20%7B%0A%20%20%20%20__schema%20%7B%0A%20%20%20%20%20%20queryType%20%7B%20name%20%7D%0A%20%20%20%20%20%20mutationType%20%7B%20name%20%7D%0A%20%20%20%20%20%20types%20%7B%0A%20%20%20%20%20%20%20%20...FullType%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20directives%20%7B%0A%20%20%20%20%20%20%20%20name%0A%20%20%20%20%20%20%20%20description%0A%20%20%20%20%20%20%20%20locations%0A%20%20%20%20%20%20%20%20args%20%7B%0A%20%20%20%20%20%20%20%20%20%20...InputValue%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%0A%20%20%7D%0A%20%20fragment%20FullType%20on%20__Type%20%7B%0A%20%20%20%20kind%0A%20%20%20%20name%0A%20%20%20%20description%0A%20%20%20%20fields%28includeDeprecated%3A%20true%29%20%7B%0A%20%20%20%20%20%20name%0A%20%20%20%20%20%20description%0A%20%20%20%20%20%20args%20%7B%0A%20%20%20%20%20%20%20%20...InputValue%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20type%20%7B%0A%20%20%20%20%20%20%20%20...TypeRef%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20isDeprecated%0A%20%20%

## fakebeacon.py
#!/usr/bin/env python
# -*- coding: UTF-8 -*-
#
# source: https://www.4armed.com/blog/forging-wifi-beacon-frames-using-scapy/
#
# requires:
#     radiotap supported wifi nic/driver (frame injection) (works fine with Ralink RT2571W)
#     iwconfig $iface mode monitor
#     iw dev $iface set channel $channel
#       or

## server.py
#!/usr/bin/env python3
"""
Very simple HTTP server in python for logging requests
Usage::
    ./server.py [<port>]
"""
from http.server import BaseHTTPRequestHandler, HTTPServer
import logging

class S(BaseHTTPRequestHandler):

## windvane.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                yehgdotnet
                / windvane.md
            
            
              Created
              November 10, 2021 09:44
                — forked from sandywu/windvane.md
            
          
    WindVane Bridge API (v1.2.2)

提供与客户端通讯的机制。支持WindVane SDK v2.2 以上版本。

WindVane SDK参考。

WindVane 独有UA

windvane 在客户端中，会将原始UA后面跟上 WindVane/WindVaneSDK的版本号，你可以通过判断UA的方式来检查环境
其中，淘宝主客户端1212版本（IOS 3.4.5 ANDROID 3.9.5）后格式为
	#!/usr/bin/env python
	# rduck-pinbrute: Generate Duckyscript file that brute forces all 4-digit
	# PIN values for use in attacking Android devices. Prioritizes common
	# PIN values before resorting to exhaustive 0000-9999 search.
	# Joshua Wright, josh@willhackforsushi.com. Public Domain.
	#
	# Inspired by Darren Kitchen script:
	# https://forums.hak5.org/index.php?/topic/28165-payload-android-brute-force-4-digit-pin/

	# Data Genetics high probability list
	import sys
	import requests
	import threading
	import HTMLParser
	from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler

	'''
	Description: Reverse MSSQL shell through xp_cmdshell + certutil for exfiltration
	Author: @xassiz
	'''
	#!/usr/bin/env python
	# -- coding: UTF-8 --
	#
	# source: https://www.4armed.com/blog/forging-wifi-beacon-frames-using-scapy/
	#
	# requires:
	# radiotap supported wifi nic/driver (frame injection) (works fine with Ralink RT2571W)
	# iwconfig $iface mode monitor
	# iw dev $iface set channel $channel
	# or
	#!/usr/bin/env python3
	"""
	Very simple HTTP server in python for logging requests
	Usage::
	./server.py [<port>]
	"""
	from http.server import BaseHTTPRequestHandler, HTTPServer
	import logging

	class S(BaseHTTPRequestHandler):