Skip to content

Instantly share code, notes, and snippets.

@ngregoire
ngregoire / BurpExtender.kt
Created June 4, 2021 15:25
Simple Burp extension using performAction()
package burp
@Suppress("unused") // Remove IDE warning, as this class will be used by burp anyway
class BurpExtender : IBurpExtender, ISessionHandlingAction {
private lateinit var cb : IBurpExtenderCallbacks
override fun registerExtenderCallbacks(callbacks: IBurpExtenderCallbacks) {
val extensionName = "A basic Kotlin template"
@heywoodlh
heywoodlh / choose-buku.sh
Last active February 15, 2024 01:40
choose-launcher.sh
#!/usr/bin/env bash
if ! command -v choose > /dev/null
then
echo 'Please install choose.'
fi
if ! command -v buku > /dev/null
then
echo 'Please install buku.'
{
"mode": "patterns",
"proxySettings": [
{
"address": "127.0.0.1",
"port": 8080,
"username": "",
"password": "",
"type": 1,
"title": "127.0.0.1:8080",
@nullenc0de
nullenc0de / content_discovery_nullenc0de.txt
Last active February 10, 2026 17:20
content_discovery_nullenc0de.txt
This file has been truncated, but you can view the full file.
/
$$$lang-translate.service.js.aspx
$367-Million-Merger-Blocked.html
$defaultnav
${idfwbonavigation}.xml
$_news.php
$search2
£º
.0
/0
@jhaddix
jhaddix / all.txt
Last active April 12, 2026 06:29
all wordlists from every dns enumeration tool... ever. Please excuse the lewd entries =/
This file has been truncated, but you can view the full file.
.
..
........
@
*
*.*
*.*.*
🐎
@jaredcatkinson
jaredcatkinson / Get-InjectedThread.ps1
Last active March 13, 2026 04:24
Code from "Taking Hunting to the Next Level: Hunting in Memory" presentation at SANS Threat Hunting Summit 2017 by Jared Atkinson and Joe Desimone
function Get-InjectedThread
{
<#
.SYNOPSIS
Looks for threads that were created as a result of code injection.
.DESCRIPTION
@BuffaloWill
BuffaloWill / cloud_metadata.txt
Last active March 26, 2026 23:27
Cloud Metadata Dictionary useful for SSRF Testing
## IPv6 Tests
http://[::ffff:169.254.169.254]
http://[0:0:0:0:0:ffff:169.254.169.254]
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]