Zara Ulloa ulloaza
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| % Wra7h/FlavorTown | |
| % MATLAB version: R2023a | |
| % Tested on Win10 x64 | |
| if not(libisloaded('kernel32')) | |
| loadlibrary('kernel32.dll', @kernel32proto); | |
| end | |
| if not(libisloaded('msvcrt')) | |
| loadlibrary('msvcrt.dll', @msvcrtproto); |
tothi
/ mitmproxy-jwt-refresh-addon.py
Created
August 28, 2022 20:52
mitmproxy addon for handling oauth access and refresh tokens automatically
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # run: mitmproxy -k -p 8090 -s mitmproxy-jwt-refresh-addon.py | |
| # set burp upstream proxy to localhost:8090 | |
| # | |
| # use case: | |
| # - application authorization is implemented by OAuth 2.0 | |
| # - testing is performed using Burp as primary and mitmproxy as upstream proxy | |
| # - mitmproxy takes care of the Authorization tokens using this addon | |
| # - user gets an access_token and a refresh_token during the 1st login (e.g. password login) | |
| # - mitmproxy addon caches access_token and refresh_token | |
| # - mitmproxy addon adds Authorization: Bearer [access_token from cache] header for every request |
SeanPesce
/ find_symbol.sh
Last active
May 10, 2023 19:03
Linux shell command to find binaries that contain a specific symbol. Useful when searching for command injection and other vulnerabilities.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| SYMBOL_NAME="system"; find ./ -type f -exec printf "{}: " \; -exec sh -c "objdump -T \"{}\" 2>&1 | grep -e \" $SYMBOL_NAME\" ; echo \"\"" \; | grep -e " $SYMBOL_NAME" |
