Pinned Loading
-
writeup-miner
writeup-miner PublicThis is a useful Python script for extracting bug bounty or any other write-ups from Medium.com and other websites (soon).
-
robofinder
robofinder PublicRobofinder retrieves historical #robots.txt files from #Archive.org, allowing you to uncover previously disallowed directories and paths for any domain—essential for deepening your #OSINT and #reco…
-
This gist outlines a method for data...
This gist outlines a method for data exfiltration using DNS in Out-Of-Band (OOB) scenarios. It explains how to utilize DNS queries to transmit sensitive information, such as system details, when direct communication is unavailable. The guide covers both simple queries (e.g., exfiltrating the username) and more complex data (e.g., output of the uname -a command), demonstrating the use of encoding techniques like hex and base64 for safe transmission. Additionally, it includes a prerequisite section for setting up your OOB server. 1# Data Exfiltration Using DNS (Out-Of-Band)
23## Description
4In an Out-Of-Band (OOB) situation where direct responses to requests are unavailable, we can leverage DNS (specifically UDP) to exfiltrate data. In this example, we'll demonstrate how to use `dig` to query DNS and exfiltrate information such as the username (`whoami`), and how to handle more complex data like the output of `uname -a` by encoding it before exfiltration.
5 -
cloudrecon
cloudrecon PublicThis script is used to search for cloud certificate entities such as Amazon, Azure, and others that have been extracted by the kaeferjaeger.gay provider.
-
django-rce-exploit
django-rce-exploit PublicA Python tool for exploiting Django RCE via deserialization vulnerabilities in session cookies, allowing remote code execution through forged cookies.
Python 9
If the problem persists, check the GitHub status page or contact support.