Skip to content

Instantly share code, notes, and snippets.

View c4nc's full-sized avatar
🎯
Focusing

Canc c4nc

🎯
Focusing
15 followers · 15 following
View GitHub Profile
@glefait
glefait / extract_EAP.sh
Last active July 22, 2024 20:26 — forked from cablethief/extract_EAP.sh
A simple tshark EAP certificate extractor
#!/bin/sh
# Simple tshark WiFi EAP certificate extractor
# By dominic@sensepost.com
# Updated by :
# Michael Kruger (cablethief)
# Guillem Lefait
# All rights reserved 2018
if [ ! -x $(which tshark) ]; then
echo "tshark not installed"
@rskvp93
rskvp93 / Pwn2Own2021MSExchangeExploit.py
Created June 21, 2022 03:52
import base64
import re
import xml.dom.minidom
import json
import uuid
import struct
import string
import random
import hashlib
import time
@brainfucksec
brainfucksec / user.js
Last active October 14, 2025 22:52
user.js - brainfucksec
/*********************************************************************
*
* Name: user.js | brainfucksec
* Descr.: Mozilla Firefox configuration file: `user.js`
* Version: 0.24.3
* Date: 2025-08-17
* URL: https://gist.github.com/brainfucksec/68e79da1c965aeaa4782914afd8f7fa2
* Maintainer: brainf+ck
*
* Info:
@urish
urish / raspberrypi4-native.cfg
Created November 4, 2021 01:43
OpenOCD Configuration for Raspberry Pi 4
interface bcm2835gpio
bcm2835gpio_peripheral_base 0xFE000000
# Transition delay calculation: SPEED_COEFF/khz - SPEED_OFFSET
# These depend on system clock, calibrated for stock 700MHz
# bcm2835gpio_speed SPEED_COEFF SPEED_OFFSET
bcm2835gpio_speed_coeffs 236181 60
# Each of the JTAG lines need a gpio number set: tck tms tdi tdo
@xpn
xpn / azuread_decrypt_msol_v2.ps1
Last active December 9, 2025 04:25
Updated method of dumping the MSOL service account (which allows a DCSync) used by Azure AD Connect Sync
Write-Host "AD Connect Sync Credential Extract v2 (@_xpn_)"
Write-Host "`t[ Updated to support new cryptokey storage method ]`n"
$client = new-object System.Data.SqlClient.SqlConnection -ArgumentList "Data Source=(localdb)\.\ADSync2019;Initial Catalog=ADSync"
try {
$client.Open()
} catch {
Write-Host "[!] Could not connect to localdb..."
return
@tnishinaga
tnishinaga / README.md
Created December 9, 2019 19:10
OpenOCD config for Raspberry Pi 4

OpenOCD config for Raspberry Pi 4

OpenOCD version

0.10.0+dev-00865-g04ebb43f

How to use

openocd -f interface/YOUR_INTERFACE_CONFIG -f raspi4.cfg
@AnatomicJC
AnatomicJC / android-backup-apk-and-datas.md
Last active December 11, 2025 06:30
Backup android app, data included, no root needed, with adb

Backup android app, data included, no root needed, with adb

Note: This gist may be outdated, thanks to all contributors in comments.

adb is the Android CLI tool with which you can interact with your android device, from your PC

You must enable developer mode (tap 7 times on the build version in parameters) and install adb on your PC.

Don't hesitate to read comments, there is useful tips, thanks guys for this !

@tomnomnom
tomnomnom / passwords.txt
Last active May 23, 2025 16:15
MySQL Docker Passwords pulled from Dockerfile and docker-compose.yml files
0Z0mQ130F65E8wD
1QAZXsw2
3dodPaTXF5
5E84F90
5aQNxsB58752fNl
5ciuk1sy
5zkfAr9Y8k6qosP
8PuNNgp9wm2w
9Lug*96q
14mR00t
@jhaddix
jhaddix / cloud_metadata.txt
Last active December 4, 2025 03:22 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
@HarmJ0y
HarmJ0y / PowerView-3.0-tricks.ps1
Last active December 11, 2025 18:41
PowerView-3.0 tips and tricks
# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
# tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c
# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
# https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1
# New function naming schema:
# Verbs:
# Get : retrieve full raw data sets
# Find : ‘find’ specific data entries in a data set