mgcfish

The Web Application Hacker's Handbook

Web Application Hacker's Handbook Task checklist as a Github-Flavored Markdown file

	console.log("[*] SSL Pinning Bypasses");
	console.log(`[*] Your frida version: ${Frida.version}`);
	console.log(`[*] Your script runtime: ${Script.runtime}`);

	/**
	* by incogbyte
	* Common functions
	* thx apkunpacker, NVISOsecurity, TheDauntless
	* Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that.
	* !!! THIS SCRIPT IS NOT A SILVER BULLET !!

	${0 }
	${0 == pageList.maxPage}
	${1}
	${1 eq currentPageNumber }
	${5}
	${5/6}
	${a+1 }
	${a.academyName}
	${a.academyNumber}
	${academyNumber==a.academyNumber}

	addEventListener("fetch", event => {
	event.respondWith(handleRequest(event.request))
	})

	////////////////////////////////////////////////////////////////////////////////////////////////////
	// ! DON'T LEAK THE SECRETS !
	// Use Workers KV if you can https://developers.cloudflare.com/workers/reference/storage/

	const telegram_token = "***REDACTED***";
	const telegram_url = "https://api.telegram.org/bot" + telegram_token + "/sendMessage";

	Assuming you have a mimikatz dump named "mimikatz_dump.txt", I made these bash one-liners that will reformat the mimikatz output to "domain\user:password"

	First, before using these parsers, run: "dos2unix mimikatz_dump.txt"

	Mimikatz 1.0:

	cat mimikatz_dump.txt \| grep -P '((Utilisateur principal)\|(msv1_0)\|(kerberos)\|(ssp)\|(wdigest)\|(tspkg))\s+:\s+.+' \| grep -v 'n\.' \| sed -e 's/^\s\+[^:]:\s\+//' \| sed -e 's/Utilisateur principal\s\+:\s\+\(.\)$/\n\1/' \| sort -u


	Mimikatz 2.0 (unfortunately, you must "apt-get install pcregrep" because reasons):

	#!/usr/bin/env python
	# coding: utf-8

	from __future__ import print_function
	import os
	import sys
	from collections import defaultdict as ddict
	try:
	from defusedxml.ElementTree import parse
	except ImportError: