blob: e2df43d0b4f838699245c5b6aef2dfbf6507fa6a (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
export WORDLISTS=~/dev/xploits/wordlist;
export ROCK_YOU_WORDS="$WORDLISTS/rockyou.txt";
export URL_WORDS="$WORDLISTS/dirb/common.txt";
export URL_WORDS_MED="$WORDLISTS/dirb/dirbuster/directory-list-lowercase-2.3-medium.txt";
# metasploit
alias msfc="msfconsole --quiet -x \"db_connect postgres@msf\""
# exploitdb
alias ssplt="searchsploit"
alias sspx="searchsploit -x"
# Port scan
alias rmap="docker run -it --rm --name rustscan rustscan/rustscan:1.10.0"
# DVWA
alias dvwa="docker run --rm -it -p 80:80 vulnerables/web-dvwa"
# Directory search
alias crawl="gobuster dir -w $URL_WORDS"
alias crawl_strict="gobuster dir -w $URL_WORDS_MED"
new_room() {
take ~/dev/xploits/temp/$1; nvim README.md;
}
jrock() {
[[ "$#" != "2" ]] && echo "jrock (format) (hashfile)" && return 1;
john -format="$1" "$2" -wordlist=$ROCK_YOU_WORDS;
}
hrock() {
# Usage: hrock $mode $hashfile
# mode - (1800 for sha512crypt $6$)
[[ "$#" != "2" ]] && echo "hrock (mode-num) (hashfile)" && return 1;
hashcat -m "$1" "$2" -o ./out $ROCK_YOU_WORDS --force;
}
hydra_ssh() {
# Usage: hydra_ssh $username $ip
[[ "$#" != "2" ]] && echo "hydru (username) (host)" && return 1;
hydra -l $1 -P $ROCK_YOU_WORDS ssh://$2 -V;
}
hydra_post() {
# Usage: hydra_post $username $ip $login-string
# /login:username=^USER^&password=^PASS^:incorrect
[[ "$#" != "2" ]] && echo "hydru (username) (host)" && return 1;
hydra -l $1 -P $ROCK_YOU_WORDS $2 http-post-form "$3" -V;
}
ip_get() {
# Usage: ip_get [$ip]
curl https://json.geoiplookup.io/$1 | \
jq '.ip + " | " + .asn + "(" + .district + ", " + .region + ")"';
}
|
