Skip to content

Instantly share code, notes, and snippets.

@secdev02
secdev02 / webdav_minimalist.ps1
Created December 21, 2025 18:07
Minimalist - PowerShell WebDAV - Decoy Share
<#
Obtained from https://github.com/re4lity/subTee-gits-backups/blob/master/JEWebDav.ps1
#>
<#
.SYNOPSIS
Simple Reverse Shell over HTTP. Deliver the link to the target and wait for connectback.
Read And Write Files Over WebDAV Proof Of Concept
@secdev02
secdev02 / bginteger.py
Created December 17, 2025 20:02
Factorial Mod N - GCD
import math
import time
def gcd_factorial_efficient(n):
"""Compute GCD(sqrt(n)!, n) efficiently"""
sqrt_n = int(math.sqrt(n))
g = n
print(f"Computing GCD({sqrt_n}!, {n})")
print(f"Processing {sqrt_n} numbers...\n")
@secdev02
secdev02 / README.md
Created December 17, 2025 18:35
Capability Diffusion - Part Two

A single file that has 2 different ways of behaving

IN this case we simply load and compile 2 difference C# calls.

Use your imagination.

image
@secdev02
secdev02 / HelloWorld.cs
Created December 17, 2025 18:06
Capability Diffusion - Sound of Silence - Basic Example.
using System;
using System.Configuration;
using System.IO;
using System.Net;
namespace HelloWorldLib
{
public class HelloWorld
{
private static Configuration _config;
@secdev02
secdev02 / bindiff.ps1
Last active December 16, 2025 23:37
Extractor
<#
.SYNOPSIS
Extracts a specific file from nested CAB files within an MSU package.
.DESCRIPTION
Extracts MSU to get CAB files, then extracts a specific file by name,
and performs additional expansion rounds if the file is itself a CAB.
.PARAMETER MsuPath
Path to the MSU file.
@secdev02
secdev02 / gist:d2aaac0f1dda92d52a89c276cab056f2
Created December 16, 2025 19:50
PatchDiff-AI - Example
cl1p.net - The internet clipboard Login/Sign Up cl1p.net/cves
Here is your stuff. Thanks for using cl1p. Tell your friends! Copy
Upgrade to PRO
{'file': 'kerberos.dll', 'patch_store_uid': 'c7eae9d4-8362-478d-b184-e4abea470c2b', 'kb': 'KB5068861', 'confidence': 0.15, 'date': 1763412539.2780097, 'cve': 'CVE-2025-60704', 'change_count': 22}
--------------------------------------------------------------------
CVE-2025-60704 Report
--------------------------------------------------------------------
Component
--------------------------------------------------------------------
@secdev02
secdev02 / Get-PortalAuthFromCookies.ps1
Last active December 14, 2025 20:15
Get-PortalAuthFromCookies
# BARK Cookie to Refresh Token Extractor
# This extracts portal auth tokens from cookies to use with BARK's existing functions
Function Get-PortalAuthTokensFromCookies {
<#
.SYNOPSIS
Extracts Portal Auth Refresh Token and Portal ID from browser cookies.
Author: Custom addition for BARK
License: GPLv3
@secdev02
secdev02 / README.md
Created December 10, 2025 13:23
TLS Debug - Serverless Prototype - Woot!

Building a Serverless Reverse TLS PRoxy Experiment.

curl "https://www.tlsdebug.com/debug?site=example.com"

{
  "request": {
    "method": "GET",
    "url": "https://example.com/",
@secdev02
secdev02 / Odata.ps1
Last active December 9, 2025 17:15
OMGData - Using Odata for C2 basic construct.
# HelloOData.ps1 - Minimal OData Service
$url = "http://localhost:8080/"
$listener = New-Object System.Net.HttpListener
$listener.Prefixes.Add($url)
$listener.Start()
Write-Host "OData service running at $url"
Write-Host "Try: ${url}odata/`$metadata"
Write-Host "Try: ${url}odata/Messages"
@secdev02
secdev02 / powawebshell.ps1
Last active December 9, 2025 14:42
PowerWebShell - Basic
# PowerShell Web Command Executor
# WARNING: This script allows remote command execution and poses significant security risks
# Use only in isolated/trusted environments with proper security measures
# Configuration
$port = 8080
$prefix = "http://" + $port + "/"
# Create HTTP listener
$listener = New-Object System.Net.HttpListener