Pinned Repositories
4wayhandshake.github.io
Alfie
Automatic Local File Inclusion Enumerator. Scan websites for LFI vulnerabilities and path traversals.
congenial-winner
Known plaintext attack utilizing MD5 hashing performed by a predefined binary
Crack-PBKDF2-HMAC-SHA265
Attempts to crack a file with password hashes, using PBKDF2-HMAC-SHA256 hashing.
Crxss-Eyed
Performs semi-automated Blind XSS based on HTML form submission
encoding-tools
A small collection of tools I use for re-encoding text
Express-Cookie-Signer
Signs an Express Cookie using a predefined name and key. Displays the cookie and its signed counterpart on a webpage.
LFI-Enumerator
Bash script that uses Ffuf to discover LFIs at a target. Tries many different kinds of path traversal filter bypass tricks.
pattern-matching
Tools that use regex to perform enumeration
simple-http-server
A simple extension of Python's http.server module. Serves files in the local directory, but also prints request data to the host.
4wayhandshake's Repositories
4wayhandshake/Alfie
Automatic Local File Inclusion Enumerator. Scan websites for LFI vulnerabilities and path traversals.
4wayhandshake/4wayhandshake.github.io
4wayhandshake/Crxss-Eyed
Performs semi-automated Blind XSS based on HTML form submission
4wayhandshake/Express-Cookie-Signer
Signs an Express Cookie using a predefined name and key. Displays the cookie and its signed counterpart on a webpage.
4wayhandshake/LFI-Enumerator
Bash script that uses Ffuf to discover LFIs at a target. Tries many different kinds of path traversal filter bypass tricks.
4wayhandshake/pattern-matching
Tools that use regex to perform enumeration
4wayhandshake/simple-http-server
A simple extension of Python's http.server module. Serves files in the local directory, but also prints request data to the host.
4wayhandshake/congenial-winner
Known plaintext attack utilizing MD5 hashing performed by a predefined binary
4wayhandshake/Crack-PBKDF2-HMAC-SHA265
Attempts to crack a file with password hashes, using PBKDF2-HMAC-SHA256 hashing.
4wayhandshake/encoding-tools
A small collection of tools I use for re-encoding text
4wayhandshake/parse-nmap-port-list
Takes a comma-separated list of ports (or port ranges) and prints out each unique port to stdout
4wayhandshake/private-docker-registry-fetcher
For interacting with the private Docker registry in a certain HTB box. Interacts using auth token system and Docker v2 API.
4wayhandshake/recon-tools
A collection of tools that I use for CTF recon
4wayhandshake/super-octo-giggle
Exploit Imagick module using arbitrary object instantiation
4wayhandshake/zsh-backup-and-restore
Backup the zsh history, then restore it later. Great for when you don't want your previous command history to show up (for example, during screen sharing)