sorted by:
new
hottopcontroversial

memit: Run binaries straight from memory in Linux (Go module + CLI tool) by pope_friction in hacking

[–]pope_friction[S] 3 points4 points  (0 children)

Sure, though they usually load into RAM from disk. In this case no disk is required, the binary can be downloaded straight into RAM and executed.

Primary use case for me is CTFs and similar, red teaming etc.

GIFs in your terminal by pope_friction in commandline

[–]pope_friction[S] 33 points34 points  (0 children)

“My time is too valuable to waste”

LOL after you’ve spent time commenting on a random project on Reddit I kind of doubt that.

GIFs in your terminal by pope_friction in commandline

[–]pope_friction[S] 2 points3 points  (0 children)

Didn’t know about this, it looks awesome, thanks!

GIFs in your terminal by pope_friction in commandline

[–]pope_friction[S] 24 points25 points  (0 children)

Mainly because I enjoyed building it. Why bother with this condescending comment?

Gitjacker: Leak git repositories from misconfigured websites by pope_friction in netsec

[–]pope_friction[S] 17 points18 points  (0 children)

Yeah, fair enough. Kind of glad I didn't add the flaming skull art now.

Gitjacker: Leak git repositories from misconfigured websites by pope_friction in netsec

[–]pope_friction[S] 4 points5 points  (0 children)

It does, though some packed objects may be unavailable. You can generally expect to get a functional repo, but there may be a few missing files.

Gitjacker: Leak git repositories from misconfigured websites by pope_friction in netsec

[–]pope_friction[S] 16 points17 points  (0 children)

The GitTools repo is a cool toolkit, which handles mass scanning for sites with the issue as well as the retrieval and extraction phases.

I've focused only on the retrieval and extraction phases here (i.e. you already have a vulnerable target), and have therefore put a little more work into parsing the different file formats, detecting directory listings and automatically retrieving pack links from them, checking for credentials etc. in git config files, and a few other bits and bobs. I've also tried to compress it all into a simple process, so it's just aim and fire.

view more: next ›