😈

man3kin3ko

😈

Security Researcher

man3kin3ko / global-proxy-adb

Created July 31, 2025 14:34

Android traffic redirect to Burp Suite

	adb root \
	&& adb shell iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 10.48.36.7:8080 \
	&& adb shell iptables -t nat -A OUTPUT -p tcp --dport 443 -j DNAT --to-destination 10.48.36.7:8080

man3kin3ko / no-ssl-pls

Created April 16, 2025 15:01

Your company uses self-signed certs

	git -c http.sslVerify=false ...
	curl --insecure ...

man3kin3ko / showUnusualGlobals.js

Created April 17, 2024 17:41

Find all non-standard global objects

	let standardWindowProps = [
	"Array", "Boolean", "Date", "decodeURI", "decodeURIComponent", "encodeURI",
	"encodeURIComponent", "Error", "eval", "EvalError", "Float32Array", "Float64Array",
	"Function", "Infinity", "Int16Array", "Int32Array", "Int8Array", "isFinite",
	"isNaN", "JSON", "Map", "Math", "NaN", "Number", "Object", "parseFloat",
	"parseInt", "Promise", "Proxy", "RangeError", "ReferenceError", "Reflect",
	"RegExp", "Set", "String", "Symbol", "SyntaxError", "TypeError", "Uint16Array",
	"Uint32Array", "Uint8Array", "Uint8ClampedArray", "undefined", "URIError",
	"WeakMap", "WeakSet", "Atomics", "SharedArrayBuffer", "BigInt", "BigInt64Array",
	"BigUint64Array", "globalThis", "console", "window", "document", "navigator",

man3kin3ko / subdomains_web_recon.sh

Last active July 19, 2024 18:08

	sed -e 's/^/https:\/\//' subdomains > subdomains.schema
	ffuf -t 10 -w "/path/to/dict:FUZZ" -w "subdomains.schema:HOST" -u HOST/FUZZ -mc all -rate 100 -o fuzz-subdomains.json -c -H "User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Googlebot/2.1; +http://www.google.com/bot.html) Chrome/W.X.Y.Z Safari/537.36" -fc 404

man3kin3ko / jq.txt

Last active July 19, 2024 18:04

jq tips

	# filter ffuf output

	cat output.json \| jq '.results[] \| select(.status==200) \| .url'
	cat output.json \| jq -S '.results \| sort_by(.url) \| .[] \| select(.status==200) \| {url: .url,len: .length}'

	# filter bbot output

	cat output.json \| jq 'select(.type=="DNS_NAME") \| .data' \| tr -d '"' \| sort \| uniq > subdomains.txt

man3kin3ko / dig.sh

Last active June 3, 2023 20:28

DNS recon

	DOMAIN=domain.com
	NS=ns.domain.com
	dig -t AXFR $DOMAIN @$NS
	dig +noall +answer +multiline $DOMAIN any @$NS

	# filter ffuf output

	cat output.json \| jq '.results[] \| select(.status==200) \| .url'
	cat output.json \| jq -S '.results \| sort_by(.url) \| .[] \| select(.status==200) \| {url: .url,len: .length}'

	# filter bbot output

	cat output.json \| jq 'select(.type=="DNS_NAME") \| .data' \| tr -d '"' \| sort \| uniq > subdomains.txt