Skip to content
View lorenzodifuccia's full-sized avatar
🌖
Walking on the moon
🌖
Walking on the moon
128 followers · 8 following

Achievements

Achievement: Starstruckx4Achievement: YOLOAchievement: Pull SharkAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Starstruckx4Achievement: YOLOAchievement: Pull SharkAchievement: Arctic Code Vault Contributor

Highlights

  • Pro

Block or report lorenzodifuccia

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
lorenzodifuccia/README.md

Hi there, I’m Lorenzo Di Fuccia 👋

Just another IT geek guy. Working on security. Writing programs I need.
Strongly interested in reverse engineering, penetration testing, and security.

Support me at ko-fi.com
LinkedIn HackTheBox

🧠 Projects I’m proud of

🔐 Security

IoT

  • ☎️ ZyxelAES: A Burp Suite extension to decrypt & edit Zyxel router configuration portal API traffic.
  • 💳 SLE4442 Manager: A comprehensive tool for reading, writing, and managing SLE4442 smart cards with both GUI (PyQt5) and CLI support.
  • 🚗 AutomotiveSecurityWorkshop: A practical, full-stack simulation of a connected vehicle ecosystem designed to teach automotive security vulnerabilities and attack vectors.

Mobile

  • ✍🏻 ap_mode.sh: simple to use Bash script for Man-in-The-Middle (MitM) environment.
  • 📹 YoutubeProtobuf: Utilities for working with YouTube mobile app protobufs.

Offensive & Defensive

  • 😈 MaliciousChromeExtension: A demo Chrome extension for penetration testing.
  • 🕵️ WatchMyBack: An easy-to-use defense tool against "Shoulder Surfing" attacks, which allows you to immediately lock the screen of your computer if someone is behind you or if you move away from the computer without locking it.

👨🏻‍💻 IT & Automation

  • 📚 safaribooks: Download and generate EPUB of your favorite books from O'Reilly Learning (yeah, the original one... 😬).
  • 🤖 RaspOne: Modular Telegram bot designed for Raspberry Pi server.
    • External modules:
      • Italo: Find seats availability for your Italo train.
  • 🐍 http.server: (Beautiful) replacement for the http.server Python3 module. Allows file upload, preview and much more.

🤷🏻‍♂️ Other Stuff

  • ✈️ FlyScanner: Find the best rate for your next flight consulting different providers.

Pinned Loading

  1. AP Mode script for Man-in-The-Middle... AP Mode script for Man-in-The-Middle (MitM) environment
    1 
    #!/bin/bash
    2 
    
              
    
              
    
                3
                
    # * * * CONFIGURE * * *
    
              
    
              
    
                4
                
    AP_INT="wlan0"
    
              
    
              
    
                5
                
    PROXY="192.168.75.1:8080"
    
              
    
          
    
    
    
  
    

    2. 

      

  2. 
  
    
    
    
      
    
        
        Encryption function used by Instagra...  Encryption function used by Instagram (Browser App) to generate the 'enc_password' from PubKey (AES-GCM + SealedBox)      
    

          
    
              
    
                1
                
    import base64
    
              
    
              
    
                2
                
    import struct
    
              
    
              
    
                3
                
    import datetime
    
              
    
              
    
                4
                
    import binascii
    
              
    
              
    
                5
                
    
              
    
          
    
    
    
  
    

    3. 

      
  3. 
  
    
    
    
      
    
        
    
            
          ZyxelAES  ZyxelAES          Public
        
    
      
    


      
    
        A Burp Suite extension to decrypt and edit Zyxel router configuration portal API traffic.
      
    

      
    
          
  
  Java


      
    
    
    
  
    

    4. 

      
  4. 
  
    
    
    
      
    
        
    
            
          SLE4442-Manager  SLE4442-Manager          Public
        
    
      
    


      
    
        A comprehensive tool for reading, writing, and managing SLE4442 smart cards with both GUI (PyQt5) and CLI support.
      
    

      
    
          
  
  Python


      
    
    
    
  
    

    5. 

      

  5. 
  
    
    
    
      
    
        
        Disable Microsoft Defender ATP on MacOS  Disable Microsoft Defender ATP on MacOS      
    

          
    
              
    
                1
                
    launchctl unload /Library/LaunchAgents/com.microsoft.wdav.tray.plist 
    
              
    
              
    
                2
                
    sudo launchctl unload /Library/LaunchDaemons/com.microsoft.fresno.plist
    
              
    
              
    
                3
                
    
              
    
              
    
                4
                
    sudo launchctl unload /Library/LaunchDaemons/com.tanium.taniumclient.plist
    
              
    
          
    
    
    
  
    

    6. 

      
  6. 
  
    
    
    
      
    
        
    
            
          safaribooks  safaribooks          Public
        
    
      
    


      
    
        Download and generate EPUB of your favorite books from O'Reilly Learning (aka Safari Books Online) library.
      
    

      
    
          
  
  Python


          
            
    

            5k
          
          
            
    

            745
          
      
    
    
    
  
    

    7.