| #!/usr/bin/env python | |
| # encoding:utf-8 | |
| # Author : WangYihang | |
| # Date : 2017/10/03 | |
| # Email : [email protected] | |
| # Comment : to solve XDCTF-2017-WEB-Upload | |
| import string | |
| import itertools | |
| import os |
| # encoding: utf8 | |
| """ | |
| Created on 2017.06.27 | |
| @author: yalei | |
| Reference: | |
| 1. http://www.ruanyifeng.com/blog/2017/06/smtp-protocol.html | |
| 2. http://blog.online-domain-tools.com/2014/11/14/how-to-verify-email-address/ |
| # coding=utf-8 | |
| # [email protected] | |
| import os | |
| import logging | |
| import datetime | |
| import string | |
| from sys import argv | |
| from flask import Flask, request |
| # Usage: findelevate.py C:\Windows\System32\ | |
| # Needs sigcheck.exe in path [https://technet.microsoft.com/en-us/sysinternals/bb897441.aspx] | |
| import sys | |
| import os | |
| import glob | |
| import subprocess | |
| if len(sys.argv) < 2: | |
| print "Usage: findelevate.py <PATH>" |
| import socket | |
| import random | |
| import argparse | |
| import sys | |
| from io import BytesIO | |
| # Referrer: https://github.com/wuyunfeng/Python-FastCGI-Client | |
| PY2 = True if sys.version_info.major == 2 else False |
| import socket | |
| import random | |
| import argparse | |
| import sys | |
| from io import BytesIO | |
| # Referrer: https://github.com/wuyunfeng/Python-FastCGI-Client | |
| PY2 = True if sys.version_info.major == 2 else False |
Paul Buonopane [email protected] at NamePros
PGP: https://keybase.io/zenexer
I'm working on cleaning up this advisory so that it's more informative at a glance. Suggestions are welcome.
This advisory addresses the underlying PHP vulnerabilities behind Dawid Golunski's [CVE-2016-10033][CVE-2016-10033], [CVE-2016-10045][CVE-2016-10045], and [CVE-2016-10074][CVE-2016-10074]. It assumes prior understanding of these vulnerabilities.
This advisory does not yet have associated CVE identifiers.
| #include <stdio.h> | |
| #include <sys/mman.h> | |
| #include <fcntl.h> | |
| #include <pthread.h> | |
| #include <unistd.h> | |
| #include <sys/stat.h> | |
| #include <string.h> | |
| #include <stdint.h> | |
| #include <stdlib.h> | |
| #include <sys/types.h> |
| /* | |
| * CVE-2016-5195 dirtypoc | |
| * | |
| * This PoC is memory only and doesn't write anything on the filesystem. | |
| * /!\ Beware, it triggers a kernel crash a few minutes. | |
| * | |
| * gcc -Wall -o dirtycow-mem dirtycow-mem.c -ldl -lpthread | |
| */ | |
| #define _GNU_SOURCE |
| #!/usr/bin/python | |
| # | |
| # Pickle deserialization RCE payload. | |
| # To be invoked with command to execute at it's first parameter. | |
| # Otherwise, the default one will be used. | |
| # | |
| import cPickle | |
| import sys | |
| import base64 |
