agramajo

# Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford ([email protected])
# The author disclaims copyright to this source code.

import sys
import struct
import socket
import time
import select
import re
from optparse import OptionParser

agramajo

---
- hosts: all
  gather_facts: false
  user: root
  vars:
    openssl_packages:
      - openssl
      - libssl1.0.0
    openssl_services:
      - nginx

agramajo

use DBI;

my $dbname = $ARGV[0] || "mysql";
my $dbuser = $ARGV[1] || "root";
my $dbpass = $ARGV[2] || "pass";
my $dbhost = $ARGV[3] || "localhost";
my $socket = "";

$dsn = "DBI:mysql:database=$dbname;host=$dbhost;mysql_socket=$socket";
$dbh = DBI->connect($dsn, $dbuser, $dbpass);

agramajo

use DBI;

my $dbname = $ARGV[0] || "mysql";
my $dbuser = $ARGV[1] || "root";
my $dbpass = $ARGV[2] || "pass";
my $dbhost = $ARGV[3] || "localhost";
my $socket = "";

$dsn = "DBI:mysql:database=$dbname;host=$dbhost;mysql_socket=$socket";
$dbh = DBI->connect($dsn, $dbuser, $dbpass);

agramajo

use strict;
use vars qw/ $f /;
use DBI;

my $fix = $f || 0;

my $dbname = $ARGV[0] || "mysql";
my $dbuser = $ARGV[1] || "root";
my $dbpass = $ARGV[2] || "pass";
my $dbhost = $ARGV[3] || "localhost";

agramajo

$|=1;
use warnings;
use strict;
use Getopt::Long;
use Net::IP;
use Net::DNS;

my $debug = 1;

my @rbl=(

agramajo

|=1;
use strict;
use Time::Piece;
use Time::Seconds;

# BB and related test constants
use constant GREEN => 'green';
use constant YELLOW => 'yellow';
use constant RED => 'red';
 

agramajo

use strict;
use DBI;

use constant { 
        SYNC_NOTHING => 0x00, 
        SYNC_SEEMSFINE => 0x01, 
        SYNC_ISFUCKED => 0x02 
};

sub slavehost {

agramajo

@nets = qw(
    x.x.x
    x.x.y
);

$zone = <<EOF;
\$TTL 1800
@ IN SOA ns1.xxx.com.ar. root.xxx.com.ar. 2014111104 10800 3600 604800 1800
@ IN NS ns1.xxx.com.ar.
@ IN NS webmail.xxx.com.ar.

agramajo

#!/usr/bin/perl

use strict;

# Quick display stats by ip accounting with iptables chains
# Only for linux kernel and netfilter
#
# CONFIG
#   Read the source!
#