Stephen Haywood averagesecurityguy

You can use the above script with parallel to speed up the process. You need to do some prep work first.

Split the large file into 100 smaller files: split -n 100 domains.txt domains_
Make a list of the smaller files and save it: ls -l domains_* | awk '{ print $9 }' > dom_files.txt
Run the script with parallel: parallel -a dom_files.txt -j 10 ./strip.py
Cat all of the domain_*_strip.txt files together: cat *_strip.txt > domains_stripped.txt

	[-] root is allowed to execute all programs as any user.
	[-] %sudo is allowed to execute all programs as any user.
	[-] %admin is allowed to execute ALL with no password.
	[*] alan is allowed to execute /bin/ls, /bin/kill on ALL as root, bin : operator, system.

	# The goal of this script is to complete a three-way handshake with a netcat listener on port 8888. Tcpdump
	# shows the SYN packet being sent but I'm getting a RST/ACK instead of a SYN/ACK packet from netcat. I've
	# configured Iptables to drop any RST packets where the source and destination are the same as the server's
	# IP address, but the output from iptables -L -nv shows the rule is not being hit. Any ideas what is going on?
	#
	# I think I've decided that scapy is good for processing pcaps or gathering stats while sniffing traffic but
	# for actually sending packets, it sucks. I know I can create the socket with Python and use the stream with
	# Scapy but I really don't want to do that.

	# Suppress Scapy IPv6 warning

	# I was testing a web app recently where each POST request updated the session cookie
	# and generated a new CSRF token in a hidden input field in the body of the response.
	# By default, Burp's Session handling rules will only use the cookie jar for Spider
	# and Scanner. I modified the rules to use the cookie jar for Intruder and Repeater
	# as well. In addition, Burp will only update the cookie jar from Proxy and Scanner
	# so I had to allow Repeater, Spider, and Intruder to update the cookie jar as well.
	# This allowed me to use a fresh cookie with each request as required by the app.
	#
	# To get a fresh CSRF token with each request I had to write an extension. The
	# extension processes any responses that it receives from any tool except Proxy and

	from scapy.all import *

	http = IP(dst="10.0.2.15)/TCP(dport=80)/"GET /index.html HTTP/1.0\r\n\r\n"
	send(http)
	sendp(http, iface="eth0")

	#!/bin/sh

	if [ "$#" -ne 1 ]; then
	echo "Usage: bust.sh URL"
	exit 1
	fi


	APPTEST_DIR="/Users/shaywood/apptest"
	DISC="$APPTEST_DIR/fuzzdb/discovery/PredictableRes"