Kevin Kirsche kkirsche

Source

Really really old legacy applications that make you want to cry

	#!/usr/bin/env python
	"""The following module is an implementation of American SOUNDEX.

	SOUNDEX is a phonetic algorithm for indexing names by sound, as pronounced in English.
	The goal is for homophones to be encoded to the same representation so that they can be
	matched despite minor differences in spelling.

	This implements the algorithm as defined on:
	https://en.wikipedia.org/wiki/Soundex#American%20Soundex

	#!/usr/bin/env python
	from __future__ import annotations
	from uuid import uuid4, UUID
	from typing import Sequence


	class Node:
	node_id: UUID
	time_to_complete: int
	children: Sequence[Node]

	import re

	# https://github.com/sqlalchemy/alembic/blob/c97d5b3dd6fde31acb8e9e0c67d0ebc54fa0d809/alembic/script/base.py#L682
	_slug_re = re.compile(r"\w+")
	truncate_slug_length = 40

	def generate_slug(message: str) -> str:
	slug = "_".join(_slug_re.findall(message or "")).lower()
	if len(slug) > truncate_slug_length:
	slug = slug[: truncate_slug_length].rsplit("_", 1)[0] + "_"

	from enum import IntEnum

	class ExitCode(IntEnum):
	"""The following exit codes are defined and can be used with SystemExit, although they
	are not required. These are typically used for system programs written in Python,
	such as a mail server’s external command delivery program.

	* EX_OK: Exit code that means no error occurred.
	* EX_USAGE: Exit code that means the command was used incorrectly, such as when the wrong number of arguments are given.
	* EX_DATAERR: Exit code that means the input data was incorrect.

	#!/usr/bin/env python3
	hidden_cmd = "echo 'You forgot to check `cat -A`!' > oops"
	visible_cmd = "echo 'Hello world!'"
	if __name__ == "__main__":
	with open("demo.sh", "w") as f:
	txt = "#!/bin/sh\n"
	txt += hidden_cmd + ";" + visible_cmd + " #\r" + visible_cmd + " " * (len(hidden_cmd) + 3) + "\n"
	f.write(txt)

	#!/usr/bin/env python3

	from requests import post
	from base64 import b64encode, b64decode
	from hashlib import sha1
	from pyDes import des, ECB, PAD_PKCS5
	import hmac


	def create_payload():

	#!/bin/sh

	# to install:
	# git clone https://gist.github.com/381e17fab1457ccf3b8b750edbc40b79.git msd
	# mv ./msd/mount-shared-folders /usr/local/bin
	# rm -rf ./msd
	# chmod +x /usr/local/bin/mount-shared-folders

	# Source: https://gitlab.com/kalilinux/packages/kali-tweaks/-/blob/kali/master/data/mount-shared-folders

	import requests
	import webbrowser

	# formatted using Black
	# https://blog.rapid7.com/2016/07/29/pentesting-in-the-real-world-local-file-inclusion-with-windows-server-files/
	url = "http://www.testpage.com?page="

	LFI = "../../../../../../../../../"

	pages = [