Antti Virtanen lokori

Doing IT for quite some time. Clojure, security, demoscene.

lokori / htb-enum.sh

Last active January 15, 2020 22:09

Boring Hack The Box enumerator. Generates many useless and boring requests.

	#!/bin/bash

	set -eu

	echo "Running super enum against $1"

	# quick scan TCP
	# nmap -v -sC -sV -oA initial_nmap $1

	# quick scan UDP

lokori / supergobuster.sh

Last active July 1, 2022 20:29

gobuster enumerator for hack-the-box machines. This generates huge amount of useless requests..

	#!/bin/bash
	set -eu

	URL=$1

	echo "super go bustering for super brute: $URL"

	gobuster -u $URL -l -s 200,204,301,302,307,403 -w /root/tools/SecLists/Discovery/Web_Content/tomcat.txt
	gobuster -u $URL -l -s 200,204,301,302,307,403 -w /root/tools/SecLists/Discovery/Web_Content/nginx.txt
	gobuster -u $URL -l -s 200,204,301,302,307,403 -w /root/tools/SecLists/Discovery/Web_Content/apache.txt

lokori / curl_mass_uploader.sh

Created April 24, 2018 05:35

Mass file upload with curl. This is for a specific application, but can be adapted for others.

	#!/bin/bash

	upload_file () {
	SESSION=df831243-602e-4c27-8afe-09a6760be8ad
	XSRF=83872690-237b-c176-8830-ac11ba76d7b3
	URL="http://192.168.50.1:8080/api/UPLOOOD"
	echo "Handling file $1"
	curl -v -i -X POST -H "Content-Type: multipart/form-data" -H "Cookie: ring-session=$SESSION; XSRF-TOKEN=$XSRF" -F "file=@$1;type=application/vnd.openxmlformats-officedocument.s\
	preadsheetml.sheet" -F "x-xsrf-token=$XSRF" $URL >> logifile.txt 2>&1
	echo "-----------------------" >> logifile.txt

lokori / getdomains.sh

Last active September 17, 2018 11:00 — forked from woltage/getdomains.sh

Skripti joka hakee Y-tunnuksella kaikki firman omistamat .fi -verkkotunnukset. (alkuperäinen https://gist.github.com/woltage/5b7a744f9562b9348c90c6e0d038d92a)

	#!/bin/bash

	## Y-Tunnukseen perustuva domainejen haku (.fi)

	## Esimerkki: getdomains 1093944-1 # MTV Oy
	# Laita tämä .bashrc tai .zshrc

	# Käyttöesimerkkejä:

	# Looppaa Y-tunnuksetn kaikki domainit läpi ja tee kysely

lokori / .bash_profile

Created October 17, 2018 18:26

The good prompt from the bash profile. Line wrapping issues. Needs git-complete. Nice prompt

	# start at home
	cd ~

	ln -sfv /usr/local/opt/redis/*.plist ~/Library/LaunchAgents


	ln -sfv /usr/local/opt/mysql56/*.plist ~/Library/LaunchAgents

	export PATH=./node_modules/.bin:$PATH

lokori / mandros.py

Created January 14, 2019 07:04 — forked from xassiz/mandros.py

Reverse MSSQL shell

	import sys
	import requests
	import threading
	import HTMLParser
	from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler

	'''
	Description: Reverse MSSQL shell through xp_cmdshell + certutil for exfiltration
	Author: @xassiz
	'''