leandro lst15
lst15
/ CVE-2025-70061.txt
Last active
March 17, 2026 17:27
CVE-2025-70061 – RustDesk Privilege Escalation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [Suggested Description] | |
| A vulnerability in RustDesk v1.4.4 allows attackers to escalate privileges and execute arbitrary commands via a specially crafted binary. | |
| ------------------------------------------ | |
| [Additional Information] | |
| 1. Prepare a controlled environment | |
| Create an attacker-controlled directory and set a malicious value in the HOME environment variable. At this stage, no command is executed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /** | |
| * Sample React Native App | |
| * https://github.com/facebook/react-native | |
| * @flow | |
| */ | |
| import React, { Component } from 'react'; | |
| import { | |
| Text, | |
| View, |
lst15
/ gist:830f25b598108a24d713ffa641e47f4e
Created
April 10, 2018 14:24
selected.token.filtered.python
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| def getFormKey(sourceFont): | |
| m = re.search(r'"acsrfToken" value="(.*)"',sourceFont) | |
| form_key = m.group(1) | |
| return form_key |
lst15
/ gist:faa52441d46c1cdd0c80795058232c7e
Created
April 10, 2018 14:23
cabeçalhos,randomicos.python
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| desktop_agents = ['Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36', | |
| 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36', | |
| 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36', | |
| 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14', | |
| 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.71 Safari/537.36', | |
| 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.98 Safari/537.36', | |
| 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.98 Safari/537.36', | |
| 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHT |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import socket | |
| serverhost = '127.0.0.1' #IP DO SERVIDOR | |
| serverport = 666 #PORTA DE COMUNICAÇÃO DO SERVIDOR | |
| nameuser = socket.gethostname() | |
| socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) | |
| socket.connect((serverhost,serverport)) | |
| while True: | |
| socket.send(nameuser + ': ' + raw_input('Voce: ')) | |
| print 'Servidor: ' + socket.recv(1024) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import socket | |
| host = '0.0.0.0' #COLOCAR AQUI O IP HOSTEADOR | |
| port = 666 #COLOCAR PORTA DE COMUNICAÇÃO | |
| socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) | |
| socket.bind((host,port)) | |
| socket.listen(2) #QUANTIDADE DE CONEXÕES DENTRO DESTE SERVIDOR | |
| print 'Esperando uma conexao' |
lst15
/ gist:7cf9922c1280c8ae4f57b4b70b20b1a1
Created
April 10, 2018 14:19
gistminer.miner.gist.python
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #LINHA 31: COLOCAR DIRETORIO ONDE SERA SALVO TODOS OS GISTCODE | |
| #LINHA 32: COLOCAR LINK NO QUAL SERA 'GISTADO' | |
| import requests | |
| from bs4 import BeautifulSoup | |
| from threading import Thread | |
| class varGlobal(): | |
| nav = 0 | |
| def main(diretorioASalvar,linkGistProfile): |