Netscylla netscylla
netscylla
/ diasass.sh
Created
February 28, 2019 16:34
An old script that is still useful - semi-automated script to disassemble shell code and fingerprint its functionality
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| ########################################## | |
| # | |
| # Disass.sh (c) 2014 | |
| # Leveraging other OS disassembly and AV tools to fingerprint potential malware | |
| # | |
| # License : | |
| # http://www.gnu.org/licenses/agpl-3.0.txt | |
| # | |
| # Author: Andy @ Netscylla |
netscylla
/ Logstash config for Bro IDS
Created
March 5, 2019 11:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| input { | |
| beats { | |
| port => 5001 | |
| codec => "json_lines" | |
| } | |
| } | |
| filter { | |
| #Let's get rid of those header lines; they begin with a hash |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Options All -Indexes | |
| RewriteEngine on | |
| RewriteCond %{HTTP_REFERER} google\.com [NC,OR] | |
| RewriteCond %{HTTP_REFERER} google\.com | |
| RewriteCond %{HTTP_REFERER} paypal\.com | |
| RewriteCond %{HTTP_REFERER} firefox\.com | |
| # Block Bad Bots & Scrapers | |
| SetEnvIfNoCase User-Agent "Aboundex" bad_bot | |
| SetEnvIfNoCase User-Agent "80legs" bad_bot | |
| SetEnvIfNoCase User-Agent "360Spider" bad_bot |
netscylla
/ Anonymise_PCAP.py
Last active
December 10, 2019 19:21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #/usr/bin/env python3 | |
| # | |
| # Quick hack to anonymise pcap for distribution to 3rd parties for vendor debugging | |
| # (c)2019 Andy @ Netscylla | |
| # | |
| from scapy.all import * | |
| from scapy.utils import rdpcap,wrpcap | |
| my_mac1="00:0c:29:fc:25:be" | |
| my_mac2="00:0c:29:25:24:17" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // To view the default settings, hold "alt" while clicking on the "Settings" button. | |
| // For documentation on these settings, see: https://aka.ms/terminal-documentation | |
| // Used iconsextract to extract icons from exes and store within the roaming user profile directory | |
| { | |
| "$schema": "https://aka.ms/terminal-profiles-schema", | |
| "defaultProfile": "{61c54bbd-c2c6-5271-96e7-009a87ff44bf}", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $krb5tgs$23$*elfu_svc$ELFU.LOCAL$elfu.local/elfu_svc*$a59cdba000527f0577086f5f229f7315$337d35ea0e88c2d53c54ad6210580d67d2200c939d5a56781fb5f254635be0eae48bf1ce744684d99aaa88cd25176ae5b799647231824fb7fc29ab2ac57b21cb7d0dd93c501e39d81e6473134362066d3e0d90602f6f2449a411f6b542a06e1882def82c91a56abb15c907b06b443c386f5b258ded4f9f2b45d52401cbf76d01a7b48be1d808c6bd27f0039043e1a47aa5675175d38a83e35cbe2b7e99c9acac8fb7ebd59596e35417a375b45ae57ebc160473bd3158e4bb51e8807521f6ac2068d8cdb7c839d441a8b831baf5a1da6ac00c7dca7911f3bf473016cf30d95deff64099efa502423d45b049d1e8ce363e768112b0a533c2dcf48976b8715a1bd0433dcbb763dd85b304ed5b8c81608d2d3574e5aeb0ab0bc08f7ae26c2acc37ce50260cd96ddba7dae9feb9533eb4f1bb5f0166afd8f0704bb46cf28483ed3f83365989c675e383859736401b8d132d3fc157e5d63799532886860537b4ebe3b3407e63bd60b6eb513a2a55cdcbbc2bb2b470e4c77ffc0af70398fa0675d2d48b1e9f1125e521a7d102f8912855573810b5e6b9e44446e3fe9e2af7772240e33bc9de3cec1f0b1016a2fba0e568fe37d7f6efeb093abb110b0376d6ebffcf5e8a5567c46a34dcded4abc454e1377464f19297656ac |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Admin:$2b$15$UYNbPsy6NIJcEKL8hNTytONSYd1s/s5edU6AlnZ7cLPBqvh/e7MyW | |
| Reznok:$2b$15$x10Eq414zFlAjdGUAdNb0OHdUjwloZviLty6mcA/0E5/ntCTBLoSK | |
| k1ngpr4wn:$2b$15$s2KSCJY9o0yYJKyseRnO3OYQBpfaTtkUka4pO.ZbaCKwtN8N21uQu | |
| DDAZZA:$2b$15$KUK3YijwTUzks7dqv7qNfe9NH1I6CUBXc7Wp8eOr1M26LJp9wgwlG | |
| h4x0r was here:$2b$15$5WXQICFAYqm4uud/8chY/OMXoMzim7t02or7B1.is16QPqsZ82nca | |
| meep:$2b$15$7Vx0P5.yfOhuZjhZJkcFDeR1tGZGJIr5ft/z6cCyRum3tunLNx6HS | |
| Admin:$2b$15$WkMERVnmu.Japz.CpMXEjOEy41.kHjT2HECKFIgCzcRcEf9mAL3Y2 | |
| ohai:$2b$15$fn/DdRnoS2LW3M/mS02EweD3RzRbKA8MXR.zTx3l/uMnlSHvdTRaG | |
| aaaaaa:$2b$15$fn/DdRnoS2LW3M/mS02EweD3RzRbKA8MXR.zTx3l/uMnlSHvdTRaG | |
| daddyelf:$2b$10$8fErQG1FXMc.OlIY0bMCh./yl6La3v.ejvfH7mwXmiG2B73Hz4ZDe |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| rocks4socks | |
| cookiepella | |
| asnow2021 | |
| v0calprezents | |
| Hexatonics | |
| reindeers4fears |
netscylla
/ canary_checker.py
Last active
March 16, 2022 13:12
Simple python program to check Office docs (doc,xls) for canary tokens
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| # (C)2022 Netscylla | |
| # License GNU GPL v3.0 | |
| import re | |
| from zipfile import ZipFile | |
| from io import StringIO | |
| from io import BytesIO | |
| import argparse | |
| from colorama import Fore,Style |
netscylla
/ Meshtastic_Channel_URL_Decoder.py
Last active
February 25, 2024 22:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| ########################################## | |
| # | |
| # //\ e s h t /\ s t / c | |
| # | |
| # Meshtastic Channel URL Decoder (c) 2024 | |
| # Print Key and Channelname from Meshtastic encoded-Channel URL | |
| # | |
| # License : | |
| # http://www.gnu.org/licenses/agpl-3.0.txt |