Syed Umar Arfeen Anon-Exploiter

## Dockerfile
FROM kalilinux/kali-rolling:latest
RUN echo "PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '" >> /root/.bashrc

WORKDIR /root/
CMD ["bash"]

## cronjob.sh
#!/bin/bash

archiveName=OSWE-`date +%d_%m_%Y`.tar.gz
cd /home/$USER/

# Cronjob:
# 00 15 * * * /path/cronjob.sh | tee /tmp/cronLogs.txt

tar -czvf $archiveName OSWE/
mv $archiveName /path/ -v

## .bashrc
# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples

# If not running interactively, don't do anything
case $- in
    *i*) ;;
      *) return;;
esac

## youtube-playlist-reverse.py
import os

playlist 	= "https://www.youtube.com/user/..."
command 	= f"youtube-dl -j --flat-playlist --playlist-reverse {playlist} | jq -r '.id' | sed 's_^_https://youtu.be/_'"

output 		= os.popen(command).read()
print(output)

ytUrls 		= []

## btc-pricing.py
# Get USD price of BTC (changing) per minute in your discord server!
# Just replace the webhook_url variable and create a cron as you see fit.

#!/usr/bin/python3

import requests
import json

# BTCPRICE=`curl -s https://api.coindesk.com/v1/bpi/currentprice/USD.json | jp bpi.USD.rate | cut -d '"' -f2`
# JSON="{\"content\": \"Current price of BTC is: **$BTCPRICE** USD\"}"

## decode.py
#!/usr/bin/python3

from codecs import encode

import base64
import argparse
import re
import pycipher

# pycipher import Atbash

## gob.sh
gobuster dir -w /usr/share/wordlists/dirb/common.txt -u http://10.10.10.37/ -k -l -e -b 404 -t 80
gobuster dir -w /usr/share/wordlists/dirb/big.txt -u http://10.10.10.37/ -k -l -e -b 404 -t 80
gobuster dir -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u http://10.10.10.37/ -k -l -e -b 404 -t 80
gobuster dir -w /usr/share/wordlists/dirb/big.txt -u http://10.10.10.37/ -x php,jsp,rb,py,js,asp,aspx,zip,sql,tar,txt,key,doc,docx,html,jar,groovy,back,xml,ini,inc,config,json,yml,conf,cgi -k -l -e -b 404 -t 80
gobuster dir -w /usr/share/wordlists/dirb/common.txt -u http://54.164.63.113/ -x php,jsp,rb,py,js,asp,aspx,zip,sql,tar,txt,key,doc,docx,html,jar,groovy,back,xml,ini,inc,config,json,yml,conf,cgi -k -l -e -b 404 -t 80

## jwtBuster.py
from sys import argv

import json
import jwt


JWTSECRET 	= "jwtSecretKeyEncryption"
PRIVATEKEY 	= """-----BEGIN RSA PRIVATE KEY-----
MIIEogIBAAKCAQEAnzyis1ZjfNB0bBgKFMSvvkTtwlvBsaJq7S5wA+kzeVOVpVWw
kWdVha4s38XM/pa/yr47av7+z3VTmvDRyAHcaT92whREFpLv9cj5lTeJSibyr/Mr

## getSTSToken.py
#!/usr/bin/python3


from sys import argv
from os import popen

import json
import argparse


## squid.conf
# apt-get install squid apache2-utils
# htpasswd -c /etc/squid/.htpasswd user_name
# systemctl restart squid

acl CONNECT method CONNECT

# line 989: add follows for Basic auth
auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/.htpasswd
auth_param basic children 5
auth_param basic realm Squid Basic Authentication
	FROM kalilinux/kali-rolling:latest
	RUN echo "PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '" >> /root/.bashrc

	WORKDIR /root/
	CMD ["bash"]
	#!/bin/bash

	archiveName=OSWE-`date +%d_%m_%Y`.tar.gz
	cd /home/$USER/

	# Cronjob:
	# 00 15 * * * /path/cronjob.sh \| tee /tmp/cronLogs.txt

	tar -czvf $archiveName OSWE/
	mv $archiveName /path/ -v
	# ~/.bashrc: executed by bash(1) for non-login shells.
	# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
	# for examples

	# If not running interactively, don't do anything
	case $- in
	i) ;;
	*) return;;
	esac
	import os

	playlist = "https://www.youtube.com/user/..."
	command = f"youtube-dl -j --flat-playlist --playlist-reverse {playlist} \| jq -r '.id' \| sed 's_^_https://youtu.be/_'"

	output = os.popen(command).read()
	print(output)

	ytUrls = []
	# Get USD price of BTC (changing) per minute in your discord server!
	# Just replace the webhook_url variable and create a cron as you see fit.

	#!/usr/bin/python3

	import requests
	import json

	# BTCPRICE=`curl -s https://api.coindesk.com/v1/bpi/currentprice/USD.json \| jp bpi.USD.rate \| cut -d '"' -f2`
	# JSON="{\"content\": \"Current price of BTC is: $BTCPRICE USD\"}"
	#!/usr/bin/python3

	from codecs import encode

	import base64
	import argparse
	import re
	import pycipher

	# pycipher import Atbash
	gobuster dir -w /usr/share/wordlists/dirb/common.txt -u http://10.10.10.37/ -k -l -e -b 404 -t 80
	gobuster dir -w /usr/share/wordlists/dirb/big.txt -u http://10.10.10.37/ -k -l -e -b 404 -t 80
	gobuster dir -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u http://10.10.10.37/ -k -l -e -b 404 -t 80
	gobuster dir -w /usr/share/wordlists/dirb/big.txt -u http://10.10.10.37/ -x php,jsp,rb,py,js,asp,aspx,zip,sql,tar,txt,key,doc,docx,html,jar,groovy,back,xml,ini,inc,config,json,yml,conf,cgi -k -l -e -b 404 -t 80
	gobuster dir -w /usr/share/wordlists/dirb/common.txt -u http://54.164.63.113/ -x php,jsp,rb,py,js,asp,aspx,zip,sql,tar,txt,key,doc,docx,html,jar,groovy,back,xml,ini,inc,config,json,yml,conf,cgi -k -l -e -b 404 -t 80
	from sys import argv

	import json
	import jwt


	JWTSECRET = "jwtSecretKeyEncryption"
	PRIVATEKEY = """-----BEGIN RSA PRIVATE KEY-----
	MIIEogIBAAKCAQEAnzyis1ZjfNB0bBgKFMSvvkTtwlvBsaJq7S5wA+kzeVOVpVWw
	kWdVha4s38XM/pa/yr47av7+z3VTmvDRyAHcaT92whREFpLv9cj5lTeJSibyr/Mr
	#!/usr/bin/python3


	from sys import argv
	from os import popen

	import json
	import argparse
	# apt-get install squid apache2-utils
	# htpasswd -c /etc/squid/.htpasswd user_name
	# systemctl restart squid

	acl CONNECT method CONNECT

	# line 989: add follows for Basic auth
	auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/.htpasswd
	auth_param basic children 5
	auth_param basic realm Squid Basic Authentication