Octo Leap JohnTroony

## cve-2015-0240_samba_exploit.py
#!/usr/bin/python
"""
Exploit for Samba vulnerabilty (CVE-2015-0240) by sleepya

The exploit only targets vulnerable x86 smbd <3.6.24 which 'creds' is controlled by
ReferentID field of PrimaryName (ServerName). That means '_talloc_zero()'
in libtalloc does not write a value on 'creds' address.

Reference:
- https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/

## CTF2-AH-passGen.py
#!/usr/bin/env python
# Troon Jay

from itertools import product

def allwords(chars, length):
    for letters in product(chars, repeat=length):
        yield ''.join(letters)

def main():

## CTF2_AH_PassList.txt
Insecure_admina
Insecure_adminb
Insecure_adminc
Insecure_admind
Insecure_admine
Insecure_adminf
Insecure_adming
Insecure_adminh
Insecure_admini
Insecure_adminj

## Zip_Pass_Cracker.py
#!/usr/bin/env python

# Troon Jay

import zipfile
from threading import Thread
from optparse import OptionParser
def crackfile(zipfile,password):
    try:
        zipfile.extractall(pwd=password)

## hack-a-thon.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                JohnTroony
                / hack-a-thon.md
            
            
              Last active
              August 29, 2015 14:27
                — forked from geemus/hack-a-thon.md
            
          
    API Hack-a-thon


API Team


## hidden_service.py
import sys, threading, time
from stem.control import Controller
from stem import SocketError, UnsatisfiableRequest
import stem.process
from stem.util import term
from flask import Flask

import socks

WEB_PORT = 8080

## trackerPIDs_plotly.py
from plotly.offline import plot
import plotly.graph_objs as go
import csv as csv

# Open the CSV file with data
readdata = csv.reader(open("cleanedTracks.csv"))

# Create empty lists for the data
miner_user_guides = []
miner_apps = []

## virustotal_upload
#
# Upload a sample to VirusTotal and pretty print the report. All in a handy alias.
#
# Dependecies:
#
#  * python > 2.7
#  * pip install Pygments==1.4
#  * curl
#  * VirusTotal API key
#

## EmpireCOMPosh.cs
using System;
using System.IO;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;

//Add For PowerShell Invocation
using System.Collections.ObjectModel;
using System.Management.Automation;

## JSRat.ps1
<#

  Author: Casey Smith @subTee

  License: BSD3-Clause

  .SYNOPSIS

  Simple Reverse Shell over HTTP. Execute Commands on Client.
	#!/usr/bin/python
	"""
	Exploit for Samba vulnerabilty (CVE-2015-0240) by sleepya

	The exploit only targets vulnerable x86 smbd <3.6.24 which 'creds' is controlled by
	ReferentID field of PrimaryName (ServerName). That means '_talloc_zero()'
	in libtalloc does not write a value on 'creds' address.

	Reference:
	- https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/
	#!/usr/bin/env python
	# Troon Jay

	from itertools import product

	def allwords(chars, length):
	for letters in product(chars, repeat=length):
	yield ''.join(letters)

	def main():
	Insecure_admina
	Insecure_adminb
	Insecure_adminc
	Insecure_admind
	Insecure_admine
	Insecure_adminf
	Insecure_adming
	Insecure_adminh
	Insecure_admini
	Insecure_adminj
	#!/usr/bin/env python

	# Troon Jay

	import zipfile
	from threading import Thread
	from optparse import OptionParser
	def crackfile(zipfile,password):
	try:
	zipfile.extractall(pwd=password)
	import sys, threading, time
	from stem.control import Controller
	from stem import SocketError, UnsatisfiableRequest
	import stem.process
	from stem.util import term
	from flask import Flask

	import socks

	WEB_PORT = 8080
	from plotly.offline import plot
	import plotly.graph_objs as go
	import csv as csv

	# Open the CSV file with data
	readdata = csv.reader(open("cleanedTracks.csv"))

	# Create empty lists for the data
	miner_user_guides = []
	miner_apps = []
	#
	# Upload a sample to VirusTotal and pretty print the report. All in a handy alias.
	#
	# Dependecies:
	#
	# * python > 2.7
	# * pip install Pygments==1.4
	# * curl
	# * VirusTotal API key
	#
	using System;
	using System.IO;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	//Add For PowerShell Invocation
	using System.Collections.ObjectModel;
	using System.Management.Automation;
	<#

	Author: Casey Smith @subTee

	License: BSD3-Clause

	.SYNOPSIS

	Simple Reverse Shell over HTTP. Execute Commands on Client.