Tony36 Tony3-sec

## urldecode_utf-8.py
#!/usr/bin/env python

import urllib
import sys
import argparse
import os

'''
This script may (not) decode URL encodings with Unicode chars.
Ensure to set your editor / terminal's char encoding setting to UTF-8

## parentheses_stripper.py
#!/usr/bin/env python

## Remove parentheses and space from filename in current directory

import os
import re

print('Removing parentheses and space from filename.....')

files = os.listdir('.')

## Manually insert RIGHT-TO-LEFT OVERRIDE character into the filename
http://www.charbase.com/202e-unicode-right-to-left-override

When a RIGHT-TO-LEFT OVERRIDE character is inserted into the filename, the characters that follow are displayed in reverse order.
When named properly, an .exe file can appear to be a .pdf file (e.g. evil[RTL Unicode]fdp.exe will appear as evilexe.pdf).
This does not affect the file's execution.

## By Python
>>> f = open('evil\xE2\x80\xAEfdp.exe', 'w')
>>> f.close()

## Hex format
$ echo $((0x22c))
556
$ sh hexToDecimal.sh 022c
556

0x22c == 022c

$ echo $((0x128))
296
$ sh hexToDecimal.sh 0128

## How to XOR hexadcimals
>>> ord('c') ^ 0x52
49
>>> 99 ^ 0x52
49
>>> 99 ^ int('0x' + '52', 16)
49
>>> ord('\x14') ^ 0x52
70
>>> hex(0x12 ^ 0x50)
'0x42'

## bulk_curl.sh
#!/bin/bash

## Script to bulk download the file from URL.
## If filename duplicates, append a counter to the filename.

if [ $# -ne 1 ]; then
	echo "Usage: $0 [Needs file as arg]"
	exit 1
fi

## Manually extract files from SMB pcap
## If the wireshark "Export Objects" does not work well, you can still extract the files manually.

## If the file data is present in SMB "Write" packet...

1. Choose the "Write Request" packet which contains the file data you're interested
2. Open the "Data" section and highlight "Data:" and right click on it
3. You can either...
  A. Choose "Copy" > "as a Hex Stream" and paste the data in note pad.
  B. Choose "Export Packet Bytes" and save each data as file.
NOTE: Order of the packet is very important! Pay attention to the data offset value. Make sure to get the data in right order!

## change_ext.py
#!/usr/bin/env python
import os
import glob

org_ext = '.flow'
new_ext = '.pcap'

print('changing file extension ' + str(org_ext) + ' to ' + str(new_ext) + '...')

## list the file with certain extension in current directory

## swap values between two variables without using temporary variable
>>> a = 10
>>> b = 100
>>> a = a + b
>>> b = a - b
>>> a = a - b
>>> a
100
>>> b
10

## Steps for hex encoding
## Hex encode for 'Hello' is 48656c6c6f. How does this work?
>>> binascii.hexlify(b'Hello')
b'48656c6c6f' (48 65 6c 6c 6f)

## Let's encode the letter 'H'
## First, convert 'H' to ascii code

>>> ord('H')
72
	#!/usr/bin/env python

	import urllib
	import sys
	import argparse
	import os

	'''
	This script may (not) decode URL encodings with Unicode chars.
	Ensure to set your editor / terminal's char encoding setting to UTF-8
	#!/usr/bin/env python

	## Remove parentheses and space from filename in current directory

	import os
	import re

	print('Removing parentheses and space from filename.....')

	files = os.listdir('.')
	$ echo $((0x22c))
	556
	$ sh hexToDecimal.sh 022c
	556

	0x22c == 022c

	$ echo $((0x128))
	296
	$ sh hexToDecimal.sh 0128
	>>> ord('c') ^ 0x52
	49
	>>> 99 ^ 0x52
	49
	>>> 99 ^ int('0x' + '52', 16)
	49
	>>> ord('\x14') ^ 0x52
	70
	>>> hex(0x12 ^ 0x50)
	'0x42'
	#!/bin/bash

	## Script to bulk download the file from URL.
	## If filename duplicates, append a counter to the filename.

	if [ $# -ne 1 ]; then
	echo "Usage: $0 [Needs file as arg]"
	exit 1
	fi
	## If the wireshark "Export Objects" does not work well, you can still extract the files manually.

	## If the file data is present in SMB "Write" packet...

	1. Choose the "Write Request" packet which contains the file data you're interested
	2. Open the "Data" section and highlight "Data:" and right click on it
	3. You can either...
	A. Choose "Copy" > "as a Hex Stream" and paste the data in note pad.
	B. Choose "Export Packet Bytes" and save each data as file.
	NOTE: Order of the packet is very important! Pay attention to the data offset value. Make sure to get the data in right order!
	#!/usr/bin/env python
	import os
	import glob

	org_ext = '.flow'
	new_ext = '.pcap'

	print('changing file extension ' + str(org_ext) + ' to ' + str(new_ext) + '...')

	## list the file with certain extension in current directory
	>>> a = 10
	>>> b = 100
	>>> a = a + b
	>>> b = a - b
	>>> a = a - b
	>>> a
	100
	>>> b
	10
	## Hex encode for 'Hello' is 48656c6c6f. How does this work?
	>>> binascii.hexlify(b'Hello')
	b'48656c6c6f' (48 65 6c 6c 6f)

	## Let's encode the letter 'H'
	## First, convert 'H' to ascii code

	>>> ord('H')
	72