Skip to content

Instantly share code, notes, and snippets.

View add1ct3d's full-sized avatar
🎯
Focusing

add1ct3d

🎯
Focusing
View GitHub Profile
@add1ct3d
add1ct3d / FakeDNSServer.py
Created December 26, 2021 14:43 — forked from xkon/FakeDNSServer.py
a simple fake DNS server for DNS rebinding Attack
#!/usr/bin/env python
# -*- coding: utf-8 -*-
# @Author : xk0n
# @Date : 2017-00-00
# from __future__ import print_function,division,unicode_literals
import SocketServer
import struct
import datetime
import logging
@add1ct3d
add1ct3d / masscan.Dockerfile
Created June 16, 2021 01:13 — forked from Nuxij/masscan.Dockerfile
[Docker] masscan on alpine
# Example:
# $ docker build -t masscan -f masscan.Dockerfile .
# $ docker run --rm -it --net=host masscan -p0-65535 192.168.0.0/16 --rate 1000000
# --net=host is optional but I saw rate limit without it
# -v $(pwd):/opt if you want to feed result files back out
FROM alpine as builder
LABEL author "Peng Liu"
LABEL email "myme5261314@gmail.com"
ARG MASSCAN_GIT_URL=https://github.com/robertdavidgraham/masscan
@add1ct3d
add1ct3d / dahua-backdoor.py
Created February 28, 2021 13:55 — forked from cre8tions/dahua-backdoor.py
dahua exploit poc
#!/usr/bin/python2.7
#
# Dahua backdoor Generation 2 and 3
# Author: bashis <mcw noemail eu> March 2017
#
# Credentials: No credentials needed (Anonymous)
#Jacked from git history
#
import string
@add1ct3d
add1ct3d / LC_CTYPE.md
Created January 23, 2021 12:08 — forked from nicks9188/LC_CTYPE.md
Centos warning: setlocale: LC_CTYPE: cannot change locale (UTF-8): No such file or directory
  1. vi /etc/environment

add these lines...

LANG=en_US.utf-8
LC_ALL=en_US.utf-8

Alternatively,

@add1ct3d
add1ct3d / poc-dnsmasq.py
Created January 23, 2021 00:43 — forked from vavrusa/poc-dnsmasq.py
PoCs for CVE-2015-7547 (different attack vectors)
#!/usr/bin/python
#
# Copyright 2016 Google Inc
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# All scripts
```
--tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,randomcomments,securesphere,space2comment,space2dash,space2hash,space2morehash,space2mssqlblank,space2mssqlhash,space2mysqlblank,space2mysqldash,space2plus,space2randomblank,sp_password,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords
```
# General scripts
```
--tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes
```
# Microsoft access
```
@add1ct3d
add1ct3d / darkcomet.py
Created January 7, 2021 19:09 — forked from ben0/darkcomet.py
Decode dark comet:
from scapy.all import *
from Crypto.Cipher import ARC4
from Crypto.Hash import SHA
from Crypto import Random
def decrypt(text):
key = b'#KCMDDC51#-890'
try:
ciphertext = text.decode('hex')
@add1ct3d
add1ct3d / generate-eth-wallet-keypair.js
Created June 3, 2020 05:55 — forked from michelem09/generate-eth-wallet-keypair.js
Programmatically generate keypair for Ethereum wallet: private key, public key and address
var keythereum = require('keythereum');
var Wallet = require('ethereumjs-wallet');
// Generate private key
var dk = keythereum.create();
var keyObject = keythereum.dump('password', dk.privateKey, dk.salt, dk.iv);
var privateKeyString = dk.privateKey.toString('hex');
console.log('Private key', privateKeyString);
// Get public key
#!/bin/bash
# Collects system performance statistics such as CPU, memory, and disk
# usage as well as top processes ran by users.
#
# All size values are in KiB (memory, disk, etc).
# EXAMPLE USAGE:
# ./os_stats.sh
@add1ct3d
add1ct3d / get_eth_nodes.sh
Created June 3, 2020 05:46 — forked from michelem09/get_eth_nodes.sh
Simple bash script to get list of latest 50 active nodes for Ethereum blockchain (ETH mainnet) from https://www.ethernodes.org/network/1/nodes. Useful to have the list ready for Parity bootnodes config option.
#!/bin/bash
### Usage ###
# ./get_eth_nodes.sh <json | strings>
# Use json to get an array of nodes in JSON suitable for Parity
# Use strings to get a list of nodes line by line
#############
ARRAY=()
NODES=`curl -s 'https://www.ethernodes.org/network/1/data?draw=1&columns%5B0%5D%5Bdata%5D=id&columns%5B0%5D%5Bname%5D=&columns%5B0%5D%5Bsearchable%5D=true&columns%5B0%5D%5Borderable%5D=true&columns%5B0%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B0%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B1%5D%5Bdata%5D=host&columns%5B1%5D%5Bname%5D=&columns%5B1%5D%5Bsearchable%5D=true&columns%5B1%5D%5Borderable%5D=true&columns%5B1%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B1%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B2%5D%5Bdata%5D=port&columns%5B2%5D%5Bname%5D=&columns%5B2%5D%5Bsearchable%5D=true&columns%5B2%5D%5Borderable%5D=true&columns%5B2%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B2%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B3%5D%5Bdata%5D=country&columns%5B3%5D%5Bname%5D=&columns%5B3%5D%5Bsearchable%5D=true&columns%5B3%5D%5Borderable%5D=tru