Skip to content

Instantly share code, notes, and snippets.

View bcoles's full-sized avatar
💭
`rm -rf /*`

bcoles

💭
`rm -rf /*`
View GitHub Profile
@bcoles
bcoles / linux-pam-backdoor-detect.sh
Created September 13, 2020 13:40
Detect PAM backdoors created by linux-pam-backdoor
#!/bin/bash
# Detect PAM backdoors created by linux-pam-backdoor:
# https://github.com/zephrax/linux-pam-backdoor
#
# Note: this will likely only work with PAM version 1.3.0.
# ---
# $ ./backdoor.sh -v 1.3.0 -p some_s3cr3t_p455word
# Automatic PAM Backdoor
# PAM Version: 1.3.0
# Password: some_s3cr3t_p455word
@bcoles
bcoles / 7zip-jtr.sh
Last active February 20, 2023 15:39
7zip-JTR Decrypt Script
#!/bin/bash
# 7zip-JTR Decrypt Script
#
# Clone of JTR Decrypt Scripts by synacl modified for 7zip
# - RAR-JTR Decrypt Script - https://synacl.wordpress.com/2012/02/10/using-john-the-ripper-to-crack-a-password-protected-rar-archive/
# - ZIP-JTR Decrypt Script - https://synacl.wordpress.com/2012/08/18/decrypting-a-zip-using-john-the-ripper/
echo "7zip-JTR Decrypt Script";
if [ $# -ne 2 ]
then
@bcoles
bcoles / http-vivotek-camera-info.nse
Created November 11, 2011 07:02
http-vivotek-camera-info.nse - Attempts to retrieve the configuration settings from a Vivotek network camera.
description = [[
Attempts to retrieve the configuration settings from a Vivotek network camera.
The information is retrieved from "/cgi-bin/admin/getparamjs.cgi" which is not
available on all models.
The web administration interface runs on port 80 by default.
]]
---
-- @usage
@bcoles
bcoles / Life.HC.Z
Last active August 28, 2022 17:37
Conway's Game of Life in HolyC for TempleOS. Ported from Rosetta Code. Original C Source: http://rosettacode.org/wiki/Conway's_Game_of_Life#C
// Conway's Game of Life in HolyC for TempleOS
// Ported from Rosetta Code. Original C Source:
// - http://rosettacode.org/wiki/Conway's_Game_of_Life#C
#define WIDTH 60
#define HEIGHT 40
#define SLEEP 100
U32 Universe[HEIGHT][WIDTH];
U64 COUNT;
@bcoles
bcoles / nntp-options.nse
Last active June 21, 2022 21:54
nntp-options.nse - Retrieves the available commands and banners from a listening NNTP daemon.
description = [[
Retrieves the available commands and banners from a listening NNTP daemon.
The Network News Transfer Protocol (NNTP) is an Internet application protocol used for transporting Usenet news articles (netnews) between news servers and for reading and posting articles by end user client applications.
For more information about NNTP, see:
http://tools.ietf.org/html/rfc3977
http://tools.ietf.org/html/rfc6048
http://en.wikipedia.org/wiki/Network_News_Transfer_Protocol
]]
@bcoles
bcoles / http-polycom-soundpoint-info.nse
Created September 22, 2011 06:38
http-polycom-soundpoint-info.nse - Attempts to retrieve the configuration settings from a Polycom SoundPoint VoIP phone.
description = [[
Attempts to retrieve the configuration settings from a Polycom SoundPoint VoIP
phone. The information is retrieved from "/reg_1.htm" and "/reg_2.htm" which is
only available when authentication is disabled.
The web administration interface runs on port 80 by default.
]]
---
-- @usage
@bcoles
bcoles / http-carel-data-server-users.nse
Last active June 21, 2022 21:53
http-carel-data-server-users.nse - Attempts to retrieve all valid usernames from the HTTP component of Carel Pl@ntVisor (CarelDataServer.exe).
description = [[
Attempts to retrieve all valid usernames from the HTTP component of Carel
Pl@ntVisor (CarelDataServer.exe).
]]
---
-- @usage
-- nmap --script http-carel-data-server-users -p <port> <host>
--
-- @output
@bcoles
bcoles / http-server.nse
Created February 4, 2012 10:21
http-server.nse - Retrieves all HTTP "server" headers.
description = [[
Retrieves all HTTP "server" headers.
]]
---
-- @usage
-- nmap --script http-server -p <port> <host>
--
-- @output
-- PORT STATE SERVICE REASON
@bcoles
bcoles / acarsd-info.nse
Created February 24, 2012 00:34
acarsd-info.nse - Retrieves information from a listening acarsd daemon.
description = [[
Retrieves information from a listening acarsd daemon.
acarsd is an ACARS decoder for a Linux or Windows PC which attempts to decode ACARS transmissions in real-time. The information retrieved includes the daemon version, API version, administrator e-mail address and listening frequency.
For more information about acarsd, see:
* http://www.acarsd.org/
]]
---
@bcoles
bcoles / crt.sh
Created March 8, 2018 11:07
List sub-domains using crt.sh
#!/bin/bash
# List sub-domains using crt.sh
set -euo pipefail
IFS=$'\n\t'
error() {
echo "[ERROR] $*"
exit 1
}