I hereby claim:
- I am bemitc on github.
- I am bmitchell (https://keybase.io/bmitchell) on keybase.
- I have a public key whose fingerprint is 0F2D 85C2 ECED AFA5 B8D2 D554 7B99 5B35 3C7E DF02
To claim this, I am signing this object:
bemitc
bemitc
/ decode_shadowpad_dns.py
Created
August 19, 2017 04:28
— forked from fox-srt/decode_shadowpad_dns.py
Netsarang backdoor DNS payload decrypter
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python | |
| """ | |
| Netsarang backdoor DNS payload decrypter | |
| file: decode_shadowpad_dns.py | |
| author: Fox-IT Security Research Team <srt@fox-it.com> | |
| Usage: | |
| $ cat dns.txt | |
| sajajlyoogrmkllmuoqiyaxlymwlvajdkouhkdyiyolamdjivho.cjpybuhwnjgkhllm.nylalobghyhirgh.com |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/sh | |
| # blindly make ubuntu desktop changes needed for afl, needs to run as root | |
| # | |
| # this script is a pretty bad idea | |
| echo core > /proc/sys/kernel/core_pattern | |
| (cd /sys/devices/system/cpu; echo performance | tee cpu*/cpufreq/scaling_governor) |
NewerOlder