Christophe Tafani-Dereeper christophetd

## Dockerfile
FROM httpd:2.4.49-alpine
COPY ./vulnerable-httpd.conf /usr/local/apache2/conf/httpd.conf

## ai-optout-aws-organization.tf
# Ensure the AI services opt-out policy type is enabled on the Organization
resource "aws_organizations_organization" "organization" {
  enabled_policy_types = [
    # ...
    "AISERVICES_OPT_OUT_POLICY"
  ]
 }

# Create the AI opt-out policy
resource "aws_organizations_policy" "ai-optout" {

## infosec-subscriptions.opml
<?xml version="1.0" encoding="UTF-8"?>

<opml version="1.0">
    <head>
        <title>Christophe subscriptions in feedly Cloud</title>
    </head>
    <body>
        <outline text="Security" title="Security">
            <outline type="rss" text="Schneier on Security" title="Schneier on Security" xmlUrl="http://www.schneier.com/blog/index.rdf" htmlUrl="https://www.schneier.com/blog/"/>
            <outline type="rss" text="Rhino Security Labs" title="Rhino Security Labs" xmlUrl="http://www.rhinosecuritylabs.com/blog/feed/" htmlUrl="https://rhinosecuritylabs.com"/>

## keybase.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                christophetd
                / keybase.md
            
            
              Created
              December 12, 2017 22:24
            
              
                keybase.md
              
          
    Keybase proof

I hereby claim:

I am christophetd on github.
I am christophetd (https://keybase.io/christophetd) on keybase.
I have a public key ASDIKL2YxFhmFcG1s-aRvZ98jGemCEGwISz49sqQZYZA6go

To claim this, I am signing this object:

  
## xor-ddos-decryption.py
import binascii
import itertools

# XORs two byte strings together
def xor_bytes(bytes1, bytes2):
    return [ chr(ord(a) ^ b) for (a, b) in zip(bytes1, bytes2) ]

# XORs a ciphertext with the malware's hardcoded key, and repeats it until it's long enough to match the ciphertext length.
def decrypt(cipher, key_hex = 'BB2FA36AAA9541F0'):
    key_bytes = [ ord(a) for a in key_hex ]

## namemash.py
#!/usr/bin/env python
import sys

if __name__ == "__main__":
	if len(sys.argv) != 2:
		print "usage: %s names.txt" % (sys.argv[0])
		sys.exit(0)

	for line in open(sys.argv[1]):
		name = ''.join([c for c in line if  c == " " or  c.isalpha()])

## cfg
#!/bin/bash

CFG_DIR="/cfg"

if [ -z $EDITOR ]; then
        EDITOR=`which vim`
fi

sudo $EDITOR $CFG_DIR/$1

## install.sh
sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt-get install oracle-java8-installer


## install.sh
sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt-get install oracle-java8-installer

## gist:430775c9d53cda61eb84
sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt-get install oracle-java8-installer
	FROM httpd:2.4.49-alpine
	COPY ./vulnerable-httpd.conf /usr/local/apache2/conf/httpd.conf
	# Ensure the AI services opt-out policy type is enabled on the Organization
	resource "aws_organizations_organization" "organization" {
	enabled_policy_types = [
	# ...
	"AISERVICES_OPT_OUT_POLICY"
	]
	}

	# Create the AI opt-out policy
	resource "aws_organizations_policy" "ai-optout" {
	<?xml version="1.0" encoding="UTF-8"?>

	<opml version="1.0">
	<head>
	<title>Christophe subscriptions in feedly Cloud</title>
	</head>
	<body>
	<outline text="Security" title="Security">
	<outline type="rss" text="Schneier on Security" title="Schneier on Security" xmlUrl="http://www.schneier.com/blog/index.rdf" htmlUrl="https://www.schneier.com/blog/"/>
	<outline type="rss" text="Rhino Security Labs" title="Rhino Security Labs" xmlUrl="http://www.rhinosecuritylabs.com/blog/feed/" htmlUrl="https://rhinosecuritylabs.com"/>
	import binascii
	import itertools

	# XORs two byte strings together
	def xor_bytes(bytes1, bytes2):
	return [ chr(ord(a) ^ b) for (a, b) in zip(bytes1, bytes2) ]

	# XORs a ciphertext with the malware's hardcoded key, and repeats it until it's long enough to match the ciphertext length.
	def decrypt(cipher, key_hex = 'BB2FA36AAA9541F0'):
	key_bytes = [ ord(a) for a in key_hex ]
	#!/usr/bin/env python
	import sys

	if __name__ == "__main__":
	if len(sys.argv) != 2:
	print "usage: %s names.txt" % (sys.argv[0])
	sys.exit(0)

	for line in open(sys.argv[1]):
	name = ''.join([c for c in line if c == " " or c.isalpha()])
	#!/bin/bash

	CFG_DIR="/cfg"

	if [ -z $EDITOR ]; then
	EDITOR=`which vim`
	fi

	sudo $EDITOR $CFG_DIR/$1
	sudo add-apt-repository ppa:webupd8team/java
	sudo apt-get update
	sudo apt-get install oracle-java8-installer