Skip to content

Instantly share code, notes, and snippets.

View cydave's full-sized avatar
๐Ÿ˜พ
๐Ÿ ๐Ÿฆ€

โ€โ€Dave cydave

๐Ÿ˜พ
๐Ÿ ๐Ÿฆ€
View GitHub Profile
@cydave
cydave / ip_2_dotless.py
Created September 11, 2019 10:42
IP 2 dotless
def ip_to_dotless(ip):
octets = [int(o) for o in ip.split('.')]
return sum([octet << shift for octet, shift in zip(octets, (24, 16, 8, 0))])
if __name__ == '__main__':
for proto in ('http://', 'https://'):
print(proto + str(ip_to_dotless('127.0.0.1')) + '/')
@cydave
cydave / blocklist.txt
Last active June 13, 2020 16:12
IP Blocklist - open relay attempts
101.100.177.165
101.100.181.134
101.109.210.222
101.109.246.40
101.181.69.209
101.205.119.179
101.235.114.131
101.30.57.235
101.50.71.233
101.51.127.152
@cydave
cydave / doki_domain.sh
Created July 31, 2020 18:29
Doki Malware DGA
curl -s 'https://dogechain.info/api/v1/address/sent/DP9S4V3TeqRES3Zp7dmD7frAsNExCFKCbx' | grep 'sent' | cut -d '"' -f 4 | tr -d '\n' | sha256sum | cut -b 1-12 | tr -d '\n'; echo '.ddns.net'
@cydave
cydave / storm
Created September 13, 2020 13:10
storm malware binaries
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./112.118.166.142:38293._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./116.49.132.142:47178._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./116.49.132.142:47178.storm_android-arm64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./121.171.183.194:52492._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./121.171.183.194:52492.storm_android-arm64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./154.209.8.10:32938._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./154.209.8.10:32938.storm_android-arm64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./183.103.64.221:36371._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./191.37.147.197:36204._storm_android-amd64.bin
16
@cydave
cydave / phpdangerousfuncs.md
Created September 20, 2020 13:43 — forked from mccabe615/phpdangerousfuncs.md
Dangerous PHP Functions

Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program
@cydave
cydave / file.py
Created February 5, 2022 16:37 — forked from jonluca/file.py
Fast asyncio HTTP requests
import sys
import os
import json
import asyncio
import aiohttp
# Initialize connection pool
conn = aiohttp.TCPConnector(limit_per_host=100, limit=0, ttl_dns_cache=300)
PARALLEL_REQUESTS = 100
/readme.txt | 526151
/screenshot-1.png | 95052
/screenshot-2.png | 76349
/license.txt | 56201
/screenshot-3.png | 53776
/README.txt | 49500
/LICENSE.txt | 48771
/README.md | 40920
/LICENSE | 39215
/vendor/composer/installed.json | 39004
@cydave
cydave / gist:75e897cff12f93df181258759bcd8bc7
Created November 29, 2022 01:03
a mysterious table...
โ•ญโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ•ฎ
โ”‚ bin โ”‚ opcode โ”‚ mnemonic โ”‚ opr1 โ”‚ opr2 โ”‚ flags โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚ 00000000 โ”‚ 0x00 โ”‚ NOP โ”‚ - โ”‚ - โ”‚ ---- โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚ 00000001 โ”‚ 0x01 โ”‚ LD โ”‚ BC โ”‚ d16 โ”‚ ---- โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚ 00000010 โ”‚ 0x02 โ”‚ LD โ”‚ (BC) โ”‚ A โ”‚ ---- โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚ 00000011 โ”‚ 0x03 โ”‚ INC โ”‚ BC โ”‚ - โ”‚ ---- โ”‚
package main
import (
"bytes"
"crypto/sha256"
"encoding/hex"
"fmt"
"hash"
"io"
"os"