Skip to content

Instantly share code, notes, and snippets.

View cydave's full-sized avatar
😾
🐍 🦀

‏‏Dave cydave

😾
🐍 🦀
View GitHub Profile
package main
import (
"bytes"
"crypto/sha256"
"encoding/hex"
"fmt"
"hash"
"io"
"os"
@cydave
cydave / gist:75e897cff12f93df181258759bcd8bc7
Created November 29, 2022 01:03
a mysterious table...
╭──────────┬────────┬──────────┬───────┬───────┬───────╮
│ bin │ opcode │ mnemonic │ opr1 │ opr2 │ flags │
├──────────┼────────┼──────────┼───────┼───────┼───────┤
│ 00000000 │ 0x00 │ NOP │ - │ - │ ---- │
├──────────┼────────┼──────────┼───────┼───────┼───────┤
│ 00000001 │ 0x01 │ LD │ BC │ d16 │ ---- │
├──────────┼────────┼──────────┼───────┼───────┼───────┤
│ 00000010 │ 0x02 │ LD │ (BC) │ A │ ---- │
├──────────┼────────┼──────────┼───────┼───────┼───────┤
│ 00000011 │ 0x03 │ INC │ BC │ - │ ---- │
/readme.txt | 526151
/screenshot-1.png | 95052
/screenshot-2.png | 76349
/license.txt | 56201
/screenshot-3.png | 53776
/README.txt | 49500
/LICENSE.txt | 48771
/README.md | 40920
/LICENSE | 39215
/vendor/composer/installed.json | 39004
@cydave
cydave / file.py
Created February 5, 2022 16:37 — forked from jonluca/file.py
Fast asyncio HTTP requests
import sys
import os
import json
import asyncio
import aiohttp
# Initialize connection pool
conn = aiohttp.TCPConnector(limit_per_host=100, limit=0, ttl_dns_cache=300)
PARALLEL_REQUESTS = 100
@cydave
cydave / phpdangerousfuncs.md
Created September 20, 2020 13:43 — forked from mccabe615/phpdangerousfuncs.md
Dangerous PHP Functions

Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program
@cydave
cydave / storm
Created September 13, 2020 13:10
storm malware binaries
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./112.118.166.142:38293._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./116.49.132.142:47178._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./116.49.132.142:47178.storm_android-arm64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./121.171.183.194:52492._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./121.171.183.194:52492.storm_android-arm64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./154.209.8.10:32938._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./154.209.8.10:32938.storm_android-arm64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./183.103.64.221:36371._storm_android-amd64.bin
16bcb323bfb464f7b1fcfb7530ecb06948305d8de658868d9c3c3c31f63146d4 ./191.37.147.197:36204._storm_android-amd64.bin
16
@cydave
cydave / doki_domain.sh
Created July 31, 2020 18:29
Doki Malware DGA
curl -s 'https://dogechain.info/api/v1/address/sent/DP9S4V3TeqRES3Zp7dmD7frAsNExCFKCbx' | grep 'sent' | cut -d '"' -f 4 | tr -d '\n' | sha256sum | cut -b 1-12 | tr -d '\n'; echo '.ddns.net'
@cydave
cydave / blocklist.txt
Last active June 13, 2020 16:12
IP Blocklist - open relay attempts
101.100.177.165
101.100.181.134
101.109.210.222
101.109.246.40
101.181.69.209
101.205.119.179
101.235.114.131
101.30.57.235
101.50.71.233
101.51.127.152
@cydave
cydave / ip_2_dotless.py
Created September 11, 2019 10:42
IP 2 dotless
def ip_to_dotless(ip):
octets = [int(o) for o in ip.split('.')]
return sum([octet << shift for octet, shift in zip(octets, (24, 16, 8, 0))])
if __name__ == '__main__':
for proto in ('http://', 'https://'):
print(proto + str(ip_to_dotless('127.0.0.1')) + '/')