Davide Guerri dguerri

## gist:6668397
#!/bin/bash
#
# VirSH Simple Backup (davide.guerri@gmail.com)
#
# Version 1.0.1 - 20130301 (1362127750)
#

VIRSH="/usr/bin/virsh"
QEMU_IMG="/usr/bin/qemu-img"
backup_dir="/backups"

## qnap-clientenc-decrypt.sh
#!/bin/sh

set -ue

[ "$#" -lt 2 ] && { echo "Syntax: $0 <filename> <key>"; exit 1; }

filename="$1"
key="$2"

# Compose the key by repeating the user input until we have 32 characters (64 hex digits)

## upwned247.php
<?php
/*
	Updated version, 2016-12-02: fixed shellcode so it *actually* works on QEMU
	usermode emulation (seems I pushed an old version), and removed debug output.

	-------------------------

	NB: THIS PoC ONLY WORKS IN QEMU USERMODE EMULATION!
	If anyone wants to fix this, go ahead (no pun intended).
	However, I don't have a vulnerable product and am unwilling to acquire one.
	#!/bin/bash
	#
	# VirSH Simple Backup (davide.guerri@gmail.com)
	#
	# Version 1.0.1 - 20130301 (1362127750)
	#

	VIRSH="/usr/bin/virsh"
	QEMU_IMG="/usr/bin/qemu-img"
	backup_dir="/backups"
	#!/bin/sh

	set -ue

	[ "$#" -lt 2 ] && { echo "Syntax: $0 <filename> <key>"; exit 1; }

	filename="$1"
	key="$2"

	# Compose the key by repeating the user input until we have 32 characters (64 hex digits)
	<?php
	/*
	Updated version, 2016-12-02: fixed shellcode so it actually works on QEMU
	usermode emulation (seems I pushed an old version), and removed debug output.

	-------------------------

	NB: THIS PoC ONLY WORKS IN QEMU USERMODE EMULATION!
	If anyone wants to fix this, go ahead (no pun intended).
	However, I don't have a vulnerable product and am unwilling to acquire one.