digininja

These are the top 10 passwords tried against an SSH honeypot I'm running. I'm taking a sample every day and running the data through Pipal to generate the lists. I'm planning to automate this and add all the other Pipal data as soon as I get time.

These stats aren't that interesting at the moment, but I'm hoping to look for trends or to try to spot odd things happening, such as new default creds being picked up and tested. Any suggestions, let me know.

7 August

123456 = 38 (11.11%)
root = 8 (2.34%)
12345678 = 8 (2.34%)
dbadmin = 8 (2.34%)

digininja

alert("Gist XSS");

digininja

aim=0
depth=0
forward=0
File.readlines('input.txt').each do |line|
  if /([^ ]*) ([0-9]*)/ =~ line
    puts "direction: " + $1 + " value " + $2 + "\n"
    value = $2.to_i
    movement = $1
    if movement == "forward"
      forward = forward + value

digininja

depth=0
forward=0
File.readlines('input.txt').each do |line|
  if /([^ ]*) ([0-9]*)/ =~ line
    puts "direction: " + $1 + " value " + $2 + "\n"
    value = $2.to_i
    movement = $1
    if movement == "forward"
      forward = forward + value
    else

digininja

count = 0 
previous = 999999999999999
current = 0 
block1=0
block2=0
block3=0
pos=0

File.readlines('input').each do |line|
  num = line.to_i

digininja

git fetch upstream
git checkout master
git reset --hard upstream/master  
git push origin master --force 

digininja

10 PRINT "Hello"
20 GOTO 10

digininja

<?php
/*
Put this file in the root of the DVWA installation then access it through a browser.
*/

require_once "config/config.inc.php";

function var_dump_pre ($data) {
    print "<pre>";
    var_dump ($data);

digininja

<?php
session_start();

$message = "";

if ($_SERVER['REQUEST_METHOD'] == "POST") {
        if (array_key_exists ("token", $_POST) && array_key_exists ("token", $_SESSION)) {
                if (array_key_exists ("token", $_SESSION)) {
                        if ($_POST['token'] == $_SESSION['token']) {
                                $message = "Success";

digininja

#!/usr/bin/env ruby

require "redis"
require "concurrent"

redis = Redis.new
redis.flushdb

pool = Concurrent::FixedThreadPool.new(
  Concurrent.processor_count,