doron2402

Recon and Attack Vectors from My Logs

This document contains excerpts from my web server logs collected over a period of 7 years that shows various kinds of recon and attack vectors.

There were a total of 37.2 million lines of logs out of which 1.1 million unique HTTP requests (Method + URI) were found.

$ sed 's/^.* - - \[.*\] "\(.*\) HTTP\/.*" .*/\1/' access.log > requests.txt

doron2402

import numpy as np
import cv2
IMAGE_TO_PROCESS = 'image.png'
TXT_BASED_CLASSIFICATION = 'words.txt'

def get_txt_data(file):
  rows = open(file).read().strip().split('\n')
  return rows

img = cv2.imread(IMAGE_TO_PROCESS)

doron2402

import numpy as np
import cv2

video_file_path = '<link to video>'
video = cv2.VideoCapture(video_file_path)

# Check if video was opened
if video.isOpened() == False:
    print(f'Cannot open video stream {video_file_path}')

doron2402

import numpy as np
import cv2
img = cv2.imread('./<LINK TO YOUR IMAGE>')

# [x, y, color]
# colors are [blue, green, red]
blue = img[:,:,0]
green = img[:,:,1]
red = img[:,:,2]

doron2402

#!/bin/sh

# Make sure to:
# 1) Name this file `backup.sh` and place it in /home/ubuntu
# 2) Run sudo apt-get install awscli to install the AWSCLI
# 3) Run aws configure (enter s3-authorized IAM user and specify region)
# 4) Fill in DB host + name
# 5) Create S3 bucket for the backups and fill it in below (set a lifecycle rule to expire files older than X days in the bucket)
# 6) Run chmod +x backup.sh
# 7) Test it out via ./backup.sh

doron2402

// Go channel example
package main

import (
	"fmt"
	"sync"
)

// send only function
func sendOnlyMessage(ch chan<- int, wg *sync.WaitGroup) {

doron2402

package main

import (
	"fmt"
	"math/rand"
	"time"
)

var rnd = rand.New(rand.NewSource(time.Now().UnixNano()))

doron2402

package main

import (
	"fmt"
	"time"
)

func say(str string) {
	time.Sleep(1 * time.Millisecond)
	for i := 0; i < 10; i++ {

doron2402

package main
/**
A cool way to find out if there are any race condition is using 
`go run --race .`
**/
import (
	"fmt"
	"math/rand"
	"sync"
	"time"

doron2402

var _       = require('underscore');
var colors  = require('colors');
var sprintf = require('sprintf-js').sprintf;

/**
 * used to decode AIS messages.
 * Currently decodes types 1,2,3,4,5,9,18,19,21,24,27
 * Currently does not decode 6,7,8,10,11,12,13,14,15,16,17,20,22,23,25,26
 * Currently does not support the USCG Extended AIVDM messages
 *