Skip to content

Instantly share code, notes, and snippets.

@h0ng10
h0ng10 / rebind.py
Last active February 25, 2020 15:40
Simple DNS Rebinder to gain access to the AWS metaservice via SSRF
#!env python3
import socket
from time import time
import datetime
class DNSQuery:
def __init__(self, data):
self.data = data
self.domain = ''
@h0ng10
h0ng10 / alertbox.js
Last active March 6, 2016 21:18
simple javascript alert box
alert('executed');
@h0ng10
h0ng10 / create_ovpn_config.py
Created October 7, 2015 05:11
Adds the certificate/private key from a OpenVPN user to the configuration file (ovpn).
#!/usr/bin/env python
import re
import os
import string
import argparse
def get_cert_from_file(regex, filename):
try:
cert_file = open(filename)
cert_content = cert_file.read()
@h0ng10
h0ng10 / vbs_test.rb
Last active December 11, 2015 00:39
def create_vbs_from_file(filename)
content = File.read(filename)
exe = content.unpack("H*").join
vbs = ""
var_bytes = "var_bytes" #Rex::Text.rand_text_alpha(rand(8)+8)
var_byte = "var_byte" #Rex::Text.rand_text_alpha(rand(8)+8)
var_fname = "var_fname" #Rex::Text.rand_text_alpha(rand(8)+8)
var_func = "var_func" #Rex::Text.rand_text_alpha(rand(8)+8)
var_stream = "var_stream" #Rex::Text.rand_text_alpha(rand(8)+8)
@h0ng10
h0ng10 / http-vuln-cve2013-0156.nse
Created January 11, 2013 18:09
This is a nmap script to check servers for Ruby on Rails installations that are vulnerable to CVE-2013-0156. Just a port of the metasploit auxiliary module, from HD Moore: https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rails_xml_yaml_scanner.rb It's my first nmap script and might need some additional te…
local http = require "http"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local vulns = require "vulns"
description = [[
Detects Ruby on Rails installations that are vulnerable to CVE-2013-0156, This critical vulnerability allows unauthenticated attackers to execute code remotely.
This is the nmap/lua port of the metasploit scanner module from hd moore