Haoxi Tan h4sh5

## RC4.c
/*
    robin verton, dec 2015
    implementation of the RC4 algo
*/

#include <stdio.h>
#include <string.h>
#include <stdlib.h>

#define N 256   // 2^8

## Exploitation.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                h4sh5
                / Exploitation.md
            
            
              Created
              February 16, 2024 15:48
                — forked from yezz123/Exploitation.md
            
              
                Pentesting-Exploitation
              
          
    Pentesting-Exploitation

Pentesting-Exploitation Programs and Commands , Protocols Network / Ports
Table of Contents


Table of Contents
Recon

File enumeration


Disk files


## smtp_send_email.py
#!/usr/bin/env python3

import sys
import smtplib
from email.mime.multipart import MIMEMultipart
from email.mime.text import MIMEText
import dns.resolver


msg = MIMEMultipart('alternative')

## touchid_sudo.sh
#!/bin/bash

# curl -sL https://gist.githubusercontent.com/RichardBronosky/31660eb4b0f0ba5e673b9bc3c9148a70/raw/touchid_sudo.sh | bash
# This script is ready to copy-paste in whole, or just the line above (without the leading #)

# Use TouchID for sudo on modern MacBook Pro machines
# This script adds a single line to the top of the PAM configuration for sudo
# See: https://apple.stackexchange.com/q/259093/41827 for more info.

touchid_sudo(){

## squidproxy.sh
docker run  --name squid-container -e TZ=UTC -p 3128:3128 ubuntu/squid:5.2-22.04_beta

## tracing.dockerfile
FROM python:3.10-buster
RUN pip install hunter
# COPY /entrypoint.sh /
CMD PYTHONHUNTER="Q(module='pip')|Q(module='os')|Q(module='subprocess')" python -m pip install requests

## patch_nops.py
#!/usr/bin/env python3

import re
import binascii
import sys
import time

if len(sys.argv) < 3:
	print("usage: %s <file> <hex pattern> [replace pattern (default all NOPs)]" %sys.argv[0])
	exit(1)

## swagger_check_sec.py
#!/usr/bin/env python3

import yaml
import sys

filename = sys.argv[1]

with open(filename,'r') as f:
	d = yaml.safe_load(f)
	if 'security' in d:

## squeeze_two_cols.sh
(echo -e "---\nclassoption:\n- twocolumn\nlinestretch: 0\n---"; cat $1) | pandoc --variable papersize="A4" --variable margin-left="0.2cm" --variable margin-right="0.2cm"  --variable margin-top="0.2cm" --variable margin-bottom="0.2cm" --variable fontsize="8pt" - -o $1.pdf

## log.php
<?php

	// a script that just logs stuff, from something like echo 123 | curl -d@- url
	$entityBody = file_get_contents('php://input');
	file_put_contents('just_the_log.txt', "\n---" . $_SERVER["REMOTE_ADDR"] . "|" .  $_SERVER["HTTP_X_FORWARDED_FOR"] .  "|" . $entityBody, FILE_APPEND | LOCK_EX);

?>
	/*
	robin verton, dec 2015
	implementation of the RC4 algo
	*/

	#include <stdio.h>
	#include <string.h>
	#include <stdlib.h>

	#define N 256 // 2^8
	#!/usr/bin/env python3

	import sys
	import smtplib
	from email.mime.multipart import MIMEMultipart
	from email.mime.text import MIMEText
	import dns.resolver


	msg = MIMEMultipart('alternative')
	#!/bin/bash

	# curl -sL https://gist.githubusercontent.com/RichardBronosky/31660eb4b0f0ba5e673b9bc3c9148a70/raw/touchid_sudo.sh \| bash
	# This script is ready to copy-paste in whole, or just the line above (without the leading #)

	# Use TouchID for sudo on modern MacBook Pro machines
	# This script adds a single line to the top of the PAM configuration for sudo
	# See: https://apple.stackexchange.com/q/259093/41827 for more info.

	touchid_sudo(){
	FROM python:3.10-buster
	RUN pip install hunter
	# COPY /entrypoint.sh /
	CMD PYTHONHUNTER="Q(module='pip')\|Q(module='os')\|Q(module='subprocess')" python -m pip install requests
	#!/usr/bin/env python3

	import re
	import binascii
	import sys
	import time

	if len(sys.argv) < 3:
	print("usage: %s <file> <hex pattern> [replace pattern (default all NOPs)]" %sys.argv[0])
	exit(1)
	#!/usr/bin/env python3

	import yaml
	import sys

	filename = sys.argv[1]

	with open(filename,'r') as f:
	d = yaml.safe_load(f)
	if 'security' in d:
	<?php

	// a script that just logs stuff, from something like echo 123 \| curl -d@- url
	$entityBody = file_get_contents('php://input');
	file_put_contents('just_the_log.txt', "\n---" . $_SERVER["REMOTE_ADDR"] . "\|" . $_SERVER["HTTP_X_FORWARDED_FOR"] . "\|" . $entityBody, FILE_APPEND \| LOCK_EX);

	?>