Skip to content

Instantly share code, notes, and snippets.

@mak
mak / wcr.py
Last active October 28, 2018 21:09
Extract everything from WannaCry
import re
import os,sys
import pefile
import struct
import zipfile
import hashlib
import StringIO
from Crypto import Random
from Crypto.PublicKey import RSA
from Crypto.Cipher import PKCS1_v1_5,AES
anonymous
anonymous / InternetOpenUrlA.py
Created May 15, 2017 10:09
Wannacrypt proxy use checker
#!/usr/bin/env python3
import sys
import ctypes
target_url = sys.argv[1]
buffer_url = ctypes.c_char_p(bytes(target_url,"ascii"))
print("{:20s} : {}".format("Input URL object",buffer_url))
@JoeUchillHill
JoeUchillHill / ISonLIST.csv
Last active April 7, 2018 20:44
ISonLIST describes overlaps. isOFFlist describes entries that do not overlap.
Host IP Address Year Month Day Implant Version OS
INTONATION tx.micro.net.pk 203.135.2.194 2000 8 17 JACKLADDER 2 sparc-sun-solaris2.7
INTONATION hakuba.janis.or.jp 210.232.42.3 2000 8 22 JACKLADDER 2 sparc-sun-solaris2.6
INTONATION mail.interq.or.jp 210.157.0.87 2000 8 24 JACKLADDER 2 sparc-sun-solaris2.6
INTONATION mx1.freemail.ne.jp 210.235.164.21 2000 8 28 JACKLADDER ? i386-pc-solaris2.7
INTONATION webnetra.entelnet.bo 166.114.10.28 2000 8 30 JACKLADDER 2 sparc-sun-solaris2.6
INTONATION opcwdns.opcw.nl 195.193.177.150 2000 9 6 JACKLADDER 2 sparc-sun-solaris2.6
INTONATION rayo.pereira.multi.net.co 206.49.164.2 2000 9 20 JACKLADDER 2 sparc-sun-solaris2.6
INTONATION most.cob.net.ba 195.222.48.5 2000 9 21 JACKLADDER 2 sparc-sun-solaris2.6
INTONATION ns.huawei.com.cn 202.96.135.140 2000 9 21 JACKLADDER 2 sparc-sun-solaris2.6