Skip to content

Instantly share code, notes, and snippets.

View jedisct1's full-sized avatar

Frank Denis jedisct1

View GitHub Profile
@jedisct1
jedisct1 / 95.211.150.204.txt
Created February 6, 2014 21:44
95.211.150.204
alliance.nmpolice.net
block.uspolice.net
crime.uspolice.net
cyber.nmpolice.net
cyber.uspolice.net
danger.uspolice.net
gov.nmpolice.net
gov.uspolice.net
icspa.nmpolice.net
icspa.uspolice.net
@jedisct1
jedisct1 / 31.41.221.130.txt
Last active August 29, 2015 13:56
Nuclear Exploit Kit on 31.41.221.130
hibernatebatting.pw
hotchocolatefield.pw
icebergcatcher.pw
januarygame.pw
stovegolfer.pw
woolensbicycle.pw
@jedisct1
jedisct1 / rust-ec2.patch
Created February 13, 2014 21:30
Disable AVX in Rust (required for EC2)
diff --git a/lib/Target/X86/X86.td b/lib/Target/X86/X86.td
index e755fae..e154cc7 100644
--- a/lib/Target/X86/X86.td
+++ b/lib/Target/X86/X86.td
@@ -246,17 +246,17 @@ def : ProcessorModel<"westmere", SandyBridgeModel,
// SSE is not listed here since llvm treats AVX as a reimplementation of SSE,
// rather than a superset.
def : ProcessorModel<"corei7-avx", SandyBridgeModel,
- [FeatureAVX, FeatureCMPXCHG16B, FeatureFastUAMem,
+ [FeatureCMPXCHG16B, FeatureFastUAMem,
@jedisct1
jedisct1 / 88.85.75.122
Created February 14, 2014 00:39
88.85.75.122
faxso.ru. IN A 88.85.75.122
nkaka.ru. IN A 88.85.75.122
bomori.ru. IN A 88.85.75.122
noptes.ru. IN A 88.85.75.122
oskale.ru. IN A 88.85.75.122
www.ronetu.ru. IN A 88.85.75.122
news-8408-latest.ronetu.ru. IN A 88.85.75.122
news-8686-latest.ronetu.ru. IN A 88.85.75.122
news-13655-latest.ronetu.ru. IN A 88.85.75.122
news-26968-latest.ronetu.ru. IN A 88.85.75.122
@jedisct1
jedisct1 / 88.85.75.100
Created February 14, 2014 00:40
88.85.75.100
faxso.ru. IN A 88.85.75.100
nkaka.ru. IN A 88.85.75.100
noptes.ru. IN A 88.85.75.100
www.ronetu.ru. IN A 88.85.75.100
news-8408-latest.ronetu.ru. IN A 88.85.75.100
news-8686-latest.ronetu.ru. IN A 88.85.75.100
news-13655-latest.ronetu.ru. IN A 88.85.75.100
news-26968-latest.ronetu.ru. IN A 88.85.75.100
news-30187-latest.ronetu.ru. IN A 88.85.75.100
news-65034-latest.ronetu.ru. IN A 88.85.75.100
@jedisct1
jedisct1 / nuclear-ek.txt
Last active August 29, 2015 13:56
Nuclear Exploit Kit new home
a5u4a.stovegold.pw. IN A 5.101.173.1
du4f3.stovegold.pw. IN A 5.101.173.1
iio9g.stovegold.pw. IN A 5.101.173.1
jrs7y.stovegold.pw. IN A 5.101.173.1
kyqks.stovegold.pw. IN A 5.101.173.1
lgo7x.stovegold.pw. IN A 5.101.173.1
o4x55.stovegold.pw. IN A 5.101.173.1
qlt10.stovegold.pw. IN A 5.101.173.1
rpqsh.stovegold.pw. IN A 5.101.173.1
sjkm1.stovegold.pw. IN A 5.101.173.1
@jedisct1
jedisct1 / this-is-not-a-malicious-dga.txt
Last active August 29, 2015 13:56
A lot of DGAs are *not* malicious. Here is one more example.
01kjmkpmer.biz. IN A 111.223.202.118
0537yfou7p.biz. IN A 111.223.202.118
05sp2mpybw.biz. IN A 111.223.202.118
0g65d8nmjz.biz. IN A 111.223.202.118
0gimk270qa.biz. IN A 111.223.202.118
0hjar1pwcq.biz. IN A 111.223.202.118
0ojhcc27ax.biz. IN A 111.223.202.118
0x38a51lg0.biz. IN A 111.223.202.118
0xo5ffsl8z.biz. IN A 111.223.202.118
15ayr8f1x5.biz. IN A 111.223.202.118
@jedisct1
jedisct1 / 46.249.37.167.txt
Created February 15, 2014 20:18
46.249.37.167
$ sd -is 46.249.37.167
b.root-sarvers.net
c.root-sarvers.net
h.root-sarvers.net
j.root-sarvers.net
m.root-sarvers.net
h.root-servdrs.net
j.root-servdrs.net
l.root-servdrs.net
@jedisct1
jedisct1 / root-sarvers.net
Created February 15, 2014 20:24
root-sarvers.net
% sd -o root-sarvers.net
0
0
0
0
6 ***
0
0
0
@jedisct1
jedisct1 / 188.165.25.167.txt
Created February 17, 2014 07:51
Compromised Godaddy domains on 188.165.25.167
laaideur.gasmask.us. IN A 188.165.25.167
odeurfle.gasmask.us. IN A 188.165.25.167
erkanivat.gasmask.us. IN A 188.165.25.167
zygosperm.gasmask.us. IN A 188.165.25.167
matschigste.gasmask.us. IN A 188.165.25.167
funkcjonariusza.gasmask.us. IN A 188.165.25.167
jeddahdoodsteek.gasmask.us. IN A 188.165.25.167
ueberdruessiger.gasmask.us. IN A 188.165.25.167
girofleenahapetian.gasmask.us. IN A 188.165.25.167
troefkaarten-fuoss.gasmask.us. IN A 188.165.25.167