Skip to content

Instantly share code, notes, and snippets.

@jheise
jheise / isc-dhpc-server
Created August 27, 2022 16:47
Config for isc-dhcp-server to use wlan1
# Defaults for isc-dhcp-server (sourced by /etc/init.d/isc-dhcp-server)
# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf).
#DHCPDv4_CONF=/etc/dhcp/dhcpd.conf
#DHCPDv6_CONF=/etc/dhcp/dhcpd6.conf
# Path to dhcpd's PID file (default: /var/run/dhcpd.pid).
#DHCPDv4_PID=/var/run/dhcpd.pid
#DHCPDv6_PID=/var/run/dhcpd6.pid
@jheise
jheise / db.fakeroot
Created August 26, 2022 05:55
fake root server, points everything to the same ip
@ IN SOA ns.big.chungus. the.big.chungus. (
1 ; Serial
300s ; Refresh after 5 min
1h ; Retry after 1 hour
1w ; Expire after 1 week
1h ) ; Negative caching TTL of 1 day
IN NS 10.13.37.1
* IN A 10.13.37.1
@jheise
jheise / named.conf.default-zones
Created August 26, 2022 05:53
named.conf pointing to a new root hint file
// Add a fake root server
zone "." {
type master;
file "/etc/bind/db.fakeroot";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
@jheise
jheise / dhcpd.conf
Created August 26, 2022 04:42
DHCP Server Config
# dhcpd.conf
option domain-name-servers 10.13.37.1;
default-lease-time 600;
max-lease-time 7200;
ddns-update-style none;
authoritative;
log-facility local7;
subnet 10.13.37.0 netmask 255.255.255.0 {
@jheise
jheise / hostapd.conf
Last active August 23, 2022 05:39
/etc/hostapd/hostapd.conf
interface=wlan1
#If this fails, try rt1871xdrv a
#driver=rtl8821au
# Name of the new network: best use the hostname
ssid=DefCon-Open
# Pick a channel not already in use
channel=6
allow-hotplug wlan1
iface wlan1 inet static
address 10.13.37.1
netmask 255.255.255.0
@jheise
jheise / top10url.csv
Last active June 12, 2022 16:03
top10urls
URL Number of hits
/ 2179
/.env 1253
/.aws/credentials 112
/.aws/config 102
/editBlackAndWhiteList 89
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 69
/public/.env 58
/public/.aws/credentials 50
/aws/credentials 50
@jheise
jheise / top10ip.csv
Last active June 13, 2022 05:17
Top 10 IPs
IP Address Number of hits OTX info
156.200.107.242 998 https://otx.alienvault.com/indicator/ip/156.200.107.242
185.254.196.115 986 https://otx.alienvault.com/indicator/ip/185.254.196.115
193.106.191.48 370 https://otx.alienvault.com/indicator/ip/193.106.191.48
109.237.103.38 240 https://otx.alienvault.com/indicator/ip/109.237.103.38
135.125.246.110 234 https://otx.alienvault.com/indicator/ip/135.125.246.110.234
135.125.217.54 224 https://otx.alienvault.com/indicator/ip/135.125.217.54
109.237.103.123 222 https://otx.alienvault.com/indicator/ip/109.237.103.123
18.223.43.198 160 https://otx.alienvault.com/indicator/ip/18.223.43.198
18.207.141.57 160 https://otx.alienvault.com/indicator/ip/18.207.141.57
@jheise
jheise / honeypot.go
Last active June 4, 2022 18:48
simple http honeypot written in golang
package main
import (
"encoding/json"
"fmt"
"log"
"net/http"
"net/url"
"os"
"time"
func LogRecord(r Record) error {
r_json, err := json.Marshal(r)
if err != nil {
return err
}
logger.Println(string(r_json))
return nil
}