Skip to content

Instantly share code, notes, and snippets.

View mccabe615's full-sized avatar

Mike McCabe mccabe615

62 followers · 34 following
View GitHub Profile
@mccabe615
mccabe615 / dash.py
Created August 26, 2015 04:35
from scapy.all import *
def arp_display(pkt):
if pkt[ARP].hwsrc == '74:75:48:0f:76:3a': # Huggies
print "Found Dash"
print sniff(prn=arp_display, filter="arp", store=0, count=1000)
@mccabe615
mccabe615 / AssessmentChecklist.md
Created February 5, 2014 14:38
Assessment Checklist

##OWASP Top Ten##

###A1 Injection###

@mccabe615
mccabe615 / Listener
Created February 7, 2014 04:41
Listener
// IHttpListener
@Override
public void processHttpMessage(int toolFlag, boolean messageIsRequest, IHttpRequestResponse messageInfo)
@mccabe615
mccabe615 / gist:8860871
Last active August 29, 2015 13:56
Parameters
toolFlag - used to determine which tool in Burp the request is coming from. In our case the tool flag for Intruder is 32.
messageIsRequest - this boolean value will be true for a message request and false for a message response
messageInfo - this holds the full data of the message itself
byte[] request_byte = messageInfo.getRequest();
IParameter sig_param = helpers.getRequestParameter(request_byte, "signature");
@mccabe615
mccabe615 / gist:8860891
Created February 7, 2014 11:13
Parameters2
if (toolFlag == 32 messageIsRequest !sig_param.equals(null))
{
String param1 = helpers.getRequestParameter(request_byte, "param1").getValue();
String param2 = helpers.getRequestParameter(request_byte, "param2").getValue();
String param3 = helpers.getRequestParameter(request_byte, "param3").getValue();
@mccabe615
mccabe615 / gist:8861095
Created February 7, 2014 11:30
String sig_string = calcsig(param1, param2, param3);
@mccabe615
mccabe615 / gist:8861122
Created February 7, 2014 11:33
sig_param = helpers.buildParameter(sig_param.getName(), sig_string, sig_param.getType());
request_byte = helpers.updateParameter(request_byte, sig_param);
messageInfo.setRequest(request_byte);
@mccabe615
mccabe615 / gist:8864383
Last active August 29, 2015 13:56
if (toolFlag == 32 && messageIsRequest && !sig_param.equals(null))
{
String param1 = helpers.getRequestParameter(request_byte, "param1").getValue();
String param2 = helpers.getRequestParameter(request_byte, "param2").getValue();
String param3 = helpers.getRequestParameter(request_byte, "param3").getValue();
@mccabe615
mccabe615 / docker_cheat.md
Created February 8, 2014 18:58 — forked from wsargent/docker_cheat.md

Docker Cheat Sheet

Why

Why Should I Care (For Developers)

"Docker interests me because it allows simple environment isolation and repeatability. I can create a run-time environment once, package it up, then run it again on any other machine. Furthermore, everything that runs in that environment is isolated from the underlying host (much like a virtual machine). And best of all, everything is fast and simple."

TL;DR, I just want a dev environment

@mccabe615
mccabe615 / gist:8969646
Created February 13, 2014 04:15
RVASec CFP
Docker
Dokku
Puppet
Chef
PoCs: