mrpwnd

Keybase proof

I hereby claim:

• I am chowraid on github.
• I am chowraid (https://keybase.io/chowraid) on keybase.
• I have a public key whose fingerprint is 2CAB E5DE 09BD 6233 5E29 7817 2BE3 8A60 1C31 0FB2

To claim this, I am signing this object:

mrpwnd

import json
import os
import time
import requests
from PIL import Image
from StringIO import StringIO
from requests.exceptions import ConnectionError

def go(query, path):
  """Download full size images from Google image search.

mrpwnd

# The idea is to do a HEAD request on a large file on an apache server with multiple byte ranges in multiple connections.
# The server then will have to read this large file from all the given byte ranges without returning any content 
# (as it is a HEAD) request. If we do this about > 500 times in parallel the memory will collapse with
# the apache process crashing down.

import sys
import socket

header = ''

mrpwnd

#!/usr/bin/env python
# Joshua J. Drake (@jduck) of ZIMPERIUM zLabs
# Shout outs to our friends at Optiv (formerly Accuvant Labs)
# (C) Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015
# www.zimperium.com
#
# Exploit for RCE Vulnerability CVE-2015-1538 #1
# Integer Overflow in the libstagefright MP4 'stsc' atom handling
#
# Don't forget, the output of "create_mp4" can be delivered many ways!

mrpwnd

/*
 * To chose the width and height of a device use Chrome Developer Tools
*/

/* Portrait and Landscape */
@media screen 
  and (device-width: 0px) /*Chose width pixels*/
  and (device-height: 0px) /*Chose height pixels*/
  and (-webkit-device-pixel-ratio: 0) /*pixel ratio goes here*/ {