Ronnie Flathers ropnop

## Dockerfile
ARG CENTOSIMAGE=astj/centos5-vault

FROM ${CENTOSIMAGE}
RUN yum install -y perl curl wget gcc c++ make glibc-devel glibc-devel.i386

## cors_poc_test.html
<html>
<script src="https://code.jquery.com/jquery-3.2.1.min.js"></script>
<h1>CORS Test PoC</h1>
<label for="target_url">Endpoint to test: </label><input type="url" id="target_url" size=100 placeholder="Target URL"><br/>
<input type="checkbox" id="with_creds_checkbox" value="with_creds"><label for="with_creds_checkbox">With Credentials?</label><br/>
<input type="submit" id="submit_btn" value="Make Request">
<hr>
<p>If the site is vulnerable to an overly permissive CORS policy, the response of the above request will appear in the box below</p>

<div id="test_data" style="border:1px solid darkred; color: red">

## find_moles.py
#!/usr/bin/env python2

# load the infraction json data
import json
with open('infractions.json', 'r') as fp:
    data = json.loads(fp.read())
    infractions = data['infractions']

# get all the names and generate the naughty list from the CSV
names = []

## opennms_check_password.py
#!/usr/bin/env python

import sys
from hashlib import sha256

def checkPassword(encrypted, plaintext, iterations=100000, verbose=False):
    hexstring = encrypted.decode('base64').encode('hex') # i hate working with bytes
    salt = hexstring[:32]
    correct = hexstring[32:]
    if verbose:

## helloworld
#!/usr/bin/python

print 'Hello World'
	ARG CENTOSIMAGE=astj/centos5-vault

	FROM ${CENTOSIMAGE}
	RUN yum install -y perl curl wget gcc c++ make glibc-devel glibc-devel.i386
	<html>
	<script src="https://code.jquery.com/jquery-3.2.1.min.js"></script>
	<h1>CORS Test PoC</h1>
	<label for="target_url">Endpoint to test: </label><input type="url" id="target_url" size=100 placeholder="Target URL"><br/>
	<input type="checkbox" id="with_creds_checkbox" value="with_creds"><label for="with_creds_checkbox">With Credentials?</label><br/>
	<input type="submit" id="submit_btn" value="Make Request">
	<hr>
	<p>If the site is vulnerable to an overly permissive CORS policy, the response of the above request will appear in the box below</p>

	<div id="test_data" style="border:1px solid darkred; color: red">
	#!/usr/bin/env python2

	# load the infraction json data
	import json
	with open('infractions.json', 'r') as fp:
	data = json.loads(fp.read())
	infractions = data['infractions']

	# get all the names and generate the naughty list from the CSV
	names = []
	#!/usr/bin/env python

	import sys
	from hashlib import sha256

	def checkPassword(encrypted, plaintext, iterations=100000, verbose=False):
	hexstring = encrypted.decode('base64').encode('hex') # i hate working with bytes
	salt = hexstring[:32]
	correct = hexstring[32:]
	if verbose: