Skip to content

Instantly share code, notes, and snippets.

View ss23's full-sized avatar

☃ Stephen Shkardoon ☃ ss23

114 followers · 10 following
View GitHub Profile
@ss23
ss23 / php-autoload-lfi.csv
Last active August 11, 2019 09:46
Method Example Protected Since
zend_lookup_class class_exists($_GET['name']) 5.4.24 and 5.5.8
unserialize unserialize($_GET['data']) 5.1.0
spl_autoload_call spl_autoload_call($_GET['name'])` Still working
@ss23
ss23 / gentoo-broken.txt
Created July 30, 2019 13:47
# Default portage configure command
gentoo-dev /var/tmp/portage/net-libs/libtorrent-0.13.8/work/libtorrent-0.13.8 # ./configure --prefix=/usr --build=x86_64-pc-linux-gnu --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --disable-dependency-tracking --disable-silent-rules --docdir=/usr/share/doc/libtorrent-0.13.8 --htmldir=/usr/share/doc/libtorrent-0.13.8/html --with-sysroot=/ --libdir=/usr/lib64 --enable-aligned --disable-debug --enable-openssl --with-posix-fallocate --with-zlib=/usr/
[...]
checking for the pthreads library -lpthread... no
checking whether pthreads work with --thread-safe... no
checking whether pthreads work with -mt... no
checking for pthread-config... no
checking if zlib is wanted... yes
checking for inflateEnd in -lz... no
checking zlib.h usability... yes
@ss23
ss23 / gist:59bd55d133bebd4eda7831786c734018
Created June 20, 2019 23:28
ss23@crisp ~ $ zpool status
pool: tank
state: ONLINE
scan: scrub repaired 0B in 1 days 01:34:51 with 0 errors on Tue May 21 02:44:35 2019
config:
NAME STATE READ WRITE CKSUM
tank ONLINE 0 0 0
raidz2-0 ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GH7S ONLINE 0 0 0
@ss23
ss23 / crack.sh
Created March 20, 2019 00:39
#!/bin/bash
export BIN="/opt/hashcat/hashcat64.bin"
# Remove -O if you wihs to use a larger salt (you'll know the warning when you see it)
# --force until we upgrade
export OPTS="--workload-profile=3 -O"
# We are dynamically constructing the names based on what this script is called, but you could define it manually
#filename="other-name"
filename=$(basename "$0" .sh)
@ss23
ss23 / gist:5cfb94d1e74737a8ae57721492a0d5b5
Created October 10, 2018 10:13
This file has been truncated, but you can view the full file.
{"published":{"time":"2018-10-10T20:10:53+10:00"},"actor":{"type":"utopia"},"verb":{"event_category":"response_systems","event":"listing"},"object":{"systems":[{"system":"EMUP02A","zone":1,"zone_name":"Retro Superhitz","active":false,"status":"offline","client_code":"EMUP02","client_name":"#crowdDJ","client_branding_bg":"http://live.nightlife.com.au/client_branding/logo_EMUP02.jpg?_hash=23f70dd4ff7411614fa31250b0807a04","client_branding_bg_main":"http://live.nightlife.com.au/client_branding/logo_EMUP02.png?_hash=fe596a44470eb2808e5e844bb3e34360","client_lon":153.0168504,"client_lat":-27.2113059,"client_radius":100,"credits_max":3,"credits_refill":900,"local_ip":"172.30.0.1","local_port":9091,"version":"4.00.20180924153450","database_version":"Jul18Rel1.20180706171344","access":"user","selections_only":true,"da_access":"view_only","verification":"all","ws_url":null,"ws_local_url":"ws://172.30.0.1:9090/hl/websocket"},{"system":"TWEN14A","zone":1,"zone_name":"Gym Floor","active":true,"status":"online","client_co
@ss23
ss23 / dd
Created October 4, 2018 02:56
Simulated DDT histogram:
bucket allocated referenced
______ ______________________________ ______________________________
refcnt blocks LSIZE PSIZE DSIZE blocks LSIZE PSIZE DSIZE
------ ------ ----- ----- ----- ------ ----- ----- -----
1 148M 18.4T 18.0T 18.0T 148M 18.4T 18.0T 18.0T
2 3.64M 446G 411G 413G 7.60M 931G 856G 862G
4 598K 72.3G 62.3G 63.0G 3.13M 390G 336G 340G
8 59.2K 7.09G 6.12G 6.19G 619K 74.3G 64.2G 64.9G
@ss23
ss23 / gist:f9d9cc9e1f70b978c0bc475fc7c23872
Created August 29, 2018 11:41
tank ONLINE 0 0 0
raidz2-0 ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GH7S ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GHWE ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GJ6R ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GJBW ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GMZ5 ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GY2Q ONLINE 0 0 0
raidz2-1 ONLINE 0 0 0
ata-ST1000NM0008-2F2100_ZDS0GY98 ONLINE 0 0 0
@ss23
ss23 / gist:8d601d3946dee471b59ecb8702d0e740
Created August 19, 2018 21:27
err := c.Pipe([]bson.M{
{"$sort": bson.M{
"timestamp": -1,
}},
{"$group": bson.M{
"_id": "$ip",
"openports": bson.M{"$first": "$openports"},
}},
{"$match": bson.M{
"openports.0": bson.M{"$exists": true},
@ss23
ss23 / gist:3b8f466fc988823bd0520e4fdb9ee810
Created August 7, 2018 01:56
Current temperature: 26 degrees celsius
Setting fan speed to 5%
Fan speed raw: 13 (0xd)
Current temperature: 26 degrees celsius
Setting fan speed to 5%
Fan speed raw: 13 (0xd)
Current temperature: 26 degrees celsius
Setting fan speed to 5%
Fan speed raw: 13 (0xd)
Current temperature: 26 degrees celsius
@ss23
ss23 / gist:fd74f5f0002a027a965f087d8ef09aa1
Created July 9, 2018 08:58
proxmark3> lf hid clone 20050c5d8f
Cloning tag with ID 20050c5d8f
#db# DONE!
proxmark3> lf search
NOTE: some demods output possible binary
if it finds something that looks like a tag
False Positives ARE possible
Checking for known tags: