staaldraad

/* Connect to and extract values from Riak database. Default port 8087

   Author: etienne@sensepost.com
   Version: 1.0 26 February 2015
*/

var argv = require('minimist')(process.argv.slice(2));
var riak = require('riak-pb');

if(process.argv.length < 2){

staaldraad

var thrift = require('thrift');
var util = require('util')
var HBase = require('./gen-nodejs/Hbase');
var HBaseTypes = require('./gen-nodejs/Hbase_types');
var port = 9090

//var connection = thrift.createConnection(process.argv[2], port, { transport: thrift.TFramedTransport,protocol:thrift.TBinaryProtocol });
var connection = thrift.createConnection(process.argv[2], port, { transport: thrift.TBufferedTransport, protocol:thrift.TBinaryProtocol });

connection.on('connect', function () {

staaldraad

Create a sha256 hash (in uppercase) for each line in a file:
awk '{printf "%s - ",$1 }{"echo -n "$1"|sha256sum"|getline d;split(d,a,"-"); print toupper(a[1])}' notes.txt  

For each line in the 'reps.txt' - create a random string of correct length and do a replace.
for i in `cat reps.txt`; do                                                                                                                                                                              [16:28]
x=`cat /dev/urandom | tr -dc 'a-zA-Z' | fold -w ${#i} | head -n 1`; echo $x;
sed -i "s/$i/$x/g" x6 ;
done

staaldraad

#! /bin/bash
# PDF signing in Linux
# Author: etienne@sensepost.com
# Version: 1.0 16 October 2015
# Requirements: xv, imagemagick
# Check if requirements are met:
if ! which convert 2>/dev/null; then
    echo "ImageMagick not installed and is required"
    exit 1
fi

staaldraad

#!/bin/bash

import sys
import binascii

tmp = binascii.a2b_base64(sys.argv[1])
out = ""

for x in tmp:
    out += chr(ord(x)^95) #xor with the underscore char (_)

staaldraad

/*
   Dump data from open Redis instance. 
   Usage: node redis_dump.js -h 10.10.0.1
          node redis_dump.js -n 10  #dumps the first 10 keys from the instance
          node redis_dump.js -k keyname #dump the value of a specific key
   Author: etienne@sensepost.com
   Version: 1.0 12 February 2015
*/

var redis = require("redis")

staaldraad

grep -v "^\s*$" /tmp/cracked| sort | uniq -c | sort -bnr

staaldraad

Get-EventLog -InstanceId 4776 -LogName "Security" | ForEach-Object {
  $sp = $_.message -split "`n" 
  $tmp = $sp | Select-String -Pattern 'RULER' 
  if($tmp.count -ge 1){
    Write-Host "Possible Ruler usage at: " $_.TimeGenerated
    $sp | Select-String -Pattern 'Logon Account:' | write-host
  }
}

staaldraad

GET /wps/redirect HTTP/1.1 
Host: www.host.com 
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:27.0) Gecko/20100101 Firefox/27.0 
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 
Accept-Language: en-ZA,en-GB;q=0.8,en-US;q=0.5,en;q=0.3 
Accept-Encoding: gzip, deflate 
Cookie: WASReqURL=http:///wps/ 
Connection: keep-alive

staaldraad

FROM ubuntu:14.04

MAINTAINER Etienne Stalmans, etienne@sensepost.com

RUN apt-get update && apt-get install -y \
 unzip \
 iptables

RUN apt-get install -y \
  build-essential \