thesp0nge

var searchQuery = window.location.hash.substr(1);
document.write("Risultati per la ricerca: " + searchQuery);

thesp0nge

#include <stdio.h>
#include <string.h>

void copyString(char* input) {
    char buffer[10];
    strcpy(buffer, input);
    printf("Copia effettuata: %s\n", buffer);
}

int main() {

thesp0nge

FileInputStream fileIn = new FileInputStream("data.ser");
ObjectInputStream in = new ObjectInputStream(fileIn);
Object obj = in.readObject();
in.close();

if (obj instanceof MyClass) {
    MyClass myObj = (MyClass) obj;
    // Operazioni su myObj
}

thesp0nge

import os

filename = input("Inserisci il nome del file da aprire: ")
command = "cat " + filename
os.system(command)

thesp0nge

#!/usr/bin/env python3

import sys
import requests
import random
import string
import re

def viewItem(s, target, query):
	url = "http://%s/item/viewItem.php?id=5+or+%s" % (target, query)

thesp0nge

openSUSE is a widely known European Linux distribution.

Among a lot of benifits and killing features, robust for servers and modern for laptop, it's flexible enough to become a 
platform for security researchers.

The plan is to collect a set of tools, commonly used in a penetration test or a code review, and create a post installation
script to transform the distribution in a powerful hacking station.

thesp0nge

*.db
*.swp

thesp0nge

#!/usr/bin/python3
# 
# apt-security-check - paolo@codiceinsicuro.it
#
# A slightly hacked version of apt-check that takes care only about security
# packages that need an update.
#
# Tested on Ubuntu 16.04.5 LTS, 18.04.1 LTS

thesp0nge

#!/bin/bash

MYNAME=`basename $0`
QEMU=`which qemu-img`

if [ ! -x $QEMU ]; then
    echo "$MYNAME: qemu-img is not installed. Can't continue."
    exit -5
fi

thesp0nge

// Code used in https://codiceinsicuro.it/chicchi/keystore-non-solo-certificati/

import java.security.InvalidAlgorithmParameterException;
import java.security.InvalidKeyException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.CertificateException;