Skip to content

Instantly share code, notes, and snippets.

View vrosnet's full-sized avatar

Antony Ingram vrosnet

View GitHub Profile
@vrosnet
vrosnet / 256color.pl
Created May 2, 2016 12:37 — forked from hSATAC/256color.pl
256color.pl
#!/usr/bin/perl
# Author: Todd Larason <jtl@molehill.org>
# $XFree86: xc/programs/xterm/vttests/256colors2.pl,v 1.2 2002/03/26 01:46:43 dickey Exp $
# use the resources for colors 0-15 - usually more-or-less a
# reproduction of the standard ANSI colors, but possibly more
# pleasing shades
# colors 16-231 are a 6x6x6 color cube
for ($red = 0; $red < 6; $red++) {
@vrosnet
vrosnet / gentoo.sh
Created May 15, 2016 05:39 — forked from georgemarshall/gentoo.sh
Gentoo vs Ubuntu
# /etc/bash/bashrc
#
# This file is sourced by all *interactive* bash shells on startup,
# including some apparently interactive shells such as scp and rcp
# that can't tolerate any output. So make sure this doesn't display
# anything or bad things will happen !
# Test for an interactive shell. There is no need to set anything
# past this point for scp and rcp, and it's important to refrain from
@vrosnet
vrosnet / find_r5a_key.py
Created June 2, 2016 07:34 — forked from hasherezade/find_r5a_key.py
Decoder for 7even-HONE$T ransomware - variant: 08a53eb5d54c6829cf6ea29bd61ea161
#!/usr/bin/python
# CC-BY: hasherezade
"""Finds R5A key for 7even-HONE$T ransomware - variant: 08a53eb5d54c6829cf6ea29bd61ea161"""
import argparse
import os
PREFIX = 'M'
SUFFIX = '*'
@vrosnet
vrosnet / tree.js
Created June 2, 2016 07:35 — forked from hasherezade/tree.js
Xmass Tree
// CC-BY: hasherezade (hasherezade.net)
function makeTree(height = 6)
{
var treeHtml="";
var width = 1;
var leaf = "###"
var snow = "-*-";
var snowC = 4;
@vrosnet
vrosnet / config.json
Created June 2, 2016 07:35 — forked from hasherezade/config.json
Cerber config
{
"blacklist": {
"countries": [
"am",
"az",
"by",
"ge",
"kg",
"kz",
"md",
@vrosnet
vrosnet / wchar_to_char.py
Created June 2, 2016 07:35 — forked from hasherezade/wchar_to_char.py
Converts wide string to string
#!/usr/bin/python
# CC-BY: hasherezade
"""Convert wchar string to char string"""
import argparse
def convert(data):
maxlen = len(data)
decoded = bytearray()
i = 0
@vrosnet
vrosnet / petya_skull.txt
Created June 2, 2016 07:36 — forked from hasherezade/petya_skull.txt
Petya ransomware's ASCII art (skull)
uu$$$$$$$$$$$uu
uu$$$$$$$$$$$$$$$$$uu
u$$$$$$$$$$$$$$$$$$$$$u
u$$$$$$$$$$$$$$$$$$$$$$$u
u$$$$$$$$$$$$$$$$$$$$$$$$$u
u$$$$$$* *$$$* *$$$$$$u
*$$$$* u$u $$$$*
$$$u u$u u$$$
$$$u u$$$u u$$$
*$$$$uu$$$ $$$uu$$$$*
@vrosnet
vrosnet / makecd.sh
Created June 2, 2016 07:36 — forked from hasherezade/makecd.sh
Script to make a bootable CD with your own bootloader
# requires: xorriso
# copy your bootloader as: cdcontent/boot/loader.sys
prog="xorriso -as mkisofs"
$prog -R -J -c boot/bootcat \
-b boot/loader.sys -no-emul-boot -boot-load-size 1 \
-o ./bootable.iso ./cdcontent
@vrosnet
vrosnet / petya_boot.asm
Created June 2, 2016 07:36 — forked from hasherezade/petya_boot.asm
Bootloader detecting PETYA Ransomware and recovering Stage1 key
; Bootloader detecting PETYA Ransomware and recovering Stage1 key
;
; CC-BY: hasherezade
;
; compile:
; nasm boot.asm -f bin -o boot.bin
;
; Copy to flash disk (as root)
; example if the flash disk is /dev/sdb:
; dd if=boot.bin of=/dev/sdb bs=512 count=1
@vrosnet
vrosnet / 12c8c50e996240aaa42d593701d3cae2.json
Created June 2, 2016 07:36 — forked from hasherezade/12c8c50e996240aaa42d593701d3cae2.json
Cerber ransomware configs (md5 of sample in config name)
{
"blacklist": {
"countries": [
"am",
"az",
"by",
"ge",
"kg",
"kz",
"md",