wofeiwo

<?php
// 
//  port_reuse.php
//  
//  Created by wofeiwo <wofeiwo@80sec.com> on 2011-08-27.
//  Copyright 2011 80sec. All rights reserved.
//  Reuse Apache 80 port to spawn a interactive shell. Bypass the firewall.
//  Note: Only available on PHP >= 5.3.6 with mod_php on apache.
//  Usage: 1. Put the script on htdocs.
//         2. Get interactive shell:

wofeiwo

def http_request(url, 
                data = {}, 
                header = {
                        # 默认伪装成IE9
                        "User-Agent"   : "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/4.0)",
                        "Connection"   : "Close",
                        # 避免proxy cache页面
                        "Pragma"       : "no-cache",
                        "Cache-Control": "no-cache, max-age=0, must-revalidate"
                        }):

wofeiwo

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
" => Encoding
""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
set encoding=utf-8
set fileencodings=ucs-bom,utf-8,gbk,euc-jp,euc-kr,big5,gb18030,latin1

function! s:CheckGBLocale(locale_var)
  let locale_var=toupper(a:locale_var)
  if (match(locale_var, '.GBK$') != -1 || match(locale_var, '.GB18030$') != -1 || match(locale_var, '.GB2312$') != -1)
    return 1

wofeiwo

// Most browsers limit cookies to 4k characters, so we need multiple
function setCookies (good) {
    // Construct string for cookie value
    var str = "";
    for (var i=0; i< 819; i++) {
        str += "x";
    }
    // Set cookies
    for (i = 0; i < 10; i++) {
        // Expire evil cookie

wofeiwo

#!/usr/bin/env python
#coding=utf-8

from xml.dom import minidom as md
from datetime import datetime
import re
from urllib2 import urlopen
from os.path import basename
from socket import setdefaulttimeout

wofeiwo

local http = require "http"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local vulns = require "vulns"

description = [[
Detects Ruby on Rails installations that are vulnerable to CVE-2013-0156, This critical vulnerability allows unauthenticated attackers to execute code remotely.
This is the nmap/lua port of the metasploit scanner module from hd moore

wofeiwo

package main

import (
    "log"
    "net"
    "os"
    "os/signal"
    "sync"
    "syscall"
    "time"

wofeiwo

package main

import (
   "io"
   "os"
   "bufio"
   "bytes"
   "fmt"
   "strings"
)

wofeiwo

def hexstr(s):
    """    
    turns ABCD
    into 
    41424344
    """
    tmp=[]
    for c in s:
        tmp+=["%2.2x"%ord(c)]
    return "".join(tmp)

wofeiwo

// Copyright 2012 Junqing Tan <ivan@mysqlab.net> and The Go Authors
// Use of this source code is governed by a BSD-style
// Part of source code is from Go fcgi package

// Fix bug: Can't recive more than 1 record untill FCGI_END_REQUEST 2012-09-15
// By: wofeiwo

package fcgiclient

import (