Skip to content

Instantly share code, notes, and snippets.

View z0mbiehunt3r's full-sized avatar

Alejandro Nolla z0mbiehunt3r

59 followers · 12 following
View GitHub Profile
@z0mbiehunt3r
z0mbiehunt3r / ssyn.c
Created June 16, 2013 00:42
Spoofed SYN by eKKiM - ssyn.c
/*
Spoofed SYN by eKKiM
Educational purpose only please.
Compile with
gcc syn.c -pthread
*/
#include <stdio.h>
#include <stdlib.h>
#include <netinet/tcp.h>
#include <netinet/ip.h>
@z0mbiehunt3r
z0mbiehunt3r / An almost invisible ssh connection
Created July 25, 2013 14:33
An almost invisible ssh connection (no who, no IP logged) (https://twitter.com/brutelogic/status/340203203389960193)
ssh -o UserKnownHostsFile=/dev/null -T user@host /bin/bash -i
@z0mbiehunt3r
z0mbiehunt3r / caselessDictionary.py
Created September 2, 2013 18:27 — forked from babakness/caselessDictionary.py
class CaselessDictionary(dict):
"""Dictionary that enables case insensitive searching while preserving case sensitivity
when keys are listed, ie, via keys() or items() methods.
Works by storing a lowercase version of the key as the new key and stores the original key-value
pair as the key's value (values become dictionaries)."""
def __init__(self, initval={}):
if isinstance(initval, dict):
for key, value in initval.iteritems():
@z0mbiehunt3r
z0mbiehunt3r / gist:9101685
Created February 19, 2014 21:11
Compiling firewalk in Debian/ubuntu
apt-get install libpcap-dev libdumbnet-dev -y
sed -i 's/-ldnet/-ldumbnet/g' configure
sed -i 's/#include <dnet.h>/#include <dumbnet.h>/g' include/firewalk.h
sed -i 's//* empty *//continue;/g' src/firewalk.c
./configure -build=i386
make
@z0mbiehunt3r
z0mbiehunt3r / hping3_multiple_icmp
Created February 20, 2014 00:45
Audit multiple ICMP codes
for i in {0..255}; do echo "ICMP $i" ;hping3 IP --icmp -K "$i" --force-icmp -c 3 -V; echo""; done;
@z0mbiehunt3r
z0mbiehunt3r / gist:9131011
Created February 21, 2014 09:03
iptraf error "Error opening IP filter data file"
rm /var/lib/iptraf/savedfilters.dat
@z0mbiehunt3r
z0mbiehunt3r / targa3.c
Created March 4, 2014 11:53
targa3 is a DoS exploit that sends random IP packets with parameters known to cause crashes on various machines, and can be used to determine if a systems IP stack is really stable and crash-proof under unexpected conditions.
/*
* targa3 - 1999 (c) Mixter <mixter@newyorkoffice.com>
*
* IP stack penetration tool / 'exploit generator'
* Sends combinations of uncommon IP packets to hosts
* to generate attacks using invalid fragmentation, protocol,
* packet size, header values, options, offsets, tcp segments,
* routing flags, and other unknown/unexpected packet values.
* Useful for testing IP stacks, routers, firewalls, NIDS,
* etc. for stability and reactions to unexpected packets.
@z0mbiehunt3r
z0mbiehunt3r / akamai_debug_headers.txt
Created May 4, 2014 16:07 — forked from fabrizioc1/akamai_debug_headers.txt
Pragma: akamai-x-cache-on, akamai-x-cache-remote-on, akamai-x-check-cacheable, akamai-x-get-cache-key, akamai-x-get-extracted-values, akamai-x-get-nonces, akamai-x-get-ssl-client-session-id, akamai-x-get-true-cache-key, akamai-x-serial-no
@z0mbiehunt3r
z0mbiehunt3r / gist:8eb91310a5c088f19ddf
Created May 9, 2014 13:08 — forked from jimbojsb/gist:1630790

Step 0:

Get Homebrew installed on your mac if you don't already have it

Step 1:

Install highlight. "brew install highlight". (This brings down Lua and Boost as well)

Step 2:

@z0mbiehunt3r
z0mbiehunt3r / bang.c
Created May 17, 2014 13:28
TCP SYN Denial of Service Exploit (bang.c) (amp.)
/*
* BANG.C Coded by Sorcerer of DALnet
*
* FUCKZ to: etech, blazin, udp, hybrid and kdl
* PROPZ : skrilla, thanks for all your help with JUNO-Z and especially this code :)
* --------------------------------
* REDIRECTION DOS FINALLY DISTRIBUTED !!!!!!
*
* This is POC and demonstrates a new method of DoS. The idea
* behind it is that the attacker generates connection requests