mirror of
https://github.com/autistic-symposium/sec-pentesting-toolkit.git
synced 2025-05-09 02:04:59 -04:00
some small fixes
This commit is contained in:
parent
4f8d5148af
commit
16757b10ac
412 changed files with 139509 additions and 0 deletions
9
Useful_Scripts/Facebook/README.md
Normal file
9
Useful_Scripts/Facebook/README.md
Normal file
|
@ -0,0 +1,9 @@
|
|||
Facebook Tricks
|
||||
===============
|
||||
|
||||
* Delete all your post and likes ("We want privacy").
|
||||
|
||||
* Script to say thank you for all bday wishes.
|
||||
|
||||
|
||||
PS: I don't use facebook (ew!) but the last time I tested it worked...
|
60
Useful_Scripts/Facebook/bday_thanks.py
Normal file
60
Useful_Scripts/Facebook/bday_thanks.py
Normal file
|
@ -0,0 +1,60 @@
|
|||
#!/usr/bin/env python
|
||||
|
||||
#Dont forget to install the facebook python SDK
|
||||
|
||||
|
||||
import facebook
|
||||
import json
|
||||
import os
|
||||
import random
|
||||
from time import sleep
|
||||
|
||||
FB_ACCESS_TOKEN = # you need to set this
|
||||
|
||||
access_token = os.getenv('FB_ACCESS_TOKEN')
|
||||
|
||||
|
||||
# Define message
|
||||
thankyou_messages = [
|
||||
'Thank you!',
|
||||
'Thanks!',
|
||||
'Thank you! I appreciate it!!!'
|
||||
]
|
||||
|
||||
# "birthday" query
|
||||
birthday_fql = ("SELECT post_id, actor_id, target_id, created_time, message, comments "
|
||||
"FROM stream "
|
||||
"WHERE source_id = me() "
|
||||
"AND filter_key = 'others' "
|
||||
"AND created_time > 1391346000 "
|
||||
"AND actor_id != me() "
|
||||
"AND comments.count = 0 "
|
||||
"AND comments.can_post = 1 "
|
||||
"AND (strpos(message, 'birthday') >= 0 "
|
||||
"OR strpos(message, 'Birthday') >= 0 "
|
||||
"OR strpos(message, 'happy') >= 0 "
|
||||
"OR strpos(message, 'Happy') >= 0) "
|
||||
"LIMIT 500")
|
||||
|
||||
# new GraphAPI instance with our access token
|
||||
graph = facebook.GraphAPI(access_token)
|
||||
|
||||
# birthday posts using our FQL query
|
||||
query_result = graph.get_object('fql', q=birthday_fql)
|
||||
|
||||
# data from the response
|
||||
birthday_posts = query_result['data']
|
||||
|
||||
# how many posts
|
||||
print'Query returned: ', len(birthday_posts)
|
||||
|
||||
# loop through returned posts
|
||||
for post in birthday_posts:
|
||||
post_id = post['post_id']
|
||||
graph.put_object(post_id, 'likes')
|
||||
rand_message = random.choice(thankyou_messages)
|
||||
graph.put_object(post_id, 'comments', message=rand_message)
|
||||
print 'The like/comment should have posted for post', post_id
|
||||
sleep(0.1) # tenth of a second
|
||||
|
||||
print('Done!'')
|
|
@ -0,0 +1,11 @@
|
|||
# run on:
|
||||
#https://www.facebook.com/your-username/allactivity?privacy_source=activity_log&log_filter=cluster_116
|
||||
|
||||
$("html, body").animate({ scrollTop: $(document).height() }, "slow");
|
||||
setInterval (function () {
|
||||
var last = $("._6a._6b.uiPopover.rfloat a span").last().click();
|
||||
$("span:contains(Delete):visible").click();
|
||||
var post = last.closest("[data-ft]");
|
||||
post.prev().remove();
|
||||
post.remove();
|
||||
}, 400);
|
|
@ -0,0 +1,11 @@
|
|||
# run on:
|
||||
#https://www.facebook.com/your-username/allactivity?privacy_source=activity_log&log_filter=likes
|
||||
|
||||
$("html, body").animate({ scrollTop: $(document).height() }, "slow");
|
||||
setInterval(function () {
|
||||
var last = $("._6a._6b.uiPopover.rfloat a span").last().click();
|
||||
$("span:contains(Unlike):visible").click();
|
||||
var post = last.closest("[data-ft]");
|
||||
post.prev().remove();
|
||||
post.remove();
|
||||
}, 400);
|
|
@ -0,0 +1,9 @@
|
|||
# run on your account
|
||||
var i = setInterval(function () {
|
||||
$ul = $("#wmMasterViewThreadlist")
|
||||
if (!$ul.find("li").length) return clearInterval(i);
|
||||
$ul.find("li").last().find("span").click()
|
||||
$("button:contains('Actions')").click()
|
||||
$("span:contains('Delete Conversation...')").click()
|
||||
$("input[value='Delete Conversation']").click()
|
||||
}, 500);
|
|
@ -0,0 +1,12 @@
|
|||
# run on:
|
||||
# https://www.facebook.com/your-username/allactivity?privacy_source=activity_log&log_filter=cluster_11
|
||||
|
||||
$("html, body").animate({ scrollTop: $(document).height() }, "slow");
|
||||
setInterval (function () {
|
||||
var last = $("._6a._6b.uiPopover.rfloat a span").last().click();
|
||||
$("span:contains(Delete):visible").click();
|
||||
setTimeout(function () {
|
||||
$("button:contains(Delete Post):visible").click();
|
||||
last.closest("table").remove();
|
||||
}, 1000);
|
||||
}, 7000);
|
25
Useful_Scripts/find_word_inside_text.py
Normal file
25
Useful_Scripts/find_word_inside_text.py
Normal file
|
@ -0,0 +1,25 @@
|
|||
#!/usr/bin/env python
|
||||
|
||||
__author__ = "bt3gl"
|
||||
|
||||
# given two text, find the difference between them
|
||||
# useful for ciphers, for example vinegere, when
|
||||
# everything is all together
|
||||
|
||||
def find_word(A, B):
|
||||
FOUND = False
|
||||
for i in range(min(len(A), len(B))):
|
||||
if A[i] != B[i] and not FOUND:
|
||||
index = i
|
||||
FOUND = True
|
||||
return index
|
||||
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
A = 'THISTIMEWEWILLGIVEYOUMOREPLAINTEXTTOWORKWITHYOUWILLPROBABLYFINDTHATHAVINGEXTRACONTENTTHATISASCIIMAKESTHISONEMORESOLVABLEITWOULDBESOLVABLEWITHOUTTHATBUTWEWILLMAKESURETOGIVELOTSOFTEXTJUSTTOMAKESURETHATWECANHANDLEITIWONDERHOWMUCHWILLBEREQUIREDLETSPUTTHEMAGICPHRASEFORTHENEXTLEVELINTHEMIDDLERIGHTHERENOTHINGTRICKYOKNOWMORETEXTTOMAKESURETHATITISSOLVABLEISHOULDPROBABLYJUSTPUTINSOMENURSERYRHYMEORSOMETHINGMARYHADALITTLELAMBLITTLELAMBLITTLELAMBMARYHADALITTLELAMBWHOSEFLEEZEWASWHITEASSNOWIDONTWANTTOMAKETHISHARDERTHANITNEEDSTOBEIFYOUVESOLVEDALOTOFSIMPLECRYPTOCHALLENGESYOUPROBABLYALREADYHAVETHECODEANDWILLBREEZERIGHTTHROUGHITIFITHELPSMOSTOFTHEPLAINTEXTISSTATICATEACHOFTHELEVELSIMNOTAMASOCHISTTHEFUNNYTHINGISTHATDEPENDINGONWHICHRANDOMKEYYOUGETTHATPOEMMIGHTBEEXACTLYTHERIGHTOFFSETTOSUCCESSFULLYMOUNTANATTACKWELLSEELITTLEBITMORELITTLEBITMORETHERE'
|
||||
B = 'THISTIMEWEWILLGIVEYOUMOREPLAINTEXTTOWORKWITHYOUWILLPROBABLYFINDTHATHAVINGEXTRACONTENTTHATISASCIIMAKESTHISONEMORESOLVABLEITWOULDBESOLVABLEWITHOUTTHATBUTWEWILLMAKESURETOGIVELOTSOFTEXTJUSTTOMAKESURETHATWECANHANDLEITIWONDERHOWMUCHWILLBEREQUIREDLETSPUTTHEMAGICPHRASEFORTHENEXTLEVELINTHEMIDDLERIGHTHEREBLAHLAHOKNOWMORETEXTTOMAKESURETHATITISSOLVABLEISHOULDPROBABLYJUSTPUTINSOMENURSERYRHYMEORSOMETHINGMARYHADALITTLELAMBLITTLELAMBLITTLELAMBMARYHADALITTLELAMBWHOSEFLEEZEWASWHITEASSNOWIDONTWANTTOMAKETHISHARDERTHANITNEEDSTOBEIFYOUVESOLVEDALOTOFSIMPLECRYPTOCHALLENGESYOUPROBABLYALREADYHAVETHECODEANDWILLBREEZERIGHTTHROUGHITIFITHELPSMOSTOFTHEPLAINTEXTISSTATICATEACHOFTHELEVELSIMNOTAMASOCHISTTHEFUNNYTHINGISTHATDEPENDINGONWHICHRANDOMKEYYOUGETTHATPOEMMIGHTBEEXACTLYTHERIGHTOFFSETTOSUCCESSFULLYMOUNTANATTACKWELLSEELITTLEBITMORELITTLEBITMORETHERE'
|
||||
|
||||
index = find_word(A, B)
|
||||
print A[index: index + 15]
|
||||
print B[index: index + 15]
|
31
Useful_Scripts/netcat.py
Normal file
31
Useful_Scripts/netcat.py
Normal file
|
@ -0,0 +1,31 @@
|
|||
#!/usr/bin/env python
|
||||
|
||||
|
||||
__author__ = "bt3gl"
|
||||
|
||||
|
||||
import socket
|
||||
|
||||
|
||||
def netcat(hostname, port, content):
|
||||
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||
s.connect((hostname, port))
|
||||
s.sendall(content)
|
||||
s.shutdown(socket.SHUT_WR)
|
||||
adata = []
|
||||
while 1:
|
||||
data = s.recv(1024)
|
||||
if data == "":
|
||||
break
|
||||
adata.append(data)
|
||||
s.close()
|
||||
return adata
|
||||
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
|
||||
PORT = 12345
|
||||
HOSTNAME = '54.209.5.48'
|
||||
message = netcat(HOSTNAME, PORT, '')[1]
|
||||
print message
|
72
Useful_Scripts/reading_socket.py
Normal file
72
Useful_Scripts/reading_socket.py
Normal file
|
@ -0,0 +1,72 @@
|
|||
#!/usr/bin/env python
|
||||
|
||||
|
||||
__author__ = "bt3gl"
|
||||
|
||||
|
||||
import os
|
||||
import socket
|
||||
import select
|
||||
from time import sleep
|
||||
import binascii
|
||||
from subprocess import Popen,STDOUT,PIPE
|
||||
import os
|
||||
from math import *
|
||||
import string
|
||||
|
||||
|
||||
|
||||
def next_line(stdout):
|
||||
# read inputs in lines
|
||||
line = ""
|
||||
while True:
|
||||
r = stdout.read(1)
|
||||
if r == '\n':
|
||||
break
|
||||
line += r
|
||||
return line
|
||||
|
||||
|
||||
def write(stdin,val):
|
||||
# write outputs
|
||||
stdin.write(val)
|
||||
|
||||
|
||||
def nl():
|
||||
# shorter next line for iteration
|
||||
return next_line(p.stdout)
|
||||
|
||||
|
||||
def wr(val):
|
||||
# shorter write for iteration
|
||||
write(p.stdin,val)
|
||||
|
||||
|
||||
def ntext():
|
||||
line = ""
|
||||
while "psifer text:" not in line:
|
||||
line = nl()
|
||||
return line[len("psifer text:") + 1:]
|
||||
|
||||
|
||||
|
||||
|
||||
def main():
|
||||
SHELL_COMMAND = "nc 54.209.5.48 12345"
|
||||
|
||||
p = Popen(SHELL_COMMAND, shell=True, cwd="./", stdin=PIPE,
|
||||
stdout=PIPE, stderr=STDOUT,close_fds=True)
|
||||
|
||||
|
||||
while True:
|
||||
text = ntext()
|
||||
text += " -> just an example"
|
||||
wr(ans + '\n')
|
||||
|
||||
ret = p.wait()
|
||||
print "Return code: %d" % ret
|
||||
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
22
Useful_Scripts/reading_telnet.py
Normal file
22
Useful_Scripts/reading_telnet.py
Normal file
|
@ -0,0 +1,22 @@
|
|||
#!/usr/bin/env python
|
||||
|
||||
|
||||
__author__ = "bt3gl"
|
||||
|
||||
|
||||
from telnetlib import Telnet
|
||||
|
||||
|
||||
# examples of telnet connections
|
||||
PORT = 12345
|
||||
HOST = '54.209.5.48'
|
||||
|
||||
# creating connection
|
||||
tn = Telnet(HOST ,PORT)
|
||||
|
||||
# reading input
|
||||
msg_in2 = tn.read_all().dec_msg()
|
||||
tn.read_until(b'psifer text: ')
|
||||
|
||||
# writing outputs
|
||||
tn.write(msg.encode() + b'\n')
|
5
Useful_Scripts/untar_bz2_script.sh
Executable file
5
Useful_Scripts/untar_bz2_script.sh
Executable file
|
@ -0,0 +1,5 @@
|
|||
#!/bin/sh
|
||||
for file in *.tar.bz2;
|
||||
do mkdir -p "${file}-extracted";
|
||||
tar --directory "${file}-extracted" -xjf "${file}";
|
||||
done
|
18
Useful_Scripts/xor_bytes.py
Normal file
18
Useful_Scripts/xor_bytes.py
Normal file
|
@ -0,0 +1,18 @@
|
|||
#!/usr/bin/env python
|
||||
|
||||
|
||||
__author__ = "bt3gl"
|
||||
|
||||
|
||||
def xor_str(str1, str2):
|
||||
flag = ""
|
||||
for i in range(len(str1)):
|
||||
flag += (chr(int(str1[i], 16) ^ int(str2[i], 16)))
|
||||
print flag
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
kTXt = ''.join('28 36 38 2C 10 03 04 14 0A 15 08 14 02 07 08 18 0D 00 61 04 16 11 0B 12 00 07 61 03 0C 73 02 1F 02 1D 06 12 63 04 08 03 0B 1C 14 03 63 1D 0E 03 0A 10 04 2A 61 8F AC C1 00 00 00 00').split()
|
||||
xORk = ''.join('43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57 43 53 41 57').split()
|
||||
|
||||
xor_str(kTXt, xORk)
|
25
Useful_Scripts/xor_imag.go
Normal file
25
Useful_Scripts/xor_imag.go
Normal file
|
@ -0,0 +1,25 @@
|
|||
package main
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"os"
|
||||
)
|
||||
|
||||
func main() {
|
||||
file, err := os.Open("ataylor.png")
|
||||
if err != nil {
|
||||
fmt.Println(err)
|
||||
return
|
||||
}
|
||||
info, _ := os.Stat("ataylor.png")
|
||||
input := make([]byte, info.Size())
|
||||
out := make([]byte, len(input))
|
||||
file.Read(input)
|
||||
|
||||
key := [...]byte{0x43, 0x53, 0x41, 0x57} // CSAW
|
||||
for i := 0; i < len(input); i++ {
|
||||
out[i] = input[i] ^ key[i%len(key)]
|
||||
}
|
||||
|
||||
fmt.Println(string(out))
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue