Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
hash[i] = ((129 * message[i]) XOR message[i-1]) % 256def hashme(message):
return [(((129 * m) ^ (0 if i is 0 else message[i-1]))%256) for (i, m) in enumerate(message)]
def _gcd(a,b):
while b:
a, b = b, a % b
return abs(a)
def unhashme(digest):
msg = [0] * len(digest)
lastbyte = 0
for (i, ch) in enumerate(digest):
newchar = (ch ^ (lastbyte * 129))
if _gcd(ch, 256) is 1:
newbyte += 128
newbyte = newbyte % 256
msg[i] = newbyte
lastbyte = newbyte
return msg
The above 'unhashme' function works, but it feels inelegant. When run without the GCD calculation (and thus not offsetting the value by m/2 = 128), every other element seems to reverse correctly, but the others are off by 128. Multiplying by 19 will reverse the multiplication by 129 (modulo 256), but I'm not sure how/where to work it in. I feel like adding 128 here-and-there is hacky, or at best, missing the underlying intent. I'm going in circles between rings, cyclic groups, multiplicitive inverses, etc. Tamper data?
For web pentesting Burpsuite is hands down the best IMO.
"Software" engineer Margaret Hamilton with a pile of print-out results from simulations, circa 1969. (MIT Library).
Haven't use PDO myself. But afaik when with mysqli(-driver) you can communicate only with mysql databases, but with right PDO-driver you can use mysql, microsoft sql, postgresql, sqlite, etc. databases. So i think pdo's flexibility is one of it advantages. Correct me if i'm wrong.
#!/usr/bin/env python
"""
PyCracker by Khofo
<Disclaimer here>
"""
import os, random
CLS='clear' # change to 'cls' for Windows, or use os.platform
def check_ip(ip):
parts = [int(x) for x in ip.split('.')]
if len(parts) == 4:
if max(parts) <= 255 and min(parts) > 0:
return True
return False
def get_os():
supported = ["Windows", "Linux", "OSX"]
opt = None
error = None
while opt is None:
os.system(CLS)
if error:
print error
print(" Please define target computer's OS")
for (i,opsys) in enumerate(supported):
print(" %d) %s" % (i, opsys))
print(" q) Quit")
choice = raw_input(": ")
if choice is 'q':
quit()
try:
choice = int(choice)
if choice not in range(1,5):
error = "Invalid choice"
continue
opt = supported[choice]
except (ValueError, IndexError):
error = "Invalid choice"
return opt
def check_vulns(ip):
"""A bogus function to check for vulns."""
known_vulns = [
None, None, None,
'vuln A', None, 'vuln B',
None, 'vuln C', None, 'vuln D'
]
seed = 1
random.seed(seed)
return known_vulns[random.randint(0, len(known_vulns))]
def exploit_vulns(vuln):
print("Exploiting %s" % vuln)
return False
def scan_target(ip, opsys=None):
opsys = opsys if opsys else "Unknown"
print("Scanning target %s (OS: %s)" % (ip, opsys))
vuln = check_vulns(ip)
if vuln:
print(" Found vulnerablity: %s" % vuln)
if exploit_vulns(vuln):
print(" Exploit successful!")
else:
print(" Exploit failed!")
else:
print("No vulnerabilities found!")
def main():
opsys = get_os()
valid_ip = None
while valid_ip is None:
ip = raw_input("Target IP: ")
if not check_ip(ip):
print("Invalid IP address")
continue
valid_ip = ip
scan_target(ip, opsys)
print("kthanxbai")
if __name__ == "__main__":
main()
import random
random.seed(1)
for i in range(100):
print random.randint(1, 100)
<?php
// Log the json-encoded SERVER array for later parsing. This can also be had from access.log
error_log(json_encode($_SERVER));
if (isset($_GET['f'])) {
/* prevent path traversal */
$f = basename($_GET['f']);
/**
* Determine the picture by UserAgent
*/
$image = '';
if ($f == 'useragent.png') {
if (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'linux')) {
$image = 'linux.png';
} elseif (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'windows')) {
$image = 'windows.png';
} elseif (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'osx')) {
$image = 'osx.png';
}
/*
* You could then continue with the image manipulation functions
* to output text. e.g., timestamps, 'your IP is..' images, etc.
*/
/**
* Just read out the file
*/
if ($image && file_exists($image)) {
header('COntent-Type: image/png');
die(file_get_contents($image));
}
}
/**
* An example of aliasing an image to another site.
* The IP of your server will be visible in evilzone's logs
* each time someone views this page.
*/
if ($f == 'hacking.jpg' || $f = 'hacking.foo') {
header('Content-Type: image/png');
die(file_get_contents('https://evilzone.org/logo_02.png'));
}
/**
* You'll obviously need a database with info for this to work.
*/
if ($f == 'database.png') {
$stmt = $pdo->prepare('SELECT image_data, content_type FROM images WHERE image_name = :name');
$stmt->execute(array('name' => $f));
$row = $stmt->fetch();
header('Content-Type: ' . $row['content_type']);
die($row['image_data']);
}
/**
* Get from local filesystem
* 1) Don't trust user's file extension for Content-Type and do some
* long switch/case. Just read it from the source file.
*/
if ($f && file_exists($f)) {
$contentType = exif_imagetype($f);
header("Content-Type: {$contentType}");
die(file_get_contents($f));
}
}
/**
* Make it look like native 404 page
*/
header('HTTP/1.0 404 - Not Found');
$url = htmlentities($_SERVER['REQUEST_URI']);
$html=<<<EOF
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL {$url} was not found on this server.</p>
<hr>
<address>Apache/2.4.7 (Ubuntu) Server at {$SERVER['SERVER_NAME']} Port {$_SERVER['SERVER_PORT']}</address>
</body></html>
EOF;
die($html);
RewriteEngine On
# Redirect /<file>.<ext> to index.php?f=<file>.<ext> [NoCasesensitive, Last]
RewriteRule ([^\.]+)\.(png|jpg|gif)$ index.php?f=$1.$2 [NC,L]