Shards of Code

Shards of code and bits of ideas one might find interesting or useful.

C

The mother language.

  • grimcreeper.c - GrimCreeper is a piece of code we donated to our leet hax0r homies in Kenshoto as a vulnerable network service for their their Capture The Flag competition. It has one exploitable bug present, and several deceptively non-exploitable functions. Can you own it?

  • contempt_lulz.c - An early version of Lulz-Of-Contempt. Designed to crash the Java graphical rendering in Pierce's project 'Seeds of Contempt'. (LOL @ attacking other SophSec Member's code.) Only published because I haven't finished anything else worth posting recently.

Python

Sssssssss

  • joomlascan-not_as_ghey.py - A Multithreaded Joomla RFI Scanner. Taken from darkc0de.com and made into a semi-usable tool. It's not the 90s anymore. If you are writing a scanner/brute-forcer and it's not forking/threading, you're doing it wrong.

Ruby

Where's the hackers at?

  • aes_pipe.rb - A Ruby implementation of the aespipe utility. Useful if you don't have aespipe installed.

  • google_emails.rb - Scrapes Google Search for email addresses ending with a specified domain. Requires GScraper >=0.1.7.

  • ajax_search.rb - A simple Google AJAX Search API interface written in Ruby.

Javascript

alert("perfectly safe");

  • Link Rewrite - Catches the click event on all links and rewrites the href attribute to redirect the user to a specified link prefix. Requires jQuery.