Standard escape codes are prefixed with Escape:
- Ctrl-Key:
^[ - Octal:
\033 - Unicode:
\u001b - Hexadecimal:
\x1B - Decimal:
27
| #!/usr/bin/env bash | |
| ## php2shell-triage.sh | |
| # Read-only triage for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). | |
| # It checks whether your PHP build was in the vulnerable range and looks for | |
| # the few signals an exploitation attempt tends to leave behind. | |
| # | |
| # It never changes anything on the system. It only reads logs and lists files. | |
| # Run as root (or via sudo) so it can read FPM and auth logs: | |
| # sudo bash php2shell-triage.sh [WEBROOT] | |
| # |
| ```bash | |
| #!/bin/bash | |
| # Script to install and initialize IPFS on WSL, and example usage of NFT.Storage API | |
| set -e | |
| echo "Step 1: Downloading IPFS v0.12.2..." | |
| wget https://dist.ipfs.io/go-ipfs/v0.12.2/go-ipfs_v0.12.2_linux-amd64.tar.gz | |
| echo "Step 2: Extracting IPFS archive..." |
| Hi All! | |
| I've recently launched a tool that wraps many of the commands here with a user interface. This desktop application is currently available for macOS. There's a roadmap outlining planned features for the near future. | |
| Feel free to request any features you'd like to see, and I'll prioritize them accordingly. | |
| One of the most important aspects of this application is that every command executed behind the scenes is displayed in a special log section. This allows you to see exactly what’s happening and learn from it. | |
| Here's the link to the repository: https://github.com/Pulimet/ADBugger | |
| App Description: | |
| ADBugger is a desktop tool designed for debugging and QA of Android devices and emulators. It simplifies testing, debugging, and performance analysis by offering device management, automated testing, log analysis, and remote control capabilities. This ensures smooth app performance across various setups. |
| import os | |
| import time | |
| while True: | |
| try: | |
| os.mkdir('F:\\A') | |
| print("Directory 'A' created.") | |
| except FileExistsError: | |
| print("Directory 'A' already exists.") | |
| /* | |
| Chippy1337 and @packetprophet present: | |
| LizardStresser rekt | |
| This is the cross compiled bot | |
| LICENSE AGREEMENT: | |
| If you lulz'd, you must sent BTC to | |
| 1N4MxbXsooU9aMU41NPrSbgZKpJjtwsnar | |
| Death to skids |
| streamtypedÅËÑ@ÑÑÑNSMutableDictionaryÑÑNSDictionaryÑÑNSObjectÖÑiíÑÑÑNSStringïÑ+bagÜíÑÑÑ | |
| NSMutableDataÑÑNSDataïñÇXƒÑ [115800c]<?xml version="1.0" encoding="UTF-8" standalone="no"?> | |
| <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> | |
| <plist version="1.0"> | |
| <dict> | |
| <key>search</key><string>https://search.itunes.apple.com/WebObjects/MZSearch.woa/wa/search</string> | |
| <key>advancedSearch</key><string>https://search.itunes.apple.com/WebObjects/MZSearch.woa/wa/advancedSearch?cc=us</string> | |
| <key>searchHints</key><string>https://search.itunes.apple.com/WebObjects/MZSearchHints.woa/wa/hints</string> | |
| <key>searchApi</key><string>https://search.itunes.apple.com/WebObjects/MZSearch.woa/wa/searchApi</string> | |
| <key>p2-book-search</key><string>https://search.itunes.apple.com/WebObjects/MZSearch.woa/wa/search?media=ebook</string> |
You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228
This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders
sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <meta charset="UTF-8"> | |
| <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP --> | |
| <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'"> | |
| <link href="./styles.css" rel="stylesheet"> | |
| <title>Hello World!</title> | |
| </head> | |
| <body> |