Ahmed Ezzat BitTheByte
🇵🇸
thom-s
/ dns_amplification.py
Last active
April 11, 2024 23:31
Better understanding DNS Amplification DDoS attacks through Python and Scapy.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Imports | |
| from scapy.all import * | |
| from pprint import pprint | |
| import operator | |
| # Parameters | |
| interface = "eth0" # Interface you want to use | |
| dns_source = "local-ip" # IP of that interface | |
| dns_destination = ["ip1","ip2","ip3"] # List of DNS Server IPs |
mslinn
/ decompile.bat
Last active
August 14, 2024 13:21
Decompile JVM class files using IntelliJ IDEA's embedded FernFlower decompiler
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| java -cp "C:\Program Files (x86)\JetBrains\IntelliJ IDEA 15.0.2\plugins\java-decompiler\lib\java-decompiler.jar" org.jetbrains.java.decompiler.main.decompiler.ConsoleDecompiler -dgs=true . src |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /* | |
| Pseudo code in HTTP.sys to understand flow related to MS15-034 | |
| All pseudo code are reversed from vulnerable HTTP.sys on Windows 7 SP1 x86 | |
| For anyone want to know what function are patched. | |
| Just open patched version and find all functions reference to RtlULongLongAdd(). | |
| */ |