Moar structure.

pmquang · Aug 4, 2015 · 232ce76 · 232ce76
1 parent 103a049
commit 232ce76
Show file tree

Hide file tree

Showing 42 changed files with 140 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1 @@
+.DS_Store
diff --git a/Discovery/Web_Content/WebServices/README b/Discovery/Web_Content/WebServices/README
@@ -0,0 +1 @@
+This directory will contain list information that will be helpful in attacking both SOAP and REST-based web services.
diff --git a/Discovery/Web_Content/WebServices/SOAP_functions.txt b/Discovery/Web_Content/WebServices/SOAP_functions.txt
@@ -0,0 +1,3 @@
+GetAccount
+GetUser
+GetCCN
diff --git a/Pattern_Matching/README b/Pattern_Matching/README
@@ -0,0 +1 @@
+The GrepStrings directory will hold various lists that can be passed to grep when looking for intersting content within filesystems or source code.
diff --git a/Pattern_Matching/basic_grepstrings.txt b/Pattern_Matching/basic_grepstrings.txt
@@ -0,0 +1,14 @@
+password
+user
+username
+select
+update
+delete
+ssn
+dob
+ccn
+passwd
+pass
+administrator
+secret
+key
diff --git a/Pattern_Matching/malicious.txt b/Pattern_Matching/malicious.txt
@@ -0,0 +1,94 @@
+# strings for finding backdoor shells, rootkits, botnets, and exploitable functions
+# grep -Rn "shell *(" /var/www
+
+passthru
+shell_exec
+system
+phpinfo
+base64_decode
+chmod
+mkdir
+fopen
+fclose
+readfile
+php_uname
+eval
+edoced_46esab
+popen
+include
+create_function
+mysql_execute
+php_uname
+proc_open
+pcntl_exec
+``
+include_once
+require
+require_once
+posix_mkfifo
+posix_getlogin
+posix_ttyname
+getenv
+get_current_user
+proc_get_status
+get_cfg_var
+disk_free_space
+disk_total_space
+diskfreespace
+getcwd
+getlastmo
+getmygid
+getmyinode
+getmypid
+getmyuid
+assert
+extract
+parse_str
+putenv
+ini_set
+pfsockopen
+fsockopen
+apache_child_terminate
+posix_kill
+posix_setpgid
+posix_setsid
+posix_setuid
+tmpfile
+bzopen
+gzopen
+chgrp
+chown
+copy
+file_put_contents
+lchgrp
+lchown
+link
+mkdir
+move_uploaded_file
+symlink
+tempnam
+imagecreatefromgif
+imagecreatefromjpeg
+imagecreatefrompng
+imagecreatefromwbmp
+imagecreatefromxbm
+imagecreatefromxpm
+ftp_put
+ftp_nb_put
+exif_read_data
+read_exif_data
+exif_thumbnail
+exif_imagetype
+hash_file
+hash_hmac_file
+hash_update_file
+md5_file
+sha1_file
+highlight_file
+show_source
+php_strip_whitespace
+get_meta_tags
+str_repeat
+unserialize
+register_tick_function
+register_shutdown_function
diff --git a/Pattern_Matching/pcap_strings.txt b/Pattern_Matching/pcap_strings.txt
@@ -0,0 +1,13 @@
+username
+SSN
+DOB
+password
+uname
+encryption-key
+encryptionkey
+secretkey
+secret_key
+secret-key
+aeskey
+passphrase
+wombat
diff --git a/Pattern_Matching/thickclient_basic_.txt b/Pattern_Matching/thickclient_basic_.txt
@@ -0,0 +1,13 @@
+password
+select
+username
+social
+ssn
+dob
+DOB
+Password
+security
+protected
+SSN
+update
+delete
diff --git a/Payloads/Backdoors/FUZZDB_Simple.php → Payloads/FUZZDB_Simple.php b/Payloads/Backdoors/FUZZDB_Simple.php → Payloads/FUZZDB_Simple.php
diff --git a/Payloads/Backdoors/FUZZDB_Up.php → Payloads/FUZZDB_Up.php b/Payloads/Backdoors/FUZZDB_Up.php → Payloads/FUZZDB_Up.php
diff --git a/Payloads/Backdoors/FUZZDB_cmd.jsp → Payloads/FUZZDB_cmd.jsp b/Payloads/Backdoors/FUZZDB_cmd.jsp → Payloads/FUZZDB_cmd.jsp
diff --git a/Payloads/Backdoors/FUZZDB_cmd.php → Payloads/FUZZDB_cmd.php b/Payloads/Backdoors/FUZZDB_cmd.php → Payloads/FUZZDB_cmd.php
diff --git a/Payloads/Backdoors/FUZZDB_cmd.sh → Payloads/FUZZDB_cmd.sh b/Payloads/Backdoors/FUZZDB_cmd.sh → Payloads/FUZZDB_cmd.sh
diff --git a/Payloads/Backdoors/FUZZDB_cmdasp.aspx → Payloads/FUZZDB_cmdasp.aspx b/Payloads/Backdoors/FUZZDB_cmdasp.aspx → Payloads/FUZZDB_cmdasp.aspx
diff --git a/Payloads/Backdoors/FUZZDB_jsp-reverse.jsp → Payloads/FUZZDB_jsp-reverse.jsp b/Payloads/Backdoors/FUZZDB_jsp-reverse.jsp → Payloads/FUZZDB_jsp-reverse.jsp
diff --git a/Payloads/Backdoors/FUZZDB_list.jsp → Payloads/FUZZDB_list.jsp b/Payloads/Backdoors/FUZZDB_list.jsp → Payloads/FUZZDB_list.jsp
diff --git a/Payloads/Backdoors/FUZZDB_list.php → Payloads/FUZZDB_list.php b/Payloads/Backdoors/FUZZDB_list.php → Payloads/FUZZDB_list.php
diff --git a/Payloads/Backdoors/FUZZDB_list.sh → Payloads/FUZZDB_list.sh b/Payloads/Backdoors/FUZZDB_list.sh → Payloads/FUZZDB_list.sh
diff --git a/Payloads/Backdoors/FUZZDB_nc.exe → Payloads/FUZZDB_nc.exe b/Payloads/Backdoors/FUZZDB_nc.exe → Payloads/FUZZDB_nc.exe
diff --git a/Payloads/Backdoors/FUZZDB_php-backdoor.php → Payloads/FUZZDB_php-backdoor.php b/Payloads/Backdoors/FUZZDB_php-backdoor.php → Payloads/FUZZDB_php-backdoor.php
diff --git a/Payloads/Backdoors/FUZZDB_up.sh → Payloads/FUZZDB_up.sh b/Payloads/Backdoors/FUZZDB_up.sh → Payloads/FUZZDB_up.sh
diff --git a/Payloads/Backdoors/laudanum-0.8/CREDITS → Payloads/laudanum-0.8/CREDITS b/Payloads/Backdoors/laudanum-0.8/CREDITS → Payloads/laudanum-0.8/CREDITS
diff --git a/Payloads/Backdoors/laudanum-0.8/GPL → Payloads/laudanum-0.8/GPL b/Payloads/Backdoors/laudanum-0.8/GPL → Payloads/laudanum-0.8/GPL
diff --git a/Payloads/Backdoors/laudanum-0.8/README → Payloads/laudanum-0.8/README b/Payloads/Backdoors/laudanum-0.8/README → Payloads/laudanum-0.8/README
diff --git a/Payloads/Backdoors/laudanum-0.8/asp/dns.asp → Payloads/laudanum-0.8/asp/dns.asp b/Payloads/Backdoors/laudanum-0.8/asp/dns.asp → Payloads/laudanum-0.8/asp/dns.asp
diff --git a/Payloads/Backdoors/laudanum-0.8/asp/file.asp → Payloads/laudanum-0.8/asp/file.asp b/Payloads/Backdoors/laudanum-0.8/asp/file.asp → Payloads/laudanum-0.8/asp/file.asp
diff --git a/...oads/Backdoors/laudanum-0.8/asp/proxy.asp → Payloads/laudanum-0.8/asp/proxy.asp b/...oads/Backdoors/laudanum-0.8/asp/proxy.asp → Payloads/laudanum-0.8/asp/proxy.asp
diff --git a/...oads/Backdoors/laudanum-0.8/asp/shell.asp → Payloads/laudanum-0.8/asp/shell.asp b/...oads/Backdoors/laudanum-0.8/asp/shell.asp → Payloads/laudanum-0.8/asp/shell.asp
diff --git a/...oads/Backdoors/laudanum-0.8/aspx/dns.aspx → Payloads/laudanum-0.8/aspx/dns.aspx b/...oads/Backdoors/laudanum-0.8/aspx/dns.aspx → Payloads/laudanum-0.8/aspx/dns.aspx
diff --git a/...ads/Backdoors/laudanum-0.8/aspx/file.aspx → Payloads/laudanum-0.8/aspx/file.aspx b/...ads/Backdoors/laudanum-0.8/aspx/file.aspx → Payloads/laudanum-0.8/aspx/file.aspx
diff --git a/...ds/Backdoors/laudanum-0.8/aspx/shell.aspx → Payloads/laudanum-0.8/aspx/shell.aspx b/...ds/Backdoors/laudanum-0.8/aspx/shell.aspx → Payloads/laudanum-0.8/aspx/shell.aspx
diff --git a/...oads/Backdoors/laudanum-0.8/cfm/shell.cfm → Payloads/laudanum-0.8/cfm/shell.cfm b/...oads/Backdoors/laudanum-0.8/cfm/shell.cfm → Payloads/laudanum-0.8/cfm/shell.cfm
diff --git a/Payloads/Backdoors/laudanum-0.8/jsp/cmd.war → Payloads/laudanum-0.8/jsp/cmd.war b/Payloads/Backdoors/laudanum-0.8/jsp/cmd.war → Payloads/laudanum-0.8/jsp/cmd.war
diff --git a/...ads/Backdoors/laudanum-0.8/jsp/makewar.sh → Payloads/laudanum-0.8/jsp/makewar.sh b/...ads/Backdoors/laudanum-0.8/jsp/makewar.sh → Payloads/laudanum-0.8/jsp/makewar.sh
diff --git a/...num-0.8/jsp/warfiles/META-INF/MANIFEST.MF → ...num-0.8/jsp/warfiles/META-INF/MANIFEST.MF b/...num-0.8/jsp/warfiles/META-INF/MANIFEST.MF → ...num-0.8/jsp/warfiles/META-INF/MANIFEST.MF
diff --git a/...laudanum-0.8/jsp/warfiles/WEB-INF/web.xml → ...laudanum-0.8/jsp/warfiles/WEB-INF/web.xml b/...laudanum-0.8/jsp/warfiles/WEB-INF/web.xml → ...laudanum-0.8/jsp/warfiles/WEB-INF/web.xml
diff --git a/...ckdoors/laudanum-0.8/jsp/warfiles/cmd.jsp → Payloads/laudanum-0.8/jsp/warfiles/cmd.jsp b/...ckdoors/laudanum-0.8/jsp/warfiles/cmd.jsp → Payloads/laudanum-0.8/jsp/warfiles/cmd.jsp
diff --git a/Payloads/Backdoors/laudanum-0.8/php/dns.php → Payloads/laudanum-0.8/php/dns.php b/Payloads/Backdoors/laudanum-0.8/php/dns.php → Payloads/laudanum-0.8/php/dns.php
diff --git a/Payloads/Backdoors/laudanum-0.8/php/file.php → Payloads/laudanum-0.8/php/file.php b/Payloads/Backdoors/laudanum-0.8/php/file.php → Payloads/laudanum-0.8/php/file.php
diff --git a/...rs/laudanum-0.8/php/php-reverse-shell.php → ...ds/laudanum-0.8/php/php-reverse-shell.php b/...rs/laudanum-0.8/php/php-reverse-shell.php → ...ds/laudanum-0.8/php/php-reverse-shell.php
diff --git a/...oads/Backdoors/laudanum-0.8/php/proxy.php → Payloads/laudanum-0.8/php/proxy.php b/...oads/Backdoors/laudanum-0.8/php/proxy.php → Payloads/laudanum-0.8/php/proxy.php
diff --git a/...oads/Backdoors/laudanum-0.8/php/shell.php → Payloads/laudanum-0.8/php/shell.php b/...oads/Backdoors/laudanum-0.8/php/shell.php → Payloads/laudanum-0.8/php/shell.php
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		This directory will contain list information that will be helpful in attacking both SOAP and REST-based web services.
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		The GrepStrings directory will hold various lists that can be passed to grep when looking for intersting content within filesystems or source code.