Scripts and Tools

• 30backups.sh -- Creates and keeps the latest 30 web and SQL backups
• 950k-usernames.txt.gz -- Pushing a million user names
• adig.sh -- Queries authoritative name servers for A, www, and TXT records
• character-classes.txt -- Character classes useful for web malware analysis
• check-chef.sh -- Checks for new version of CyberChef
• coladd.sh -- Sums a column from a file
• convertstr.pl -- Converts a string into various formats
• country-codes.txt -- ISO 3166 country codes
• escape.pl -- Automatically escapes regular expressions
• hosts-plus.txt -- hosts-plus.txt for mild.sh
• iso8601 -- ISO 8601 standard date and time functions
• krackrok.sh -- Removes old kernels on Ubuntu systems
• last4pass.php -- https://isc.sans.edu/forums/diary/Well+Hello+Again+Peppa/23860/
• malware-email-addresses.txt -- Email addresses collected from malware
• mild.sh -- Subdomain brute forcer inspired by fierce.pl
• oui.sh -- IEEE OUI lookup
• php.nanorc -- Nano PHP syntax highlighting
• pron-scraper.sh -- Or manga or whatever
• pwndirs.php -- Mass defacer
• quick-kick.sh -- Quick scan script
• rcptTousers.py -- Enumerates email addresses via rcpt to
• rdp-scanner-users.txt -- Users used in malware RDP scanner
• rdp-scanner-words.txt -- (Pass)words used in malware RDP scanner
• shellfun.php -- Playing with PHP shell
• spiga.conf -- Conf file for spiga.py
• spiga.py -- Configurable, threaded web resource scanner
• sshscan.py -- Horizontal SSH scanner
• states-codes.txt -- List of US states and two-letter codes
• toCharCode.pl -- Creates decimal string for JavaScript's fromCharCode
• uas.txt -- User agent strings
• zonetrans.sh -- Attempts full zone transfer from each authoritative name server