4 ms·

"just"

• meowface 10y ago
  If Snowden never leaked anything, this would be a huge revelation. But this is just some technical documentation about project codenames we already know a lot about. ################# # Survey # ################# # Set up forward tunnel to TCP/443 on the target, and reverse tunnel for NOPEN. -tunnel l 443 $TARGETIP 443 r $RHP1 127.0.0.1 $RHP1 #perform touch to gather info and set env for exploit ./eligiblecandidate.py -t https://127.0.0.1:443 touch It's dozens of documents like these, and poorly written scripts (not to be confused with operation "scripts", like movie scripts) to make it a bit easier. The only somewhat interesting thing is the exploit code for ex-0-days, but I believe vendors are mostly patched against everything discussed in the Snowden leaks. Someone correct me if I'm wrong.
  • msane 10y ago
    The script style is intentional. They may be discovered / heard / stuck. It minimizes attribution. Even still, "poorly written" is mostly big talk.
    • dsfyu404ed 10y ago
      "Even still, "poorly written" is mostly big talk." This. Custom code (likely adapted from some other script the author saw or wrote in the past) made for a 1-time job for one server doesn't have to be efficient/good because it doesn't have to scale. Getting it written, making it do what it needs and getting as entrenched in the target as possible ASAP is far more important than writing "good" and/or legible code.