Skip to content

Instantly share code, notes, and snippets.

View oxagast's full-sized avatar
🔨
Probably breaking your code.

Mark Stealer Whitehall oxagast

🔨
Probably breaking your code.
86 followers · 67 following
View GitHub Profile
@oxagast
oxagast / bad_mcp_srv.rb
Created November 16, 2025 19:30
Metasploit module for CVE-2025-6514
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core'
require 'webrick'
require 'thread'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
@oxagast
oxagast / sudo_lib_hook.md
Last active November 8, 2025 17:23
Sudo read() call library hooking utilizing /etc/ld.so.preload
@oxagast
oxagast / powerlock.sh
Last active October 27, 2025 11:56
Shuts down a terminal after 3 failed i3lock login attempts
#!/bin/bash
#
# Powerlock
#
# -- Copyright: oxasploits.com / Marshall Whittaker --
#
# Dependancies: i3lock, LUKS, sudo or systemd, expect
#
# Configuration: Use something like 'xidle' to invoke this script after
# the mouse has not been moved for a certain amount of time by adding
@oxagast
oxagast / strip_color.pl
Created October 24, 2025 22:32
Strips IRC colors from outbound messages (irssi)
#!/usr/bin/perl
use strict;
use vars qw($VERSION %IRSSI);
$VERSION = '1.0';
%IRSSI = (
authors => 'oxagast',
contact => 'oxagast@oxasploits.com',
name => 'StripColor',
description => 'Strips IRC special codes from outgoing messages.',
@oxagast
oxagast / video_downsample.sh
Last active October 25, 2025 16:43
Video Downsampler in Bash
#!/usr/local/bin/bash
# oxagast / marshall@oxasploits.com
#
#
maxres="480p" ## Target Resolution
audiochs=2 ## Max Audio Channels
maxsize=600 ## Max filesize in megabytes
#
cleanup()
@oxagast
oxagast / growmon.sh
Last active October 17, 2025 01:14
File Growth Watcher
#!/usr/bin/bash
# oxagast / marshall@oxasploits.com
if [[ $# -eq 1 ]] || [[ $# -eq 2 ]]; then
if [[ $# -eq 1 ]]; then
ESIZE=1000000000000000000;
fi
if [[ $# -eq 2 ]]; then
ESIZE=$2;
fi
while test -s $1 && [[ $ESIZE -ge $(stat --printf "%s" $1) ]]; do
@oxagast
oxagast / fnotify-desktop.sh
Created September 19, 2025 17:44
Notification script for Irssi
#!/bin/bash
# Author: oxagast / Marshall Whittaker
#
# Modify the next two lines to reflect your configuration.
FILE="/home/oxagast/.irssi/fnotify"
IRCBOX="ircbox"
LAST=0
FIRSTRUN=1
while true;
@oxagast
oxagast / zfs-snapshot.sh
Created August 1, 2025 05:22
Generates ZFS filesystem snapshots and leaves three trailing snaps
#!/usr/local/bin/bash
# num snapshots to hold back
KEEP=3
# Define the ZFS filesystem to snapshot
ZFS_FILESYSTEM="storage"
# Define the snapshot name prefix
SNAPSHOT_PREFIX="snap"
@oxagast
oxagast / exploit_rss.rb
Created June 25, 2025 13:45
Exploit RSS Feed Generator
#!/usr/bin/ruby
require "rss"
require "date"
urlbase = "https://oxasploits.com"
rss = RSS::Maker.make("atom") do |maker|
maker.channel.author = "Marshall Whittaker"
maker.channel.about = urlbase + "/exploits/"
maker.channel.title = "The Oxasploits Exploit Feed"
maker.channel.updated = Time.now.to_s
Dir.glob('sploits/*.md') do |md_filename|
@oxagast
oxagast / vm@.service
Created January 29, 2025 15:26
Systemd service that starts and stops VirtualBox VMs gracefully.
[Unit]
Description= Guest VM %I
After=network.target vboxdrv.service
Before=runlevel2.target shutdown.target
[Service]
User=marshall
Group=vboxusers
Type=forking
TimeoutSec=5min