Just in case you missed it: The Shadow Brokers has published a rant and the password for their tool dump.

https://medium.com/@shadowbrokerss/dont-forget-your-base-867d304a94b1

Password for c&p is:

CrDj"(;Va.*NdlnzB9M?@K2)#>deB7mN

Files, for those needing them, at:

https://pastebin.com/hur8kVYM

(thanks to @kript3ia for reminding me)

For someone definitely active in the 90s this Equation Group dump is exactly as described by @osxreverser: a trip down memory lane.

There's exploits for Apache running on Linux for DEC Alpha, Netscape Enterprise Server, RedHat 5.x and stuff that you probably haven't heard except in "greybeard's storytime".

If you wander over to the birdsite @osxreverser is posting headers of all the interesting exploits he finds.

There is also an OpenSSH one (KWIKEMART): https://twitter.com/osxreverser/status/850678952138067969

# KWIKEMART
###################################3
# SSH-1.5-1.2.27
# SSH-1.5-OpenSSH-1.2.3
# SSH-1.99-OpenSSH_2.1.1
# SSH-1.99-OpenSSH_2.2.0

So, KWIKEMART, in /bin/km (not found source yet) has pearls such as the following in its strings:

echo CHRIS CHRIS
No Crash, might have worked
Reply from remote: %s
CHRIS
No Chris not found and since we can't live without her .. searching on
error on read, continuing

It looks suspiciously like we might have to RE them all to find out if the holes are all patched...

Oh, this is interesting (but expected):

#######################################
### ELITEHAMMER
#######################################
### Runs against RedFlag Webmail 4 (software install)
### Gives you user nobody, not root;
### Need a local to get root (EVENTSTART or ELASTICBANJO?)
### Webmail port is usually 80 or 443

For ref: Red Flag Linux is a, now defunct, Chinese distribution (see https://en.wikipedia.org/wiki/Red_Flag_Linux)

Another adorable "from the past" entry, interesting choice of name (CICADA, see https://en.wikipedia.org/wiki/Cicada_3301 and engage your conspiracy theories):

#########################################################
# ELVISCICADA
#########################################################
### only up to ealry Sol2.9; Sol2.10 not vulnerable

### snmpXdmid (/usr/lib/dmi/dmispd) daemon program (RPC program 300598 version 1)

This one is pure "History Channel" material:

############################################
# EXPOSITTRAG
############################################

# exploit pcnfsd version 2.x (fails on v.1 or 3+)

I cannot imagine many people in 2017 even remember pcnfsd: I used to run it so it brings back those pangs of infinite pain associated with something which should never have been born in IT.

...and what would life be without a little Samba?

###################### ECHOWRECKER #####################
# samba server vulnerability

# Samba 3.0.2a-9AX and Samba 3.0.5 are currently vulnerable
# Samba 2.x on Redhat 7.3, 8.0, and 9.0 are vulnerable

Ah, this one I have in my private stash from a friend, but without the codename :D

###################### ELECTRICSLIDE #####################
# Heap Overflow in squid 2.5.STABLE1-2 redhat 9.0
-scan 3128 TARGET_IP

Definitely remember this one being used.

Now for a little something for those oft-forgotten admins using Exim (hey, I have been a Sendmail user since the heady days of "real" BSD so I am allowed to be cynical):

###################### ERRGENTLE ##########################
# exploits vulnerability Exim 3.22 thru Exim 3.35 Mail Transfer Agent
# brute force

"History Channel" again, this one combines an ancient daemon with operating systems of a different era:

############################################
# TOOLTALK -DEC, IRIX, or Sol2.6 or earlier
############################################

-scan rpc TARGET_IP

# look for 100083 1 tcp 30889 ttdbserverd

We are talking CDE here (http://www.kb.cert.org/vuls/id/387387). You know KDE? No, CDE...

This one is very local :)

################################################
### VS - VIOLET
### You need to do this exploit from a box very close (ideally on the same net)
### as the target because of the traffic it generates.
### Reference the README file in /current/bin for help on the new version
################################################
#Start Xserver on local ops machine prior to logging in

I haven't looked at it... but XDCMP ;)

We've *all* used this one...

# PTRACE/FORKPTY

### new exploit is ptrace-kmod; it's a kernel exploit, no suid needed.
### works on linux 2.2 -> 2.4, ex) RH8.0 and MDK 9.0
### might have to run it twice before it works.
### other ptraces are older and need to run against a setuid program that won't log
# find / -fstype nfs -prune -o -type f \( -perm -4000 \) -user root -ls > o
# get o

This is very intriguing:

########################################
# SAMPLEMAN / ROUTER TOUCH
########################################

Clearly hits Cisco via some sort of redirection via a tool on port 2323...

A favourite on the History Channel:

########################################
# ENGAGENAUGHTY
########################################
# Apache and SSL exploit on Linux on Dec ALpha
# ssl must be OpenSSL 0.9.6d or earlier

This is almost endearing.

Perhaps my History Channel programme should premiere with this:

# EGGBASKET

# Remote exploit against the Netscape Web Server which leverages
# a buffer overflow to obtain remote access

# Netscape Enterprise/3.6 and Netscape Enterprise/3.6 SP1
# works against AIMC Netscape servers also with right versions

@cynicalsecurity Netscape? 😂