cooliscool

#!/usr/bin/env bash
set -euo pipefail
IFS=$'\n\t'

# Read site_name from stdin (supports piping or interactive prompt)
if [ -t 0 ]; then
  read -rp "Enter site name (e.g. example.com): " site_name
else
  read -r site_name
fi

cooliscool

// This snippet intents to simulate a baby malware.
// The malware upon running connects to a server, currently hardcoded as 127.0.0.1:8080
// From server, it accepts a command to be executed locally
// It executes the command locally and then send back the response to the server. 
// Basically, just a reverse shell binary. Now when thinking about it, this could have been done in a bash one liner also 🤔
// But I had fun editing some little C code. So, cool.

// to compile : gcc -o main main.c 
// run ./main
// to run the command&control server : while true; do echo -e 'id' | nc -l 8080 ; done

cooliscool

package com.moo.myapplication2;

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;

public class CommandExecutor {

    public static String executeCommand(String command) {
        StringBuilder output = new StringBuilder();

cooliscool

Path traversal to RCE in Android - Mobile Hacking Lab ‘Document Viewer’ write-up

During my preparation for eMAPT, I came across Mobile Hacking Labs - and their free hacking labs which I felt would help me for practice. So I decided to give it a try starting with the ‘Document Viewer’ challenge. Getting right into the problem.

Problem statement

The do give out some solid hints & right direction in the problem statement.

• Your target is an Android application with a feature to open PDFs from HTTP/HTTPS URLs

cooliscool

Kubernetes Policy Engines: How to Implement Security, Compliance, and Governance Policies in Your Cluster

(image generated by DALL-E)

Embarking on the journey of Kubernetes security unveils a vast landscape, encompassing crucial elements that safeguard your containerized applications. Among the intriguing facets within this realm, we delve into pivotal sections that form the bedrock of Kubernetes security:

• RBAC Mastery: Kubernetes security begins with defining who holds the keys to the kingdom. Role-Based Access Control (RBAC) empowers you to orchestrate who wields authority over kubectl, the gateway to your Kubernetes cluster. Craft roles and permissions tailored for distinct users and groups, ensuring a finely tuned control mechanism.

• Secrets Safeguard: The cloak of security extends to shielding your application's secrets. In the digital realm, secrets are akin to treasures — pa

cooliscool

import pyautogui
import random
import time

while True:
    current_x, current_y = pyautogui.position()
    
    # Generate random x and y coordinates around the current position
    new_x = current_x + random.randint(-5, 5)
    new_y = current_y + random.randint(-5, 5)

cooliscool

PASCAL_CLASSES = [
    'none',
    'aeroplane',
    'bicycle',
    'bird',
    'boat',
    'bottle',
    'bus',
    'car',
    'cat',

cooliscool

; Egg Hunter
; Author: Aditya Chaudhary
; Date: 20th Jan 2019


global _start


section .text

cooliscool

package main

import ("fmt"
  "encoding/json"
  "os"
  "bufio"
  "bytes"
)

cooliscool

import time
import requests as g
import csv


port= 8089
hostname='localhost'
latDegToMet = 111000
metToFeet = 3.28084
radToDeg = 180/3.14159