Pawel Zareba elchappo

## phpkill.js
// Simple proof of concept for PHP bug (CVE-2012-0830) described by Stefan Esser (@i0n1c)
// http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/

// Generate 1000 normal keys and one array
function createEvilObj () {
    var evil_obj = {};
    for (var i = 0; i < 1001; i++) {
        evil_obj[i] = 1;
    }
    evil_obj['kill[]'] = 'kill';

## gist:4642943
rsync -avz /path/to/local/sync/folder -e "ssh -i /path/to/ssh/key" ubuntu@ec2instance:/path/to/remote/sync/folder

## boc.py
#!/usr/bin/python
# -*- coding:utf-8 -*-

import itertools
import requests
import json

characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
password_length = 6
gen = itertools.combinations_with_replacement(characters,password_length)

## Vagrantfile
file_to_disk = './tmp/large_disk.vdi'

Vagrant::Config.run do |config|
  config.vm.box = 'base'

  config.vm.customize ['createhd', '--filename', file_to_disk, '--size', 500 * 1024]
  config.vm.customize ['storageattach', :id, '--storagectl', 'SATA Controller', '--port', 1, '--device', 0, '--type', 'hdd', '--medium', file_to_disk]
end

## An-Anonymous-Pen.markdown

      
              4 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                elchappo
                / An-Anonymous-Pen.markdown
            
            
              Created
              November 26, 2013 14:32
                — forked from anonymous/An-Anonymous-Pen.markdown
            
          
    An Anonymous Pen

This is zero lines JS game. Only CSS and HTML, without JS =)
A Pen by Anonasaurus Rex on CodePen.
License.

  
## capybara cheat sheet
=Navigating=
    visit('/projects')
    visit(post_comments_path(post))

=Clicking links and buttons=
    click_link('id-of-link')
    click_link('Link Text')
    click_button('Save')
    click('Link Text') # Click either a link or a button
    click('Button Value')

## nginx
sudo cp nginx /etc/init.d/
sudo update-rc.d nginx defaults
sudo chmod +x /etc/init.d/nginx
/etc/init.d/nginx start

## remove-orphan-images.sh
#!/bin/bash

set -eu
shopt -s nullglob

readonly base_dir=/var/lib/docker/registry
readonly output_dir=$(mktemp -d -t trace-images-XXXX)
readonly jq=/usr/bin/jq

readonly repository_dir=$base_dir/repositories

## 1) Install
// --- Compiling ---
$ wget http://download.redis.io/releases/redis-2.8.3.tar.gz
$ tar xzvf redis-2.8.3.tar.gz
$ cd redis-2.8.3
$ make
$ make install

// --- or using yum ---
$ rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
$ rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm

## dbal-nullable.php
<?php
use Doctrine\DBAL\Schema\Schema;

// assuming you're using composer...
$loader = require __DIR__ . '/vendor/autoload.php';

$schema = new Schema();

$users = $schema->createTable('users');
	// Simple proof of concept for PHP bug (CVE-2012-0830) described by Stefan Esser (@i0n1c)
	// http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/

	// Generate 1000 normal keys and one array
	function createEvilObj () {
	var evil_obj = {};
	for (var i = 0; i < 1001; i++) {
	evil_obj[i] = 1;
	}
	evil_obj['kill[]'] = 'kill';
	#!/usr/bin/python
	# -- coding:utf-8 --

	import itertools
	import requests
	import json

	characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
	password_length = 6
	gen = itertools.combinations_with_replacement(characters,password_length)
	file_to_disk = './tmp/large_disk.vdi'

	Vagrant::Config.run do \|config\|
	config.vm.box = 'base'

	config.vm.customize ['createhd', '--filename', file_to_disk, '--size', 500 * 1024]
	config.vm.customize ['storageattach', :id, '--storagectl', 'SATA Controller', '--port', 1, '--device', 0, '--type', 'hdd', '--medium', file_to_disk]
	end
	=Navigating=
	visit('/projects')
	visit(post_comments_path(post))

	=Clicking links and buttons=
	click_link('id-of-link')
	click_link('Link Text')
	click_button('Save')
	click('Link Text') # Click either a link or a button
	click('Button Value')
	sudo cp nginx /etc/init.d/
	sudo update-rc.d nginx defaults
	sudo chmod +x /etc/init.d/nginx
	/etc/init.d/nginx start
	// --- Compiling ---
	$ wget http://download.redis.io/releases/redis-2.8.3.tar.gz
	$ tar xzvf redis-2.8.3.tar.gz
	$ cd redis-2.8.3
	$ make
	$ make install

	// --- or using yum ---
	$ rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
	$ rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
	<?php
	use Doctrine\DBAL\Schema\Schema;

	// assuming you're using composer...
	$loader = require __DIR__ . '/vendor/autoload.php';

	$schema = new Schema();

	$users = $schema->createTable('users');