Skip to content

Instantly share code, notes, and snippets.

View evandrix's full-sized avatar
💭
offline

evandrix evandrix

💭
offline
371 followers · 609 following
View GitHub Profile
@evandrix
evandrix / gist:4472407
Created January 7, 2013 04:45 — forked from trietptm/gist:4467336
http://www.hackthis.co.uk/ctf/2?p=../admin.php\0
<!DOCTYPE HTML>
<html lang = "en">
<head>
<title>HackThis!! - Capture the Flag</title>
<meta charset = "UTF-8" />
<link href='https://fonts.googleapis.com/css?family=Ubuntu|Orbitron' rel='stylesheet' type='text/css'>
<link rel="stylesheet" href="/ctf/css/main.css">
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js"></script>
@evandrix
evandrix / gist:4472401
Last active December 10, 2015 18:08 — forked from trietptm/gist:4467108
http://www.hackthis.co.uk/ctf/2?p=login
<?php
// ...
if ($page == "admin" && !$user->isAdmin()) {
include("admin.php");
} else {
include("/pages/{$page}.html");
}
?>
@evandrix
evandrix / gist:4472400
Created January 7, 2013 04:44 — forked from trietptm/gist:4466904
http://www.hackthis.co.uk/ctf/1
<?php
$user = $_POST['user'];
$pass = $_POST['pass'];
if ($user == "admin" && $pass == "pass") {
//valid login
} else {
//invalid login
}
?>
@evandrix
evandrix / reflection.h
Created January 2, 2013 14:01
Compile time reflection in C++ @ http://lugtug.blogspot.co.uk/2012/12/compile-time-reflection-in-c.html
#pragma once
//by dain bray 12/25/2012
//use however you want.
#include <type_traits>
#include <boost/preprocessor/seq/size.hpp>
#include <boost/preprocessor/seq/enum.hpp>
@evandrix
evandrix / .git:config
Created January 2, 2013 13:58
Push to Multiple Git Repos @ http://maxburstein.com/blog/push-to-multiple-git-repos
[core]
repositoryformatversion = 0
filemode = true
bare = false
logallrefupdates = true
[remote "heroku"]
url = git@heroku.com:maxburstein.git
fetch = +refs/heads/*:refs/remotes/heroku/*
[remote "github"]
url = git@github.com:mburst/burstolio.git
@evandrix
evandrix / default.css
Created December 31, 2012 01:09
@font-face rendering order http://marshallford.me/articles/font-face-rendering
@font-face {
font-family: 'PermanentMarkerRegular';
src: url('PermanentMarker-webfont.eot');
src: url('PermanentMarker-webfont.eot?#iefix') format('embedded-opentype'),
url('PermanentMarker-webfont.woff') format('woff'),
url('PermanentMarker-webfont.ttf') format('truetype'),
url('PermanentMarker-webfont.svg#PermanentMarkerRegular') format('svg');
font-weight: normal;
font-style: normal;
}
@evandrix
evandrix / jquery_for_greasemonkey.user.js
Created December 29, 2012 09:14
var console = unsafeWindow.console;
// a function that loads jQuery and calls a callback function when jQuery has finished loading
function addJQuery(callback) {
var script = document.createElement("script");
script.setAttribute("src", "http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js");
script.addEventListener('load', function() {
var script = document.createElement("script");
script.textContent = "(" + callback.toString() + ")();";
document.body.appendChild(script);
@evandrix
evandrix / scanlogd.c
Created December 21, 2012 13:24
Designing and Attacking Port Scan Detection Tools @ http://www.phrack.org/issues.html?issue=53&id=13#article
/*
* Linux scanlogd v1.0 by Solar Designer. You're allowed to do whatever you
* like with this software (including re-distribution in any form, with or
* without modification), provided that credit is given where it is due, and
* any modified versions are marked as such. There's absolutely no warranty.
*/
#include <stdio.h>
#include <unistd.h>
#include <signal.h>
@evandrix
evandrix / exploit.html
Created December 13, 2012 06:49
Internet Explorer Data Leakage
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8" />
<title>Exploit Demo</title>
<script type="text/javascript">
window.attachEvent("onload", function() {
var detector = document.getElementById("detector");
detector.attachEvent("onmousemove", function (e) {
detector.innerHTML = e.screenX + ", " + e.screenY;
@evandrix
evandrix / mysql-dos.txt
Created December 3, 2012 16:23
MySQL 0day Exploits
5.5.19-log on SuSE Linux
DoS exploit:
--------------------------------------------------------------------------------------------------------
use Net::MySQL;
use Unicode::UTF8 qw[decode_utf8 encode_utf8];
$|=1;
my $mysql = Net::MySQL->new(