Skip to content

Instantly share code, notes, and snippets.

Andrea Brancaleoni thypon

Block or report user

Report or block thypon

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
View Vulnfinder
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<script src="escape.js" type="text/javascript" charset="utf-8"></script>
<script type="text/javascript" language="javascript" charset="utf-8">
//<![CDATA[
if (escapeHTML(document.url) != document.url) {
document.href = "XSS"
}
//]]>
@thypon
thypon / exceptional.rkt
Last active Dec 17, 2015
Racket Exception Implementation
View exceptional.rkt
#lang racket
(define *handlers* (list))
(define (push-handler proc)
(set! *handlers* (cons proc *handlers*)))
(define (pop-handler)
(let ((h (car *handlers*)))
(set! *handlers* ( cdr *handlers*))
@thypon
thypon / gist:8476260
Created Jan 17, 2014
I Need Dynamics
View gist:8476260
import lombok.NonNull;
import java.lang.reflect.Method;
public class Dynamics {
@SuppressWarnings("unchecked")
public static <T> T send(
@NonNull final Class<?> clazz,
@NonNull final String method,
final Object... args) {
View Shrodinger.java
class Shrodinger {
static int DEAD = 0;
static int ALIVE = 1;
int status;
}
class Main {
stativ void main() {
Shrodinger cat = new Shrodinger();
View shmap.rb
require 'socket'
def command(cmd)
s = TCPSocket.new 'shmap.9447.plumbing', 9447
data = s.recv(20000)
s.puts cmd
data = s.gets
s.close # close socket when done
@thypon
thypon / DHCPLogger.go
Created Dec 14, 2014
Logs Users that connects via DHCP
View DHCPLogger.go
package main
import (
"flag"
"log"
"net"
"time"
"sync"
"errors"
View gist:86add332b6d85b9abb39
class Proc
def self.compose(f, g)
lambda { |*args| f[g[*args]] }
end
def *(g)
Proc.compose(self, g.to_proc)
end
def |(g)
@thypon
thypon / Extract Deps
Created Apr 24, 2015
Extract Deps in Ruby
View Extract Deps
#!/usr/bin/env ruby
require 'rubygems'
require 'gems'
require 'json'
class Package < Struct.new(:name, :language, :version, :hash, :source, :homepage, :depends)
end
class Dependencies < Struct.new(:hostmake, :make, :runtime)
@thypon
thypon / dontfork.c
Last active Aug 29, 2015
Daemonize tracer
View dontfork.c
// dontfork.c, a little ptrace utility that traces all child process
// and exits only when the latest spawned child is dead
#include <assert.h>
#include <stdio.h>
#include <sys/ptrace.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <string.h>
#include <linux/ptrace.h>
#include <sys/prctl.h>
@thypon
thypon / recursivechecksec.sh
Created Aug 24, 2015
check security for all linked libraries
View recursivechecksec.sh
recursivechecksec() {
sudo LD_TRACE_LOADED_OBJECTS=1 LD_VERBOSE=1 /lib/ld-linux-x86-64.so.2 $1 | grep "=>" | sed 's|\s*||' | sed 's|(.*)||g' | awk '{print $3}' | sort | uniq | xargs -n1 ls -la | awk '{print $11}' | xargs -n1 echo /usr/lib/ | sed 's|\s*||g' | xargs -n1 checksec --file
}
You can’t perform that action at this time.