I spent the weekend meeting hackers in Vegas, and I got talking to one of them about CRLF Injection. They'd not seen many CRLF Injection vulnerabilities in the wild, so I thought I'd write up an example that's similar to something I found a few months ago.
If you're looking for bugs legally through a program like hackerone, or you're a programmer wanting to write secure PHP: this might be useful to you.
| #!/usr/bin/env python3 | |
| # IRC User List | |
| # Written by Tom Hudson for the Raspberry Pi User Guide | |
| # Updated 2017-01-03 for Python 3.* | |
| # http://tomhudson.co.uk/ | |
| import sys, socket, time | |
| RPL_NAMREPLY = '353' | |
| RPL_ENDOFNAMES = '366' |
| package main | |
| import ( | |
| "fmt" | |
| "net" | |
| "sync" | |
| "time" | |
| ) | |
| const ( |
| // The ArrayList of slaves is not serializable, so fetching them should be marked as @NonCPS so that | |
| // no attempt is made to serialize and save the local state of the function. See here for details: | |
| // https://github.com/jenkinsci/pipeline-plugin/blob/master/TUTORIAL.md#serializing-local-variables | |
| @NonCPS | |
| def getSlaves() { | |
| def slaves = [] | |
| hudson.model.Hudson.instance.slaves.each { | |
| slaves << it.name | |
| } | |
| return slaves |
| #!/bin/bash | |
| set -e | |
| BRANCH=${1} | |
| if [ -z "${BRANCH}" ]; then | |
| echo "Usage: ${0} <branch>" | |
| exit 1 | |
| fi |
| <html> | |
| <head> | |
| <style> | |
| canvas { | |
| border: 1px solid #666666; | |
| } | |
| </style> | |
| </head> | |
| <body> |
| import cv2 | |
| # See https://www.youtube.com/watch?v=FH5oDFgLSs4 for example output | |
| cap = cv2.VideoCapture(0) | |
| face_cascade = cv2.CascadeClassifier("/usr/share/opencv/haarcascades/haarcascade_frontalface_default.xml") | |
| eye_cascade = cv2.CascadeClassifier("/usr/share/opencv/haarcascades/haarcascade_eye.xml") | |
| fourcc = cv2.cv.CV_FOURCC(*'XVID') | |
| out = cv2.VideoWriter('output.avi',fourcc, 15, (640,480)) |
| package main | |
| import ( | |
| "fmt" | |
| "io" | |
| "log" | |
| "net/http" | |
| "os" | |
| ) |
| package main | |
| import ( | |
| "encoding/json" | |
| "fmt" | |
| "log" | |
| "net/http" | |
| ) | |
| // The `json:"whatever"` bit is a way to tell the JSON |
