Christopher Pritchard ChrisPritchard

Pwntools Cheatsheet

Program Interaction
Environment and Contexts
Logging and Output
Encoding, Packing and Utility
Assembly and Shellcraft
ELFs, Strings and Symbols
Return Oriented Programming
SROP and Sigreturn Frames

Putting Linux on an Asus VivoBook

My device: Asus VivoBook Series X206HA-FD0077T Notebook

Use rufus on windows to write a linux iso to a usb drive (A)unite
ESC will get into the boot menu / grub. if the latter, open system settings to get into bios/uefi
save & exit allows you to override the boot order and boot from USB

Kerberos cheatsheet

Bruteforcing

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

PHP filter bypass - no letters or quotes

For the 2021 hack the box cyberpocalypse ctf, there was a web challenge called pcalc that included this filter:

if (strlen($formula) >= 100 || preg_match_all('/[a-z\'"]+/i', $formula)) {
    return '🤡 dont bite the hand that feeds you human 🤡';
}
try {
    eval('$pcalc = ' . $formula . ';');

	<html>
	<head>
	<title>Latest Commits</title>
	<style>
	label {
	display:block;
	}
	</style>
	</head>
	<body>

	package main

	import (
	"bufio"
	"fmt"
	"os"
	"strings"
	"time"
	)

	#include <stdio.h>
	#include <stdlib.h>
	#include <sys/stat.h>
	#include <sys/ioctl.h>
	#include <linux/fs.h>

	int main(int argc, char **argv)
	{
	FILE *fp;


	var watcher = new FileSystemWatcher(".") { EnableRaisingEvents = true };
	watcher.Renamed += (_, e) =>
	{
	if(Path.GetExtension(e.Name) != ".savegame")
	{
	Console.WriteLine($"Ignoring {Path.GetExtension(e.Name)} file");
	return;
	}
	try

	package main

	import (
	"bufio"
	"fmt"
	"log"
	"net"
	"regexp"
	"strconv"
	"strings"

	package main

	import (
	"flag"
	"fmt"
	"io/ioutil"
	"log"
	"net/http"
	"net/url"
	"os"