Skip to content

Instantly share code, notes, and snippets.

View Enigmatrix's full-sized avatar
🛠️
Tinkering

Chandrasekaran Akash Enigmatrix

🛠️
Tinkering
View GitHub Profile
@Enigmatrix
Enigmatrix / index.html
Created May 13, 2015 03:09
MEMEMEMEMEMEMEMEMEM // source http://jsbin.com/jocaboxoxi
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>MEMEMEMEMEMEMEMEMEM</title>
<style id="jsbin-css">
.stuff{
display:inline-block;
}
.stuffimg{
@Enigmatrix
Enigmatrix / dankmemes
Created May 13, 2015 04:48
hohohhoohho
<!DOCTYPE html>
<html ng-app="app">
<head>
<meta charset="utf-8">
<title>MEMEMEMEMEMEMEMEMEM</title>
<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.3.14/angular.min.js"></script>
<script src="https://cdn.firebase.com/js/client/2.2.1/firebase.js"></script>
<script src="https://cdn.firebase.com/libs/angularfire/1.0.0/angularfire.min.js"></script>
<link href="main.css" rel="stylesheet">
</head>
@Enigmatrix
Enigmatrix / dankmemes
Created May 13, 2015 04:49
hohohhoohho
<!DOCTYPE html>
<html ng-app="app">
<head>
<meta charset="utf-8">
<title>MEMEMEMEMEMEMEMEMEM</title>
<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.3.14/angular.min.js"></script>
<script src="https://cdn.firebase.com/js/client/2.2.1/firebase.js"></script>
<script src="https://cdn.firebase.com/libs/angularfire/1.0.0/angularfire.min.js"></script>
<link href="main.css" rel="stylesheet">
</head>
@Enigmatrix
Enigmatrix / index.html
Created May 13, 2015 09:21
MEMEMEMEMEMEMEMEMEM // source http://jsbin.com/fubiwi
<!DOCTYPE html>
<html ng-app="app">
<head>
<meta charset="utf-8">
<title>MEMEMEMEMEMEMEMEMEM</title>
<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.3.14/angular.min.js"></script>
<script src="https://cdn.firebase.com/js/client/2.2.1/firebase.js"></script>
<script src="https://cdn.firebase.com/libs/angularfire/1.0.0/angularfire.min.js"></script>
<link href="main.css" rel="stylesheet">
<style id="jsbin-css">
@Enigmatrix
Enigmatrix / index.html
Created May 14, 2015 00:03
MEMEMEMEMEMEMEMEMEM // source http://jsbin.com/yusifo
<!DOCTYPE html>
<html ng-app="app">
<head>
<meta charset="utf-8">
<title>MEMEMEMEMEMEMEMEMEM</title>
<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.3.14/angular.min.js"></script>
<script src="https://cdn.firebase.com/js/client/2.2.1/firebase.js"></script>
<script src="https://cdn.firebase.com/libs/angularfire/1.0.0/angularfire.min.js"></script>
<link href="main.css" rel="stylesheet">
<style id="jsbin-css">
<!DOCTYPE html>
<head>
<meta charset="utf-8">
<title>SayIt</title>
<link rel="stylesheet" href="styles.css">
<script src="scripts.js"></script>
<link href='http://fonts.googleapis.com/css?family=Open+Sans' rel='stylesheet' type='text/css'>
<style id="jsbin-css">
body{
font-family: 'Open Sans', sans-serif;

Start (can combine options e.g. r2 -d -A file)

  • r2 file - start r2 session about file
  • r2 -d pid - start r2 debug session attached to pid
  • r2 -d file - start r2 debug session
  • r2 -A file - start session, analyse everything first
  • r2 -R profile.rr2 - start session using profile

Learning Notes

  1. <cmd> - run cmd (duh)
  2. <cmd> @ <addr> - runs cmd at addr
  3. ~\ - \ | grep \

Type of Attack

  1. Stack overflow
  2. Heap overflow
  3. Format String
  4. NULL byte / Off by one

Format String Attack Tips

  1. look at registers/stack, one of them will inevitably point to another value on stack (can do arbitrary read/write with this)
  2. look at registers/stack, one of them will point to libc's functions
  3. writing null bytes after a value can be done with %ln (write long int)

Keybase proof

I hereby claim:

To claim this, I am signing this object:

okokokokokok
<script>alert(1)</script>
</textarea>
<script>alert(1);</script>
<textarea>