Eriner

#!/bin/zsh

# Keycloak Vuln disclosure: https://www.soluble.ai/blog/keycloak-cve-2020-10758
#
# LWN post about HTTP POST Content-Length DoS: https://lwn.net/Articles/418017/
#
# Original research by Wong Onn Chee in 2010: http://www.owasp.org/images/4/43/Layer_7_DDOS.pdf

i=20
host="http://mykeycloakinstall.example:9000"

Eriner

blueprint:
  name: PoC for CVE-2021-45099
  description: the not-a-vulnerability was patched in github.com/hassio-addons/addon-ssh v10.0.0
  domain: automation
  input:
    boolean:
      name: Toggle
      description: Some boolean light switch.
      selector:
        entity:

Eriner

package main

import (
	"bytes"
	"crypto/md5"
	"fmt"
	"io/ioutil"
	"log"
	"os"
	"strings"

Eriner

services:

  sidekiq:
    image: tootsuite/mastodon:v3.5.3
    cap_drop:
      - ALL

  redis:
    image: redis:6-alpine
    cap_drop:

Eriner

.compose-form__publish-button-wrapper .button--block {
  font-size: 0px;
}

.compose-form__publish-button-wrapper .button--block::after {
  content: "Toot!";
  font-size: 15px;
  vertical-align: middle;
  color: #fff;
}

Eriner