| #!/usr/bin/env python3 | |
| """Clamp-and-listen rig for a warded Cinderbound coffer. | |
| Drives the coffer's service bench: rig control (power / strap / trigger / glitch / | |
| capture-arm / status), capture download off the analyzer clamp, and the recovery console. | |
| python3 rig.py <host> status --rig PORT | |
| python3 rig.py <host> baseline out.vcd --rig PORT --la PORT # recovery boot + capture | |
| python3 rig.py <host> ticket <base64> --service PORT # present a recovery signet | |
| """ |
| #!/usr/bin/env python3 | |
| """Signetry CTF exploit chain | |
| Vulnerabilities: | |
| 1. QOR auth default empty signing key -> JWT forgery -> maintainer password reset | |
| 2. Apache type-map with relative path traversal -> bypass /internal rewrite rule | |
| 3. XSS via custom element (web component) in appeal body -> warden reissues conservator credentials | |
| 4. DL4J deserialization via configuration.json Jackson polymorphic typing -> RCE | |
| """ | |
| import hmac, hashlib, base64, json, time, sys, struct, io, zipfile, requests |
| (function () { | |
| function decodeMorse(morseCode) { | |
| const r = { | |
| ".-": "a", | |
| "-...": "b", | |
| "-.-.": "c", | |
| "-..": "d", | |
| ".": "e", | |
| "..-.": "f", | |
| "--.": "g", |
| /* | |
| Helpful utility type for modifying a interface defined by for example swagger, where we can't edit the type/interface directly. | |
| Let's say that we have the following: | |
| baskets: BasketTypes.ISavedBasket[]; | |
| But the ID in `ISavedBasket` can be undefined due to the type, but this is not the real case from the API, just the type | |
| as a basket without id could never exsist. |
| const key = [8, 131, 214, 191, 186, 15, 133, 27, 56, 78, 231, 188]; | |
| const password_enc = "5bf6a6dac85ce0784a7d93ec69f0a5c88a7de13a"; | |
| const encrypt = (bytes, key) => { | |
| for (var i = 0; i < bytes.length; i++) { | |
| bytes[i] = bytes[i] ^ key[i % key.length]; | |
| } | |
| return bytes; | |
| }; |
| [data-testid="card.layoutLarge.media"] a[aria-label]::after { | |
| content: "Title: " attr(aria-label); | |
| display: block; | |
| position: relative; | |
| color: #fff; | |
| padding: 1em; | |
| margin: 0 0 1.5em; | |
| } |
This snippet will generate a list suited for the Project Zomboid config from a Steam Workshop Collection.
console.js
| [ | |
| { | |
| "name": "SØN", | |
| "country": "DK", | |
| "time": "21:30", | |
| "detailsLink": "https://www.roskilde-festival.dk/en/years/2019/acts/søn/", | |
| "date": "2019-06-30T19:30:00.000Z", | |
| "stage": "Rising", | |
| "shortDescription": "Portrait of a young generation, painted with delicious guitar pop" | |
| }, |
| { | |
| "name": "", | |
| "version": "1.0.0", | |
| "description": "", | |
| "license": "UNLICENCED", | |
| "author": "Allan", | |
| "main": "index.js", | |
| "private": true, | |
| "scripts": { | |
| "translations": "cross-env NODE_ENV=development extract-messages -l=en,da -o Components/Translations -d da --flat true \"Components/**/!(*.test).{ts,tsx}\"" |
| admin.auth().createUser({ | |
| uid: '203757', // should match the user id in the database, in the DB we store additional information. | |
| email: 'allankimmerjensen@gmail.com', | |
| emailVerified: false, | |
| password: 'secretPassword', | |
| displayName: 'Allan Kimmer Jensen', | |
| photoURL: 'http://www.example.com/12345678/photo.png', |