WangYihang

#include <stdio.h>
#include <unistd.h>

int main(int argc, char* argv[])
{
    FILE * fp;
    char buffer[0x100];
    fp=popen(argv[1],"r");
    int counter = 1;
    while(counter){

WangYihang

#include <stdio.h>
#include <stdlib.h>

#define SIZE 6
#define INF 1000

void array_dump(int* array, int height, int width){
    int i = 0;
    int j = 0;

WangYihang

#!/usr/bin/env python
# encoding:utf-8
# Author: WangYihang
# Email: [email protected]
# Comment: CVE-2017-17561 SeaCMS Authenticated Getshell

import requests
import sys
import readline

WangYihang

#!/usr/bin/env python
# -*- coding: utf-8 -*-
# For: X-NUCA 2017 Final
# Game: Personal Challenges Pwn

from pwn import *

# set context
context.log_level = 'debug'

WangYihang

Keybase proof

I hereby claim:

• I am wangyihang on github.
• I am wangyihang (https://keybase.io/wangyihang) on keybase.
• I have a public key ASD0ZK_pTL_k0sDoCtsr4yUa3rnsl78oriZ89shZnyO7tQo

To claim this, I am signing this object:

WangYihang

package main

import (
    "github.com/jinzhu/gorm"
    _ "github.com/jinzhu/gorm/dialects/mysql"
    "github.com/satori/go.uuid"
    "fmt"
)

type User struct {

WangYihang

package main

import (
    "github.com/jinzhu/gorm"
    _ "github.com/jinzhu/gorm/dialects/mysql"
    "github.com/satori/go.uuid"
    "fmt"
)

type Email struct {

WangYihang

Works during GSoC 2018 on Metasploit project

Issues:

• Idea discuession about Add meta-shell commands
• Error message (no session) printed when ExitOnSession is set to false even session created actually
• Information field seems weird while a reverse shell session is created
• Some questions about Signal Handler and Job Control

Pull requests:

WangYihang

#!/usr/bin/env python

'''
# cat /flag
flag{blind_rce_exploit}

# cat /var/www/html/index.php
<?php
system($_POST['command']);

WangYihang

# ~/.tmux.conf
# Reload config
bind-key r source-file ~/.tmux.conf \; display-message "tmux.conf reloaded"

# Change default prefix
set -g prefix C-q
unbind C-b
bind C-q send-prefix

# Disable windows name auto changing