Skip to content

Instantly share code, notes, and snippets.

View allanlw's full-sized avatar

Allan Wirth allanlw

121 followers · 15 following
View GitHub Profile
@allanlw
allanlw / #NSEC 2021 Writeups.md
Last active May 30, 2021 13:11
Northsec 2021 writeups

My favorite challenges for 2021 were Wizlog and Kinder Market, so here are writeups for both. - @Allan_Wirth

@allanlw
allanlw / webpack-exec-on-compile.js
Last active February 21, 2021 08:33
POC for executing webpack code through webpack imort magic comments
/*
It's possible to execute arbitrary code during webpack execution by abusing the magic
comment feature documented here: https://webpack.js.org/api/module-methods/#magic-comments
These comments eventually get executed by `vm.runInContext` which is well-known to be unsafe
at https://github.com/webpack/webpack/blob/v4.43.0/lib/Parser.js#L2338
This is an example payload that reads process.env, ps aux and /etc/passwd and posts to localhost:8080.
Reported to NPM security for webpack July 12th, 2020, but considered not a bug.
@allanlw
allanlw / solver.php
Last active June 23, 2020 02:38
PHP re-implementation of https://yurichev.com/news/20200621_regex_SAT/
<?php
// simple PHP re-implementation of https://yurichev.com/news/20200621_regex_SAT/
// to take advantage of PCRE jit
ini_set('pcre.backtrack_limit', (1<<63) - 1);
ini_set('pcre.jit', 1);
function read_text_file($fname) {
return array_map('trim', explode("\n", file_get_contents($fname)));
@allanlw
allanlw / bitfield.py
Created June 3, 2019 20:50
bitfield.py
# Copyright 2019, Akamai Technologies, Inc.
#
# Permission is hereby granted, free of charge, to any person obtaining
# a copy of this software and associated documentation files (the
# "Software"), to deal in the Software without restriction, including
# without limitation the rights to use, copy, modify, merge, publish,
# distribute, sublicense, and/or sell copies of the Software, and to
# permit persons to whom the Software is furnished to do so, subject to
# the following conditions:
#
@allanlw
allanlw / 1jq.diff
Last active June 4, 2019 22:12
Sandboxed Patch for jq
diff --git a/Makefile.am b/Makefile.am
index 6344b4e..1a3a703 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -5,13 +5,13 @@ LIBJQ_INCS = src/builtin.h src/bytecode.h src/compile.h \
src/exec_stack.h src/jq_parser.h src/jv_alloc.h src/jv_dtoa.h \
src/jv_unicode.h src/jv_utf8_tables.h src/lexer.l src/libm.h \
src/linker.h src/locfile.h src/opcode_list.h src/parser.y \
- src/util.h
+ src/util.h src/sandbox.h
@allanlw
allanlw / Dockerfile
Created May 15, 2018 22:23
PacVim dockerfile
FROM ubuntu:18.04
RUN apt-get update && apt-get install -y \
build-essential \
git \
libncurses5-dev \
libncursesw5-dev
RUN git clone https://github.com/jmoon018/PacVim.git /PacVim && \
cd /PacVim && \
@allanlw
allanlw / anki_dupes.py
Created July 11, 2017 01:46
anki-dupes
# Quick script for finding cards that are dupes based on the sort field
from collections import defaultdict
q = defaultdict(list)
for (k,v) in [ (anki.utils.stripHTML(y.fields[y.col.models.sortIdx(y._model)]), y) for y in [mw.col.getNote(x) for x in mw.col.findNotes("deck:Japanese")]]:
q[k].append(v)
dupes = [(k,v) for (k,v) in q.items() if len(v) > 1]
for k,vs in dupes:
for b in vs:
b.addTag("allandup")
b.flush()
@allanlw
allanlw / http2.py
Last active December 30, 2023 22:08
Generate an HTTP2 Request for piping to netcat
#!/usr/bin/env python
from __future__ import print_function
import struct
HTTP2_HDR="PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n"
# Does the thing for a frame
def frame(ty, flags, streamid, payload):
return struct.pack(">L", len(payload))[1:4] + struct.pack(">BBL", ty, flags, streamid) + payload
@allanlw
allanlw / solver.py
Created February 27, 2017 02:13
combined.space solution
#!/usr/bin/python
import urllib2
import string
import random
import urllib
import cgi
l = list(string.ascii_letters)
random.shuffle(l)
@allanlw
allanlw / index.html
Created January 21, 2017 01:10
Human Sort
<!DOCTYPE html>
<!--
This is a simple script to manually heap sort images.
It loads images from a relative file filelist.txt, which is a list of image (really page) URIs
separate by new lines.
It will prompt the user for comparisons. Press the A key for left image or F key for the right image.
When it's done it logs to console.log.