avicoder

Week One:

• Heroku app Deployment

avicoder

Challenge 0

"><svg onload=prommpt(1)>

Challenge 1

<img src=1 onerror=prompt(1)/

Challenge 2

avicoder

Fix, gdb shared lib
  Try compiling using gcc -fno-builtin. 

gdb: “No symbol table is loaded”
  gcc -g prog.c

avicoder

Keybase proof

I hereby claim:

• I am vjex on github.
• I am avicoder (https://keybase.io/avicoder) on keybase.
• I have a public key whose fingerprint is BBE5 FC5D 3AC2 BB78 C6A4 1D9D 4B0B A549 62AB A6CC

To claim this, I am signing this object:

avicoder

<script type="text/javascript">
    var enforce = "avicoder.me";
    if ((enforce == window.location.host) && (window.location.protocol != "https:"))
      window.location = window.location.toString().replace(/^http:/, "https:");
</script>

avicoder

_CONST SEGMENT                                   ;  or _DATA
$SG1234 DB 'Hello, World',0AH,00H
_CONST ENDS

_TEXT SEGMENT
push ebp
move ebp,esp
push OFFSET $SG1234
call _printf
add ebp,4

avicoder

#! /usr/bin/python

#Author == @avicoder 

import sys,getopt

r = '\033[31m' #red
b = '\033[34m' #blue
g = '\033[32m' #green
y = '\033[33m' #yellow

avicoder

/* Open Inspect element or scratchpad and run the command below...*/
    links = document.links;
    for (i = 0; i < (links.length); i++) {
       console.log(links[i].href);
    }

avicoder

####Injection

• Injection could be anything, It could be Sql, LADAP , XAPth, Mail Based injection or any other database.

• Malicious request to modified query is an injection

• Data exfiltration

• Defences:

avicoder

netsh wlan set hostednetwork mode=allow ssid=Paladion-Hotspot key=paladion123!
netsh wlan start hostednetwork