Skip to content

Instantly share code, notes, and snippets.

View breadchris's full-sized avatar

Chris breadchris

113 followers · 47 following
View GitHub Profile
@breadchris
breadchris / Git Trending Repos Python
Created February 8, 2015 20:45
A python one liner to return all trending repos on Github
@breadchris
breadchris / Dot Vimrc
Created March 5, 2015 17:29
A custom Vimrc file
syntax enable
set background=dark
colorscheme molokai
filetype plugin indent on
let &t_SI .= "\<Esc>[?2004h"
let &t_EI .= "\<Esc>[?2004l"
inoremap <special> <expr> <Esc>[200~ XTermPasteBegin()
@breadchris
breadchris / gist:3d72f88826c8d4b964c6
Created March 8, 2015 01:31
Ropasaurus Rex like program
int overflow()
{
char buf[136];
return read(0, &buf, 256u);
}
int main()
{
overflow();
return write(1, "WIN\n", 4u);
@breadchris
breadchris / Delphi.md
Last active May 24, 2021 17:59
Bsides Vancouver CTF 2015 - Delphi (200 ownable) Writeup

Delphi

files given:

  • delphi-07a5c9d07a4c20ae81a2ddc66b9602d0dcceb74b
  • libtwenty.so-4a3918b2efd9fbdfd20eeb8fa51ca76bc42eb2f2

TL;DR

  • Reverse Command Protocol
  • Integer Overflow
  • Metacharacter Injection
@breadchris
breadchris / challenge_6.c
Last active August 29, 2015 14:17
Break repeating-key XOR
//
// challenge_6.c
// Matasano Crypto Challenge
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
char* HEX_LOOKUP = "0123456789abcdef";
@breadchris
breadchris / echo.py
Created April 2, 2015 04:08
Echo server
(lambda s=__import__("socket").socket():s.bind(('',9237))==s.listen(5)==map(lambda c,d:c.send(c.recv(99)),(s.accept()[0]for _ in iter(int,1))))()
@breadchris
breadchris / team.md
Created April 3, 2015 06:32
Backdoor CTF 2015 team Writeup

Backdoor CTF 2015 team Writeup

TL;DR

  • Format string

Given that this challenge was 600 points, I expected to be challenged with this one. But with 91 solves I think the people at SDSLabs kinda messed up on the points for this one lol.

Checking out what type of file we were dealing with here:

[~/Documents/CTFs/backdoor]$ file team
@breadchris
breadchris / gist:deda47c322a3531113ee
Created April 23, 2015 16:00
PicoCTF2014 Hardcore ROP
void randop() {
munmap((void*)0x0F000000, MAPLEN);
void *buf = mmap((void*)0x0F000000, MAPLEN, PROT_READ|PROT_WRITE, MAP_ANON|MAP_PRIVATE|MAP_FIXED, 0, 0);
unsigned seed;
if(read(0, &seed, 4) != 4) return;
srand(seed);
for(int i = 0; i < MAPLEN - 4; i+=3) {
*(int *)&((char*)buf)[i] = rand();
if(i%66 == 0) ((char*)buf)[i] = 0xc3;
}
@breadchris
breadchris / resources.md
Last active December 12, 2019 22:34
Pwning resources
@breadchris
breadchris / 99_problems_26.py
Last active August 20, 2019 00:55
ocaml 99 problems #26 in python
tab_depth = 0
def log(s=None, **kwargs):
global tab_depth
msg = s if s is not None else ", ".join(["{} == {}".format(k, v) for k, v in kwargs.items()])
print("\t" * tab_depth + msg)
def perms(n, l):
global tab_depth