evandrix

require 'rubygems'
require 'cucumber/rake/task'

Cucumber::Rake::Task.new(:features) do |t|
  t.cucumber_opts = "--format pretty" 
end

evandrix

#!/usr/bin/perl
use strict;
# dmn001 <at> gmail
# 31/01/2011

my %pos;
my %neg;
my $num_lines = <STDIN>;

while (<STDIN>){

evandrix

            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
                    Version 2, December 2004

 Copyright (C) 2011 YOUR_NAME_HERE <YOUR_URL_HERE>

 Everyone is permitted to copy and distribute verbatim or modified
 copies of this license document, and changing it is allowed as long
 as the name is changed.

            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE

evandrix

#!/bin/sh

if [ ! -t 0 ]; then
    echo >&2 'STDIN is not a terminal'
    exit 1
fi

clear

cd "$(mktemp -d)"

evandrix

Stripe CTF - Work Notes
mpetrov ([email protected])

These notes are very rough. They should give a general idea of how each level was solved.

---- LEVEL 01 (login: e9gx26YEb2) -----
Solution: modifying PATH env variable
Password: kxlVXUvzv

date.c

evandrix

//
//  Created by Michael Petrov on 12-02-23.
//  Copyright (c) 2012 TenthBit Inc. All rights reserved.
//  http://michaelpetrov.com ([email protected])
//
//
//  This solution performs a timing attack on the fork system call. By monitoring the process closely
//  it is possible to discover where the fork likely happened. With some basic heuristics, it's possible
//  to infer where the wrong character is. With very minor brute force searching it becomes very easy
//  to find the password one letter at a time.

evandrix

var ffi = require('ffi'),
    ref = require('ref'),
    Struct = require('ref-struct'),
    Library = require('./Library'),
    Type = ref.Type,
    NULL = ref.NULL,
    isNull = ref.isNull;


var groups = ['libs', 'types', 'structs', 'callbacks', 'enums'];

evandrix

var console = unsafeWindow.console;

// a function that loads jQuery and calls a callback function when jQuery has finished loading
function addJQuery(callback) {
  var script = document.createElement("script");
  script.setAttribute("src", "http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js");
  script.addEventListener('load', function() {
    var script = document.createElement("script");
    script.textContent = "(" + callback.toString() + ")();";
    document.body.appendChild(script);

evandrix

<?php
    $user = $_POST['user'];
    $pass = $_POST['pass'];

    if ($user == "admin" && $pass == "pass") {
            //valid login
    } else {
            //invalid login
    }
?>

evandrix

<?php
    // ...

    if ($page == "admin" && !$user->isAdmin()) {
        include("admin.php");
    } else {
        include("/pages/{$page}.html");
    }
?>