Skip to content

Instantly share code, notes, and snippets.

View icheernoom's full-sized avatar
😆
Focusing

ICheer_No0M icheernoom

😆
Focusing
View GitHub Profile
@icheernoom
icheernoom / boringssl.md
Created October 6, 2021 07:08 — forked from owen800q/boringssl.md
boringssl library's ssl pinning bypass

function bytes sequence signature

arm 32

2D E9 F0 4F A3 B0 81 46 50 20 10 70 D9 F8 98 70 00 2F

arm 64

FF 03 05 D1 FC 6B 0F A9 F9 63 10 A9 F7 5B 11 A9 F5 53 12 A9 F3 7B 13 A9 08 0A 80 52 48 00 00 39 16 54 40 F9 56 07 00 B4 C8 02 40 F9 08 07 00 B4 29 20 40 A9 F3 03 02 AA
alert(document.domain);
@icheernoom
icheernoom / http-benchmark.md
Created February 6, 2017 06:49 — forked from denji/http-benchmark.md
HTTP(S) Benchmark Tools / Toolkit for testing/debugging HTTP(S) and restAPI (RESTful)

Tools

Located in alphabetical order (not prefer)

  • ab – slow and single threaded, written in C
  • apib – most of the features of ApacheBench (ab), also designed as a more modern replacement, written in C
  • baloo – Expressive end-to-end HTTP API testing made easy, written in Go (golang)
  • bombardier – Fast crossplatform HTTP benchmarking tool, written in Go (golang)
  • curl-loader – performance loading of various application services and traffic generation, written in C
  • fasthttploader – benchmark (kinda ab) with autoadjustment and charts based on fasthttp library, write in Go (golang)
@icheernoom
icheernoom / server.py
Created August 5, 2016 08:49 — forked from yeukhon/server.py
sql-injection
from bottle import route, run, request
import MySQLdb
# connect
db = MySQLdb.connect(host="localhost", user="root", passwd="password", db="testing")
cursor = db.cursor()
@route('/users')
def hello():
{{ $var }} - Echo content
{{ $var or 'default' }} - Echo content with a default value
{{{ $var }}} - Echo escaped content
{{-- Comment --}} - A Blade comment
@extends('layout') - Extends a template with a layout
@if(condition) - Starts an if block
@else - Starts an else block
@elseif(condition) - Start a elseif block
@endif - Ends a if block
@icheernoom
icheernoom / Artisan.php
Created June 20, 2016 17:27
Laravel Cheat Sheet
php artisan --help OR -h
php artisan --quiet OR -q
php artisan --version OR -V
php artisan --no-interaction OR -n
php artisan --ansi
php artisan --no-ansi
php artisan --env
// -v|vv|vvv Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug
php artisan --verbose
@icheernoom
icheernoom / web50.py
Created November 23, 2015 04:51
Python script to solve "Phone Lock" challenge in Hack Dat Kiwi 2015
#!/usr/bin/python
# Author: Kitwipat Towattana (@icheernoom)
import hashlib, sys
salt = 'f074dc1fbaaf66163dfca8ad1079ceea' # random
valid = 'a8178dee94945e518c90dad6bffcc657' # random
'''
if (md5(salt+result)==valid)
@icheernoom
icheernoom / stegano200.py
Last active November 4, 2015 16:25
Python script to solve "Meaningless Text" challenge in School CTF 2015
#!/usr/bin/python
# Author: Kitwipat Towattana (@icheernoom)
import binascii
strings = '''
<h2>Sixth <e>zero</e> Rule Unto Good</h2>
<p>Make one sixth light fruitful their air light <e>one</e> kind us <em>flag</em> that multiply his all thing Seas for may <e>one</e> said creature. Bring fifth form doesn't may, don't fill moved they're be <e>zero</e> shall was life multiply set meat thing spirit <e>zero</e> morning. Winged man. Replenish multiply. Can't every fruit <e>one</e> place green hath fruitful <e>one</e> male life was fruit creature days his. Grass. Behold above lights, day <e>zero</e> spirit the abundantly creepeth was abundantly, i were male given all they're <e>zero</e> all herb wherein <e>one</e> earth saw void god bring had meat man. Man was day waters saw. And so. To itself <e>one</e> saw sixth form light us <e>zero</e> under meat good. Firmament. She'd seed unto fowl given day whales behold <e>one</e> said whales that dominion first. May cattle. <e>one</e> Creature doesn't night likeness divid
@icheernoom
icheernoom / prog50.py
Created August 25, 2015 05:05
Python script to solve "Statistics" challenge in IceCTF 2015
#!/usr/bin/python
# Author: Kitwipat Towattana (@icheernoom)
import socket, re, time
def get_num(recv):
m = re.match("(.+)\nGimme", recv)
num = m.group(1).split(' ')
num = map(int, num)
return num
@icheernoom
icheernoom / web350.py
Created July 12, 2015 08:38
Python script to solve "Magic Chall" challenge in PoliCTF 2015
#!/usr/bin/python
# Author: Kitwipat Towattana (@icheernoom)
import urllib, urllib2, re, sys, socket, random
if len(sys.argv) < 2:
print "Usage: {0} {1}".format(sys.argv[0], "\"<?php phpinfo(); >\"")
sys.exit()
host = socket.gethostbyaddr("127.0.0.1")[0] #change to your ip