Skip to content

Instantly share code, notes, and snippets.

View l3ouu4n9's full-sized avatar
😈
KEEP

Leo Wang l3ouu4n9

😈
KEEP
View GitHub Profile
@l3ouu4n9
l3ouu4n9 / rails_rce.rb
Created July 28, 2021 13:48 — forked from postmodern/rails_rce.rb
Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#!/usr/bin/env ruby
#
# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#
# ## Advisory
#
# https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
#
# ## Caveats
#
@l3ouu4n9
l3ouu4n9 / intern-grep
Last active July 10, 2021 05:52
grep historical data of company interns
#!/bin/bash
# For https://github.com/pittcsc/Summer2022-Internships
# Should have git installed.
# Output file is in markdown format. Default: output.md
# E.g.
# ./intern-grep -F "Cisco" -o cisco.md
# ./intern-grep -E "Amazon.*?Cloud"
# ./intern-grep -i -E "crowdstrike"
Start GDB and execute the following commands:
catch syscall ptrace
commands 1
set ($eax) = 0
continue
end
Then, run the app and voilá! you can debug your program :)
################### This section will mostly remain as it is ###################
def queueRequests(target, wordlists):
engine = RequestEngine(endpoint=target.endpoint,
concurrentConnections=5,
requestsPerConnection=100,
pipeline=False
)
################### ---------------------------------------- ###################