Artfaith serious-angel

Bypassing Discord marked links filter

Recently a friend of mine showed me a way to use hyperlinks on Discord. Discord has a markdown notation support, so users can enhance their messages with formatting, using bold, itallic, titles, etc. It's also possible to use what Discord calls masked links, which are hyperlinks, just like normal markdown, using the syntax [text](https://example.com). The result is the following:

In the context of cybersecurity, one of the first things that comes to mind is to try to make a fake link, putting another URL on the "text" part. It would be something like [https://example.com](https://malicious.com). By doing so, an user would see the URL https://example.com, but by clicking on it, he would be redirected to https://malicious.com.

ANSI Escape Sequences

Standard escape codes are prefixed with Escape:

Ctrl-Key: ^[
Octal: \033
Unicode: \u001b
Hexadecimal: \x1B
Decimal: 27

NPX (NPM Package Runner) Commands

List of useful npx (NPM Package Runner) commands.

What is NPX?

Using NPX we can execute/run node binaries without the need to install it locally or globally.

Commands

Demo:

Spoiler warning

Spoiler text. Note that it's important to have a space after the summary tag. You should be able to write any markdown you want inside the <details> tag... just make sure you close <details> afterward.

console.log("I'm a code block!");

	wget https://www.python.org/ftp/python/2.7.18/Python-2.7.18.tgz
	tar xzf Python-2.7.18.tgz
	cd Python-2.7.18
	sudo ./configure --enable-optimizations
	sudo make altinstall
	sudo ln -s "/usr/local/bin/python2.7" "/usr/bin/python"

	#!/bin/bash
	REGION="eu" # eu or us
	TTC="/mnt/games/SteamLibrary/steamapps/compatdata/306130/pfx/drive_c/users/steamuser/My Documents/Elder Scrolls Online/live/AddOns/TamrielTradeCentre"
	ZIP="/tmp/PriceTable.zip"

	wget -O $ZIP https://$REGION.tamrieltradecentre.com/download/PriceTable
	unzip -o $ZIP -d "$TTC"

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<link rel="icon" type="image/x-icon" href="/favicon.ico">
	<title>Rebane's Discord Colored Text Generator</title>
	<meta charset="UTF-8">
	<meta name="description" content="Rebane's Discord Colored Text Generator">
	<meta name="author" content="rebane2001">
	<style>
	/*

	<?php

	namespace App\Http\Middleware;

	use Closure;
	use Barryvdh\Debugbar\Facade as Debugbar;

	class NoDebugbar
	{
	/**

	$ git config --global --replace-all credential.interactive false
	$ git config --global --replace-all credential.modalPrompt false

	$ git config --edit --system

	# remove line
	helper = manager

	# To disable openssh password prompt, add these 2 lines
	[core]

	$endpoint = New-Object System.Net.IPEndPoint ([System.Net.IPAddress]::any, 1600)
	$Listener = New-Object System.Net.Sockets.TcpListener $endpoint
	$Listener.Start()
	$client = $Listener.AcceptTcpClient()
	$stream = $client.GetStream()
	$stream.Write([text.Encoding]::Ascii.GetBytes("Hello Telnet World"), 0, 18)