Aaron Esau Arinerron

gctf.sh

Usage:

wget https://gist.githubusercontent.com/sirdarckcat/087e32982bd77bddbd9c46ccbc72edf7/raw/gctf.sh && chmod +x gctf.sh
mkdir -p google-ctf-2019
DATABASE_URL=https://gctf-2019-da0962m957mnki9l.firebaseio.com ./gctf.sh google-ctf-2019/ctf
DATABASE_URL=https://gctf-2019-da0962m957mnki9l.firebaseio.com/beginners ./gctf.sh google-ctf-2019/bq

How to disable cloud-init in Ubuntu

Prevent start

Create an empty file to prevent the service from starting
```
  sudo touch /etc/cloud/cloud-init.disabled
```

	-----BEGIN OPENSSH PRIVATE KEY-----
	b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABBiHoTj/N
	8YjN3lH0rIZYX+AAAAEAAAAAEAAAGXAAAAB3NzaC1yc2EAAAADAQABAAABgQCWST7Uk1wo
	wExd6vpe7MKAakfSzTpTRYPZBq7HqZ6Gah7j/i30gzDtXNtfhnhvMGMCbnYNHfI4BZIRWA
	vU7VfHnYZDGY41Kh/FFwVGWn+JHxE5csymylJI45FpoaEWxqe7Fx8gOKFCNrB9Fv5rZo6J
	Kzj8B1nKAT/d8X87NPXOz6qnSLUa8Oa/hkIIcQh7VVhiiHMy6F6OsC3BDIbD/e9QXpFNxj
	zcz30WIsO462C0lIqiMQ1+LsfJhkVc5BL7YhxyrgQJ+EWDt+dtfrNprPNk05KqfIY7RBCE
	WUqw/xYkcz9UX5zdfX+4LXQr2ODyxO91f855gx3SlsNLY6q0APSaWc0uGUgXcZNNlQ3CyD
	9TSetkdejwRnwk2aM8AsI0LmLATnSNkr1mNCBZ+lxEmPNQsRPJaPjpYPUQpfNm6V84KyVD
	AEwkmH7pUP2JH1nZwpXjtv+T2uLp+quSpw+hvJswfBrDMZj3ZLtZrLzopzPStXc4N79YmX

	IMPORTS_TO_PATCH = [
	"alarm",
	"ptrace"
	]

	# iterate over imported symbols
	for import_sym in bv.get_symbols_of_type(SymbolType.ImportedFunctionSymbol):
	# check if symbol is in the patch list
	if import_sym.name in IMPORTS_TO_PATCH:
	log.log_info(f"patching out call to {import_sym.name}")

	#include <stdio.h>
	#include <stdlib.h>
	#include <string.h>


	void setbff(void)
	{
	setvbuf(stdin,(char *)0x0,2,0);
	setvbuf(stdout,(char *)0x0,2,0);
	setvbuf(stderr,(char *)0x0,2,0);

	let KEY = new Uint8Array(16);

	function generate_key() {
	let KEY = new Uint8Array(16);
	window.crypto.getRandomValues(KEY);
	return KEY;
	}

	KEY = generate_key();
	document.body.innerText = KEY;

	var_30= qword ptr -30h
	var_24= dword ptr -24h
	var_20= dword ptr -20h
	var_1C= dword ptr -1Ch
	var_18= dword ptr -18h
	var_14= dword ptr -14h
	var_10= dword ptr -10h
	var_8= qword ptr -8

	push rbp

	EthMan uses raw TCP/IP connections (not HTTP) for remote management and statistics. Optionally, "psw" field is added to requests is the password for remote management is set for miner.
	The following commands are available (JSON format):


	----------------
	REQUEST:
	{"id":0,"jsonrpc":"2.0","method":"miner_getstat1"}

	RESPONSE:
	{"result": ["9.3 - ETH", "21", "182724;51;0", "30502;30457;30297;30481;30479;30505", "0;0;0", "off;off;off;off;off;off", "53;71;57;67;61;72;55;70;59;71;61;70", "eth-eu1.nanopool.org:9999", "0;0;0;0"]}

	<html>
	<head>
	<title>turnitin.com PoC</title>
	</head>
	<body>

	<!--
	Search for the string "[jsfile]" without quotes and replace it with the URL to your custom js file you want to run.
	To test it out, replace "[jsfile]" with "https://arinerron.com/js/script.js".
	-->

Aaron Esau Arinerron

gctf.sh

How to disable cloud-init in Ubuntu

Prevent start

Uninstall