Programming

This commit is contained in:
alexanderajju 2021-05-16 11:58:25 +05:30
parent 7b7303abef
commit a81f421562
23 changed files with 177 additions and 113 deletions

View File

@ -0,0 +1 @@
I"³{"title"=>"Hacker blog", "description"=>"GitHub Pages for writeups, programming, Walkthroughts", "show_downloads"=>false, "google_analytics"=>nil, "theme"=>"jekyll-theme-hacker", "source"=>"/home/aju/alexanderajju.github.io", "destination"=>"/home/aju/alexanderajju.github.io/_site", "collections_dir"=>"", "cache_dir"=>".jekyll-cache", "plugins_dir"=>"_plugins", "layouts_dir"=>"_layouts", "data_dir"=>"_data", "includes_dir"=>"_includes", "collections"=>{"posts"=>{"output"=>true, "permalink"=>"/:categories/:year/:month/:day/:title:output_ext"}}, "safe"=>false, "include"=>[".htaccess"], "exclude"=>[".sass-cache", ".jekyll-cache", "gemfiles", "Gemfile", "Gemfile.lock", "node_modules", "vendor/bundle/", "vendor/cache/", "vendor/gems/", "vendor/ruby/"], "keep_files"=>[".git", ".svn"], "encoding"=>"utf-8", "markdown_ext"=>"markdown,mkdown,mkdn,mkd,md", "strict_front_matter"=>false, "show_drafts"=>nil, "limit_posts"=>0, "future"=>false, "unpublished"=>false, "whitelist"=>[], "plugins"=>[], "markdown"=>"kramdown", "highlighter"=>"rouge", "lsi"=>false, "excerpt_separator"=>"\n\n", "incremental"=>false, "detach"=>false, "port"=>"4000", "host"=>"127.0.0.1", "baseurl"=>nil, "show_dir_listing"=>false, "permalink"=>"date", "paginate_path"=>"/page:num", "timezone"=>nil, "quiet"=>false, "verbose"=>false, "defaults"=>[], "liquid"=>{"error_mode"=>"warn", "strict_filters"=>false, "strict_variables"=>false}, "kramdown"=>{"auto_ids"=>true, "toc_levels"=>[1, 2, 3, 4, 5, 6], "entity_output"=>"as_char", "smart_quotes"=>"lsquo,rsquo,ldquo,rdquo", "input"=>"GFM", "hard_wrap"=>false, "guess_lang"=>true, "footnote_nr"=>1, "show_warnings"=>false}, "livereload_port"=>35729, "serving"=>true, "watch"=>true, "url"=>nil}:ET

View File

@ -0,0 +1,22 @@
I"È<h1 id="writeups"><a href="./Writeups/writup.html">Writeups</a></h1>
<h1 id="coding"><a href="./Coding/coding.html">Coding</a></h1>
<div class="language-js highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c1">// Javascript code with syntax highlighting.</span>
<span class="kd">var</span> <span class="nx">fun</span> <span class="o">=</span> <span class="kd">function</span> <span class="nx">lang</span><span class="p">(</span><span class="nx">l</span><span class="p">)</span> <span class="p">{</span>
<span class="nx">dateformat</span><span class="p">.</span><span class="nx">i18n</span> <span class="o">=</span> <span class="nx">require</span><span class="p">(</span><span class="dl">"</span><span class="s2">./lang/</span><span class="dl">"</span> <span class="o">+</span> <span class="nx">l</span><span class="p">);</span>
<span class="k">return</span> <span class="kc">true</span><span class="p">;</span>
<span class="p">};</span>
</code></pre></div></div>
<div class="language-ruby highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c1"># Ruby code with syntax highlighting</span>
<span class="no">GitHubPages</span><span class="o">::</span><span class="no">Dependencies</span><span class="p">.</span><span class="nf">gems</span><span class="p">.</span><span class="nf">each</span> <span class="k">do</span> <span class="o">|</span><span class="n">gem</span><span class="p">,</span> <span class="n">version</span><span class="o">|</span>
<span class="n">s</span><span class="p">.</span><span class="nf">add_dependency</span><span class="p">(</span><span class="n">gem</span><span class="p">,</span> <span class="s2">"= </span><span class="si">#{</span><span class="n">version</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span>
<span class="k">end</span>
</code></pre></div></div>
<div class="language-python highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">def</span> <span class="nf">fun</span><span class="p">():</span>
<span class="k">print</span><span class="p">(</span><span class="s">"Hello world!"</span><span class="p">)</span>
<span class="k">return</span>
</code></pre></div></div>
:ET

View File

@ -0,0 +1,2 @@
I"Ç<p>Ready is a medium difficulty Linux machine. A vulnerable version of GitLab server leads to a remotecommand execution, by exploiting a combination of SSRF and CRLF vulnerabilities. Bad permission on abacked up configuration file of the Gitlab server, reveals a password that is found to be reusable for theuser root, inside a docker container. After root access is acquired, escaping the container is possible sinceit is running in privileged mode.</p>
:ET

View File

@ -0,0 +1,9 @@
I"™<h1 id="skills-learned">Skills learned</h1>
<ul>
<li>SSRF &amp; CRLF Attacks</li>
<li>Docker Escape</li>
</ul>
<p><a href="../writup">back</a></p>
:ET

View File

@ -0,0 +1,2 @@
I"0<h1 id="python"><a href="">Python</a></h1>
:ET

View File

@ -0,0 +1,6 @@
I"v<h2 id="welcome-to-another-page">Welcome to another page</h2>
<p><em>yay</em></p>
<p><a href="./">back</a></p>
:ET

View File

@ -0,0 +1,2 @@
I"B<p>GitHub Pages for writeups, programming, Walkthroughts</p>
:ET

View File

@ -0,0 +1,3 @@
I"ö<h1 id="ready"><a href="./Ready/Ready.html">Ready</a></h1>
<p>Ready is a medium difficulty Linux machine. A vulnerable version of GitLab server leads to a remotecommand execution, by exploiting a combination of SSRF and CRLF vulnerabilities.</p>
:ET

6
Coding/coding.md Normal file
View File

@ -0,0 +1,6 @@
---
layout: pages
description: Programming
---
# [Python]()

16
Writeups/Ready/Ready.md Normal file
View File

@ -0,0 +1,16 @@
---
layout: post
author: Aju ALex
pdf_url: ready.pdf
title: Ready
date: 2021-05-15
publish: True
description: "Ready is a medium difficulty Linux machine. A vulnerable version of GitLab server leads to a remotecommand execution, by exploiting a combination of SSRF and CRLF vulnerabilities. Bad permission on abacked up configuration file of the Gitlab server, reveals a password that is found to be reusable for theuser root, inside a docker container. After root access is acquired, escaping the container is possible sinceit is running in privileged mode."
---
# Skills learned
- SSRF & CRLF Attacks
- Docker Escape
[back](../writup)

BIN
Writeups/Ready/ready.pdf Normal file

Binary file not shown.

7
Writeups/writup.md Normal file
View File

@ -0,0 +1,7 @@
---
layout: pages
description: Hackthebox
---
# [Ready](./Ready/Ready.html)
Ready is a medium difficulty Linux machine. A vulnerable version of GitLab server leads to a remotecommand execution, by exploiting a combination of SSRF and CRLF vulnerabilities.

View File

@ -1,5 +1,5 @@
title: Hacker theme
description: Hacker is a theme for GitHub Pages.
show_downloads: true
title: Hacker blog
description: GitHub Pages for writeups, programming, Walkthroughts
show_downloads: false
google_analytics:
theme: jekyll-theme-hacker
theme: jekyll-theme-hacker

View File

@ -23,7 +23,15 @@
<a href="{{ site.github.zip_url }}" class="btn">Download as .zip</a>
<a href="{{ site.github.tar_url }}" class="btn">Download as .tar.gz</a>
{% endif %}
<a href="{{ site.github.repository_url }}" class="btn btn-github"><span class="icon"></span>View on GitHub</a>
{% if page.pdf_url %}
{% if page.publish %}
<a href="{{ page.pdf_url }}" class="btn btn-github"><span class="icon"></span>View as Pdf</a>
{% endif %}
{% endif %}
</section>
</div>
</header>

50
_layouts/pages.html Normal file
View File

@ -0,0 +1,50 @@
<!DOCTYPE html>
<html lang="{{ site.lang | default: "en-US" }}">
<head>
<meta charset='utf-8'>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="{{ '/assets/css/style.css?v=' | append: site.github.build_revision | relative_url }}">
{% seo %}
</head>
<body>
<header>
<div class="container">
<a id="a-title" href="{{ '/' | relative_url }}">
<h1>{{ site.title | default: site.github.repository_name }}</h1>
<h2>{{ page.description }}</h2>
</a>
<section id="downloads">
{% if site.show_downloads %}
<a href="{{ site.github.zip_url }}" class="btn">Download as .zip</a>
<a href="{{ site.github.tar_url }}" class="btn">Download as .tar.gz</a>
{% endif %}
<a href="{{ '/' | relative_url }}" class="btn btn-github"><span class="icon"></span>View Home</a>
</section>
</div>
</header>
<div class="container">
<section id="main_content">
{{ content }}
</section>
</div>
{% if site.google_analytics %}
<script>
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', '{{ site.google_analytics }}', 'auto');
ga('send', 'pageview');
</script>
{% endif %}
</body>
</html>

View File

@ -2,13 +2,13 @@
layout: default
---
{% if page.publish %}
<small>{{ page.date | date: "%-d %B %Y" }}</small>
<h1>{{ page.title }}</h1>
<p>{{page.description}}</p>
<p class="view">by {{ page.author | default: site.author }}</p>
{{content}}
{% if page.tags %}
<small>tags: <em>{{ page.tags | join: "</em> - <em>" }}</em></small>
{% endif %}
{{content}} {% if page.tags %}
<small>tags: <em>{{ page.tags | join: "</em> - <em>" }}</em></small>
{% endif %} {% endif %}

15
_layouts/writeup.html Normal file
View File

@ -0,0 +1,15 @@
---
layout: default
---
<h1>{{ page.writeups }}</h1>
{% for wp in page.writeups %}
<h1>{{wp}}</h1>
{% endfor %}
<p class="view">by {{ page.author | default: site.author }}</p>
{{content}} {% if page.tags %}
<small>tags: <em>{{ page.tags | join: "</em> - <em>" }}</em></small>
{% endif %}

111
index.md
View File

@ -2,32 +2,16 @@
layout: default
---
Text can be **bold**, _italic_, ~~strikethrough~~ or `keyword`.
# [Writeups](./Writeups/writup.html)
[Link to another page](./another-page.html).
There should be whitespace between paragraphs.
There should be whitespace between paragraphs. We recommend including a README, or a file with information about your project.
# Header 1
This is a normal paragraph following a header. GitHub is a code hosting platform for version control and collaboration. It lets you and others work together on projects from anywhere.
## Header 2
> This is a blockquote following a header.
>
> When something is important enough, you do it even if the odds are not in your favor.
### Header 3
# [Coding](./Coding/coding.html)
```js
// Javascript code with syntax highlighting.
var fun = function lang(l) {
dateformat.i18n = require('./lang/' + l)
dateformat.i18n = require("./lang/" + l);
return true;
}
};
```
```ruby
@ -37,87 +21,8 @@ GitHubPages::Dependencies.gems.each do |gem, version|
end
```
#### Header 4
* This is an unordered list following a header.
* This is an unordered list following a header.
* This is an unordered list following a header.
##### Header 5
1. This is an ordered list following a header.
2. This is an ordered list following a header.
3. This is an ordered list following a header.
###### Header 6
| head1 | head two | three |
|:-------------|:------------------|:------|
| ok | good swedish fish | nice |
| out of stock | good and plenty | nice |
| ok | good `oreos` | hmm |
| ok | good `zoute` drop | yumm |
### There's a horizontal rule below this.
* * *
### Here is an unordered list:
* Item foo
* Item bar
* Item baz
* Item zip
### And an ordered list:
1. Item one
1. Item two
1. Item three
1. Item four
### And a nested list:
- level 1 item
- level 2 item
- level 2 item
- level 3 item
- level 3 item
- level 1 item
- level 2 item
- level 2 item
- level 2 item
- level 1 item
- level 2 item
- level 2 item
- level 1 item
### Small image
![Octocat](https://github.githubassets.com/images/icons/emoji/octocat.png)
### Large image
![Branching](https://guides.github.com/activities/hello-world/branching.png)
### Definition lists can be used with HTML syntax.
<dl>
<dt>Name</dt>
<dd>Godzilla</dd>
<dt>Born</dt>
<dd>1952</dd>
<dt>Birthplace</dt>
<dd>Japan</dd>
<dt>Color</dt>
<dd>Green</dd>
</dl>
```
Long, single-line code blocks should not wrap. They should horizontally scroll if they are too long. This line should be long enough to demonstrate this.
```
```
The final element.
```python
def fun():
print("Hello world!")
return
```