Skip to content

Instantly share code, notes, and snippets.

View untrusted-lvl1-solution.js
/*****************
* cellBlockA.js *
*****************
*
* Good morning, Dr. Eval.
*
* It wasn't easy, but I've managed to get your computer down
* to you. This system might be unfamiliar, but the underlying
* code is still JavaScript. Just like we predicted.
*
View gist:cf1882ea30c092e6edaa3f0f78887b49
javascript:(function(){(function () {var i, elements = document.querySelectorAll('body *');document.body.style.overflow = '';for (i = 0; i < elements.length; i++) {if (getComputedStyle(elements[i]).position === 'fixed') {elements[i].parentNode.removeChild(elements[i]);}}})()})()
View initial_Table.json
[
{id: 1, name: "Anya", description: "description", info1: "info", info2: "info"},
{id: 2, name: "Petya", description: "description", info1: "info", info2: "info"},
{id: 3, name: "Stepan", description: "description", info1: "info", info2: "info"},
{id: 4, name: "Vova", description: "description", info1: "info", info2: "info"}
]
View untrusted-lvl8-solution.js
/*******************
* intoTheWoods.js *
*******************
*
* Ah, you're out of the woods now. Or into the woods, as the
* case may be.
*
* So take a deep breath, relax, and remember what you're here
* for in the first place.
*
@AlexandrShinkevich87
AlexandrShinkevich87 / write_to_file.py
Created Sep 10, 2020
write data into one file though several threads
View write_to_file.py
import os
from concurrent.futures import Future
# from concurrent.futures.thread import ThreadPoolExecutor as PoolExecutor
from concurrent.futures.process import ProcessPoolExecutor as PoolExecutor
strs = [
"aaa",
"bbbb",
"ccc",
"dddd",
"eeee"
@utomoreza
utomoreza / spaCy-NER_2.py
Created Sep 10, 2020
Labelling_spaCy-NER
View spaCy-NER_2.py
# define annotations used
annotations = sorted(['nama',
'tanggal',
'hari',
'lokasi',
'organisasi',
])
# import the function needed for converting from text to dataframe for tagging,
# and the function for converting to spaCy format
@vcatafesta
vcatafesta / .zshrc
Created Sep 10, 2020 — forked from ThYpHo0n/.zshrc
WSL(2) bash profile helpers
View .zshrc
# Windows XSrv config
export $(dbus-launch)
export LIBGL_ALWAYS_INDIRECT=1
export WSL_VERSION=$(wsl.exe -l -v | grep -a '[*]' | sed 's/[^0-9]*//g')
export WSL_HOST=$(tail -1 /etc/resolv.conf | cut -d' ' -f2)
export DISPLAY=$WSL_HOST:0
View CWE-78-oscommandinjection-memo.md

概要

image001 (4)

影響

サーバ内のファイルが不正に操作される

ファイルが閲覧されることで、個人情報や機密情報などが漏えいする可能性や、改ざん、消去されることで、ウェブページや設定ファイルが改ざんされたり、システムが停止したりするといった被害が発生する可能性があります。

不正にシステムを操作される

不正にシステムを操作されることで、意図しないOSのシャットダウンが行われたり、ユーザの追加や変更が行われたりする可能性があります。

不正なプログラムがダウンロード、実行される

不正にプログラムがダウンロード、実行されることで、ウイルスやワーム、ボットに感染してしまったり、システムへ次回も不正に侵入が行えたりするようバックドアが設置されてしまう可能性があります。

@romaneckert
romaneckert / generated values in table with virtual column
Created Sep 10, 2020
generated values in table with virtual column
View generated values in table with virtual column
/**
* @ORM\Column(columnDefinition="varchar(255) GENERATED ALWAYS AS (case when roles = '[""ROLE_ADMIN""]' then 'Administrator' when roles = '[""ROLE_VISITOR""]' then 'Besucher' when roles = '[""ROLE_CINEMA""]' then 'Kinobetreiber' when roles = '[""ROLE_TICKET_VALIDATOR""]' then 'Ticketentwerter' else '' end)")
*/
private ?string $plainRoles;
You can’t perform that action at this time.