Discover gists

Deobfuscating / Unminifying Obfuscated Web App / JavaScript Code

This collection is limited to only include the reports that were submitted as security vulnerabilities to the curl bug-bounty program on Hackerone.

[Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet. #2199174
Buffer Overflow Vulnerability in WebSocket Handling #2298307
Exploitable Format String Vulnerability in curl_mfprintf Function #2819666

See also:

Service	Type	RAM	Storage	Limitations
👉 Adaptable	PaaS	256 MB	Non-persistent? (1 GB database storage available)
AWS EC2	IaaS	1 GB		⚠️ Only free for 1 year

	#!/bin/sh

	declare -r LINE_NUMBER_PANE_WIDTH=3
	declare -r LINE_NUMBER_UPDATE_DELAY=0.1
	declare -r COLOR_NUMBERS_RGB="101;112;161"
	declare -r COLOR_ACTIVE_NUMBER_RGB="255;158;100"

	open_line_number_split(){
	local self_path=$(realpath $0)
	local pane_id=$(tmux display-message -pF "#{pane_id}")

	import regex
	from typing import List

	# Define constants
	MAX_HEADING_LENGTH = 7
	MAX_HEADING_CONTENT_LENGTH = 200
	MAX_HEADING_UNDERLINE_LENGTH = 200
	MAX_HTML_HEADING_ATTRIBUTES_LENGTH = 100
	MAX_LIST_ITEM_LENGTH = 200
	MAX_NESTED_LIST_ITEMS = 6

	QUESTION 1
	Which SysV init configuration file should be modified to disable the ctrl-alt-delete key combination?
	A. /etc/keys
	B. /proc/keys
	C. /etc/inittab
	D. /proc/inittab
	E. /etc/reboot

	QUESTION 2
	Which of the following information is stored within the BIOS? (Choose TWO correct answers.)

	import sys
	import re
	import exifread
	import requests
	import tldextract
	import webbrowser
	import whois
	from datetime import datetime

	def print_logo():

	:: Author: @mimiru

	@echo off
	setlocal

	:: Determine the path to floorp.exe
	set "FLOORP_PATH=%~dp0floorp.exe"

	:: Convert the path to use double backslashes for the registry
	set "FLOORP_PATH=%FLOORP_PATH:\=\\%"

	$Host.Runspace.LanguageMode

	Get-AuthenticodeSignature -FilePath C:\Demo\bypass_test.psm1
	Get-AuthenticodeSignature -FilePath C:\Demo\notepad_backdoored.exe

	# Try to execute the script. Add-Type will fail.
	Import-Module C:\Demo\bypass_test.psm1

	$VerifyHashFunc = 'HKLM:\SOFTWARE\Microsoft\Cryptography' +
	'\OID\EncodingType 0\CryptSIPDllVerifyIndirectData'