nat/htmlgen
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

remove a name

Browse Source
This commit is contained in:
gnat 2024-10-19 22:00:56 -07:00
parent e68a6374c4
commit 65b177f9d4
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/home.lisp
View File

@ -35,7 +35,7 @@
(span () ,(exec-command "for file in ./files/88x31/*; do (file -i \"$file\" | grep -qE 'image/') && echo \"<img src=\\\"$file\\\" width=88 height=31/>\" || cat \"$file\"; done | shuf")))
(section ()
(h2 () "post arbitrary data to be displayed here")
"yes, it does sanitize this" (a (:href "/html/albert-hack-1.html") "<del>(No you don't --sanitization tester)</del>") "yes, it does")
"yes, it does sanitize this" (a (:href "/html/unnamed-friend-entity-hack-1.html") "<del>(No you don't --sanitization tester)</del>") "yes, it does")
(section (:class "ignore-section")
(form (:action "#" :method "post")
(label (:for "text") "post text:")

2
src/html/cool-sites.lisp
View File

@ -60,7 +60,7 @@
(a (:href "http://puppygirl.systems") "puppygirl.systems (stupid idiot who types &lt;hr/&gt;)")
" Semi functional now")
(span ()
"albert: "
"unnamed friend entity: "
(a (:href "https://iso-9995-9.com") "iso-9995-9.com")
" (down? dns issue maybe)")
(span ()

6
src/html/albert-hack-1.lisp → src/html/unnamed-friend-entity-hack-1.lisp
View File

@ -1,5 +1,5 @@
(defun html ()
(page "albert" `((section ()
(page "unnamed friend entity" `((section ()
(h1 () "a friend hacked its website.")
(p () "but how?"))
(section ()
@ -8,7 +8,7 @@
this was due to any url beginning with '/html/' being unconditionally put through parse_file(), which generates static content from the embedded bash in the html (see <a href='/html/site-info.html'></a>).
in addition to this, the source code of the server could be attained via a similar method, requesting the path of the file, but with /files/ or /html/ in front of it, followed by %2e%2e.")
(p () "
albert was able to exploit this by first getting the source code of the webserver via the second method discussed above, examining it, and deducing the first vulnerability mentioned above.
unnamed friend entity was able to exploit this by first getting the source code of the webserver via the second method discussed above, examining it, and deducing the first vulnerability mentioned above.
upon discovering the RCE available via the comment untrusted command evaluation, they were able to add an ssh key to this one's server and thus gain a shell.
amazingly, at the same time that they did this, natalie's other friend's girlfriend (appearing in the comments as gexfan) was halfheartedly trying to mess with its site.
this ended with around 15 messages on discord telling it its site had been hacked, only around two of which were from albert.")))))
this ended with around 15 messages on discord telling it its site had been hacked, only around two of which were from unnamed friend entity.")))))