Skip to content

Instantly share code, notes, and snippets.

@Believe-AS
Believe-AS / writeup.md
Created August 26, 2025 05:56 — forked from securityMB/writeup.md
Lost In Transliteration - Writeup

Lost In Transliteration - Google CTF 2025 challenge writeup

Setup

The challenge is written in C#. In the beginning of Program.cs we can find the following line:

Encoding.RegisterProvider(CodePagesEncodingProvider.Instance);
# Enumeration
# Credential Injection
runas.exe /netonly /user:<domain>\<username> cmd.exe
# enumeration users
users
net user /domain
import requests
import socket
import sys
import random
import string
banner="""
`-=[SQL injection Queries]=-
HOW TO SUCCESSFULLY INJECTING SQL INJECTION
[~] after id no. like id=1 +/*!and*/+1=0 [~]
EX: site.com?index.php?pageid=3 div+0 Union select 1,version(),3,4,5
+div+0
+div false
+Having+1=0+
@Believe-AS
Believe-AS / getAllGlobals.js
Created November 1, 2024 07:44 — forked from colinrubbert/getAllGlobals.js
Get all runtime global variables set by the app
/**
* RuntimeGlobalsChecker
*
* You can use this utility to quickly check what variables have been added (or
* leaked) to the global window object at runtime (by JavaScript code).
* By running this code, the globals checker itself is attached as a singleton
* to the window object as "__runtimeGlobalsChecker__".
* You can check the runtime globals programmatically at any time by invoking
* "window.__runtimeGlobalsChecker__.getRuntimeGlobals()".
*