Bharath Kumar Ravichandran BharathKumarRavichandran

MySQL Cheat Sheet

Help with SQL commands to interact with a MySQL database

MySQL Locations

Mac /usr/local/mysql/bin
Windows /Program Files/MySQL/MySQL version/bin
Xampp /xampp/mysql/bin

Add mysql to your PATH

Django 2.x Cheat Sheet

Creating a virtual environment

We need to create a virtual env for our app to run in: More Here Run this command in whatever folder you want to create your venv folder

python -m venv ./venv

Docker Commands, Help & Tips

Show commands & management commands

$ docker

Docker version info

This gist has been DEPRECATED.

The official version is found at https://berzerk0.github.io/GitPage/CTF-Writeups/ZorZ-Vulnhub.html

Updates will be reflected on GITPAGE VERSIONS ONLY

A Few WebApp File Upload Vulnerabilities Explained - CTF Writeup: Zorz

20 November 2017

This is "CTF" is more of a vulnerability sandbox than a true Capture the Flag challenge. However, it is a great way to explore some WebApp Upload vulnerabilities.

The VulnHub description says:

A non-exhaustive list of WebGL and WebGPU frameworks and libraries. It is mostly for learning purposes as some of the libraries listed are wip/outdated/not maintained anymore.

Engines and libraries ⚙️

Name	Stars	Last Commit	Description
three.js	![GitHub

	/*
	** pipex.c - multipipes support
	*/

	#include <stdlib.h>
	#include <unistd.h>
	#include <stdio.h>

	/*
	* loop over commands by sharing

	#!/bin/bash
	iatest=$(expr index "$-" i)

	#######################################################
	# SOURCED ALIAS'S AND SCRIPTS BY zachbrowne.me
	#######################################################

	# Source global definitions
	if [ -f /etc/bashrc ]; then
	. /etc/bashrc

	# ~/.bashrc: executed by bash(1) for non-login shells.
	# .see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
	# for examples
	# If running non interactively, do nothing

	########################################################
	#\|# Preamble #
	########################################################
	[ -z "$PS1" ] && return

	#!/usr/bin/env bash

	# How to start:
	# 1. Sign up for DigitalOcean with this link https://www.digitalocean.com/
	# 2. Go to https://cloud.digitalocean.com/settings/applications and find you API key
	# 3. In your shell, run 'export DIGITALOCEAN_TOKEN="INSERT TOKEN HERE"', without the outer quotes.
	# 4. `brew install jq`
	# 5. `./digitalocean-proxy`
	# 6. When you are done, press CTRL+C ONCE, and everything will be cleaned up.

	## How to hide API keys from github ##

	1. If you have already pushed commits with sensitive data, follow this guide to remove the sensitive info while
	retaining your commits: https://help.github.com/articles/remove-sensitive-data/

	2. In the terminal, create a config.js file and open it up:

	touch config.js
	atom config.js