pocorgtfo07.pdf

(32607 KB) Pobierz
BPGû`„p† ôüôü%PDF-1.5
%ÐÔÅØ
1 0 obj
<<
/Length 190207    
>>
stream

-->
<html>
<head>
<title>PoC||GTFO 0x07 - ZIP/PDF/BPG/HTML polyglot</title>
<script type="text/javascript">
function b(a){throw a;}var h=void 0,j=!0,k=null,l;l||(l=eval("(function() { try { return Module || {} } catch(e) { return {} } })()"));var q={},t;for(t in l)l.hasOwnProperty(t)&&(q[t]=l[t]);var u="object"===typeof process&&"function"===typeof require,v="object"===typeof window,aa="function"===typeof importScripts,w=!v&&!u&&!aa;
if(u){l.print||(l.print=function(a){process.stdout.write(a+"\n")});l.printErr||(l.printErr=function(a){process.stderr.write(a+"\n")});var ba=require("fs"),ca=require("path");l.read=function(a,d){var a=ca.normalize(a),c=ba.readFileSync(a);!c&&a!=ca.resolve(a)&&(a=path.join(__dirname,"..","src",a),c=ba.readFileSync(a));c&&!d&&(c=c.toString());return c};l.readBinary=function(a){return l.read(a,j)};l.load=function(a){da(read(a))};l.thisProgram=process.argv[1].replace(/\\/g,"/");l.arguments=process.argv.slice(2);
"undefined"!==typeof module&&(module.exports=l);process.on("uncaughtException",function(a){a instanceof ea||b(a)})}else w?(l.print||(l.print=print),"undefined"!=typeof printErr&&(l.printErr=printErr),l.read="undefined"!=typeof read?read:function(){b("no read() available (jsc?)")},l.readBinary=function(a){if("function"===typeof readbuffer)return new Uint8Array(readbuffer(a));a=read(a,"binary");x("object"===typeof a);return a},"undefined"!=typeof scriptArgs?l.arguments=scriptArgs:"undefined"!=typeof arguments&&
(l.arguments=arguments),this.Module=l,eval("if (typeof gc === 'function' && gc.toString().indexOf('[native code]') > 0) var gc = undefined")):v||aa?(l.read=function(a){var d=new XMLHttpRequest;d.open("GET",a,!1);d.send(k);return d.responseText},"undefined"!=typeof arguments&&(l.arguments=arguments),"undefined"!==typeof console?(l.print||(l.print=function(a){console.log(a)}),l.printErr||(l.printErr=function(a){console.log(a)})):l.print||(l.print=function(){}),v?window.Module=l:l.load=importScripts):
b("Unknown runtime environment. Where are we?");function da(a){eval.call(k,a)}!l.load&&l.read&&(l.load=function(a){da(l.read(a))});l.print||(l.print=function(){});l.printErr||(l.printErr=l.print);l.arguments||(l.arguments=[]);l.thisProgram||(l.thisProgram="./this.program");l.print=l.print;l.a=l.printErr;l.preRun=[];l.postRun=[];for(t in q)q.hasOwnProperty(t)&&(l[t]=q[t]);
var z={M:function(a){fa=a},J:function(){return fa},m:function(){return y},q:function(a){y=a},o:function(a){switch(a){case "i1":case "i8":return 1;case "i16":return 2;case "i32":return 4;case "i64":return 8;case "float":return 4;case "double":return 8;default:return"*"===a[a.length-1]?z.f:"i"===a[0]?(a=parseInt(a.substr(1)),x(0===a%8),a/8):0}},I:function(a){return Math.max(z.o(a),z.f)},O:16,Y:function(a,d,c){return!c&&("i64"==a||"double"==a)?8:!a?Math.min(d,8):Math.min(d||(a?z.I(a):0),z.f)},j:function(a,
d,c){return c&&c.length?(c.splice||(c=Array.prototype.slice.call(c)),c.splice(0,0,d),l["dynCall_"+a].apply(k,c)):l["dynCall_"+a].call(k,d)},c:[],t:function(a){for(var d=0;d<z.c.length;d++)if(!z.c[d])return z.c[d]=a,2*(1+d);b("Finished up all reserved function pointers. Use a higher value for RESERVED_FUNCTION_POINTERS.")},L:function(a){z.c[(a-2)/2]=k},Z:function(a,d){z.i||(z.i={});var c=z.i[a];if(c)return c;for(var c=[],e=0;e<d;e++)c.push(String.fromCharCode(36)+e);e=Pointer_stringify(a);'"'===e[0]&&
(e.indexOf('"',1)===e.length-1?e=e.substr(1,e.length-2):A("invalid EM_ASM input |"+e+"|. Please use EM_ASM(..code..) (no quotes) or EM_ASM({ ..code($0).. }, input) (to input values)"));try{var f=eval("(function(Module, FS) { return function("+c.join(",")+"){ "+e+" } })")(l,"undefined"!==typeof FS?FS:k)}catch(g){l.a("error in executing inline EM_ASM code: "+g+" on: \n\n"+e+"\n\nwith args |"+c+"| (make sure to use the right one out of EM_ASM, EM_ASM_ARGS, etc.)"),b(g)}return z.i[a]=f},e:function(a){z.e.l||
(z.e.l={});z.e.l[a]||(z.e.l[a]=1,l.a(a))},k:{},aa:function(a,d){x(d);z.k[d]||(z.k[d]={});var c=z.k[d];c[a]||(c[a]=function(){return z.j(d,a,arguments)});return c[a]},s:function(){var a=[],d=0;this.ea=function(c){c&=255;if(0==a.length){if(0==(c&128))return String.fromCharCode(c);a.push(c);d=192==(c&224)?1:224==(c&240)?2:3;return""}if(d&&(a.push(c),d--,0<d))return"";var c=a[0],e=a[1],f=a[2],g=a[3];2==a.length?c=String.fromCharCode((c&31)<<6|e&63):3==a.length?c=String.fromCharCode((c&15)<<12|(e&63)<<
6|f&63):(c=(c&7)<<18|(e&63)<<12|(f&63)<<6|g&63,c=String.fromCharCode(((c-65536)/1024|0)+55296,(c-65536)%1024+56320));a.length=0;return c};this.K=function(a){for(var a=unescape(encodeURIComponent(a)),d=[],f=0;f<a.length;f++)d.push(a.charCodeAt(f));return d}},$:function(){b("You must build with -s RETAIN_COMPILER_SETTINGS=1 for Runtime.getCompilerSetting or emscripten_get_compiler_setting to work")},d:function(a){var d=y;y=y+a|0;y=y+15&-16;return d},N:function(a){var d=B;B=B+a|0;B=B+15&-16;return d},
b:function(a){var d=C;C=C+a|0;C=C+15&-16;C>=F&&A("Cannot enlarge memory arrays. Either (1) compile with -s TOTAL_MEMORY=X with X higher than the current value "+F+", (2) compile with ALLOW_MEMORY_GROWTH which adjusts the size at runtime but prevents some optimizations, or (3) set Module.TOTAL_MEMORY before the program runs.");return d},g:function(a,d){return Math.ceil(a/(d?d:16))*(d?d:16)},da:function(a,d,c){return c?+(a>>>0)+4294967296*+(d>>>0):+(a>>>0)+4294967296*+(d|0)},r:8,f:4,P:0};
l.Runtime=z;z.addFunction=z.t;z.removeFunction=z.L;var G=!1,H,ga,fa;function x(a,d){a||A("Assertion failed: "+d)}function ha(a){var d=l["_"+a];if(!d)try{d=eval("_"+a)}catch(c){}x(d,"Cannot call unknown function "+a+" (perhaps LLVM optimizations or closure removed it?)");return d}var ia,ja;
(function(){function a(a){a=a.toString().match(f).slice(1);return{arguments:a[0],body:a[1],returnValue:a[2]}}var d=0,c={stackSave:function(){d=z.m()},stackRestore:function(){z.q(d)},arrayToC:function(a){var c=z.d(a.length);ka(a,c);return c},stringToC:function(a){var c=0;a!==k&&(a!==h&&0!==a)&&(c=z.d((a.length<<2)+1),la(a,c));return c}},e={string:c.stringToC,array:c.arrayToC};ja=function(a,f,g,i){var a=ha(a),s=[];if(i)for(var n=0;n<i.length;n++){var E=e[g[n]];E?(0===d&&(d=z.m()),s[n]=E(i[n])):s[n]=
i[n]}g=a.apply(k,s);"string"===f&&(g=Pointer_stringify(g));0!==d&&c.stackRestore();return g};var f=/^function\s*\(([^)]*)\)\s*{\s*([^*]*?)[\s;]*(?:return\s*(.*?)[;\s]*)?}$/,g={},i;for(i in c)c.hasOwnProperty(i)&&(g[i]=a(c[i]));ia=function(c,d,e){var e=e||[],f=ha(c),c=e.every(function(a){return"number"===a}),i="string"!==d;if(i&&c)return f;var n=e.map(function(a,c){return"$"+c}),d="(function("+n.join(",")+") {",E=e.length;if(!c)for(var d=d+(g.stackSave.body+";"),U=0;U<E;U++){var sa=n[U],L=e[U];"number"!==
L&&(L=g[L+"ToC"],d+="var "+L.arguments+" = "+sa+";",d+=L.body+";",d+=sa+"="+L.returnValue+";")}e=a(function(){return f}).returnValue;d+="var ret = "+e+"("+n.join(",")+");";i||(e=a(function(){return Pointer_stringify}).returnValue,d+="ret = "+e+"(ret);");c||(d+=g.stackRestore.body+";");return eval(d+"return ret})")}})();l.cwrap=ia;l.ccall=ja;
function ma(a,d,c){c=c||"i8";"*"===c.charAt(c.length-1)&&(c="i32");switch(c){case "i1":I[a>>0]=d;break;case "i8":I[a>>0]=d;break;case "i16":J[a>>1]=d;break;case "i32":K[a>>2]=d;break;case "i64":ga=[d>>>0,(H=d,1<=+na(H)?0<H?(oa(+pa(H/4294967296),4294967295)|0)>>>0:~~+qa((H-+(~~H>>>0))/4294967296)>>>0:0)];K[a>>2]=ga[0];K[a+4>>2]=ga[1];break;case "float":M[a>>2]=d;break;case "double":N[a>>3]=d;break;default:A("invalid type for setValue: "+c)}}l.setValue=ma;
l.getValue=function(a,d){d=d||"i8";"*"===d.charAt(d.length-1)&&(d="i32");switch(d){case "i1":return I[a>>0];case "i8":return I[a>>0];case "i16":return J[a>>1];case "i32":return K[a>>2];case "i64":return K[a>>2];case "float":return M[a>>2];case "double":return N[a>>3];default:A("invalid type for setValue: "+d)}return k};var ra=2,ta=4;l.ALLOC_NORMAL=0;l.ALLOC_STACK=1;l.ALLOC_STATIC=ra;l.ALLOC_DYNAMIC=3;l.ALLOC_NONE=ta;
function O(a,d,c,e){var f,g;"number"===typeof a?(f=j,g=a):(f=!1,g=a.length);var i="string"===typeof d?d:k,c=c==ta?e:[ua,z.d,z.N,z.b][c===h?ra:c](Math.max(g,i?1:d.length));if(f){e=c;x(0==(c&3));for(a=c+(g&-4);e<a;e+=4)K[e>>2]=0;for(a=c+g;e<a;)I[e++>>0]=0;return c}if("i8"===i)return a.subarray||a.slice?P.set(a,c):P.set(new Uint8Array(a),c),c;for(var e=0,m,p;e<g;){var r=a[e];"function"===typeof r&&(r=z.ba(r));f=i||d[e];0===f?e++:("i64"==f&&(f="i32"),ma(c+e,r,f),p!==f&&(m=z.o(f),p=f),e+=m)}return c}
l.allocate=O;function va(){var a;a:{a=Error();if(!a.stack){try{b(Error(0))}catch(d){a=d}if(!a.stack){a="(no stack trace available)";break a}}a=a.stack.toString()}return a}l.stackTrace=function(){return va()};for(var I,P,J,wa,K,xa,M,N,Q=0,B=0,ya=0,y=0,za=0,Aa=0,C=0,Ba=l.TOTAL_STACK||35000000,F=l.TOTAL_MEMORY||16777216,R=65536;R<F||R<2*Ba;)R=16777216>R?2*R:R+16777216;R!==F&&(l.a("increasing TOTAL_MEMORY to "+R+" to be compliant with the asm.js spec"),F=R);
x("undefined"!==typeof Int32Array&&"undefined"!==typeof Float64Array&&!!(new Int32Array(1)).subarray&&!!(new Int32Array(1)).set,"JS engine does not provide full typed array support");var S=new ArrayBuffer(F);I=new Int8Array(S);J...
Zgłoś jeśli naruszono regulamin