├── 2018
    ├── function
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── docker-compose.yml
    │   ├── flag_h0w2execute_arb1trary_c0de
    │   ├── sandbox.ini
    │   └── www
    │   │   └── index.php
    ├── javacon
    │   ├── README.md
    │   ├── admin-panel
    │   │   ├── .gitignore
    │   │   ├── pom.xml
    │   │   └── src
    │   │   │   ├── main
    │   │   │       ├── java
    │   │   │       │   └── io
    │   │   │       │   │   └── tricking
    │   │   │       │   │       └── challenge
    │   │   │       │   │           ├── ChallengeApplication.java
    │   │   │       │   │           ├── Encryptor.java
    │   │   │       │   │           ├── KeyworkProperties.java
    │   │   │       │   │           ├── MainController.java
    │   │   │       │   │           ├── UserConfig.java
    │   │   │       │   │           └── spel
    │   │   │       │   │               └── SmallEvaluationContext.java
    │   │   │       └── resources
    │   │   │       │   ├── application.yml
    │   │   │       │   └── templates
    │   │   │       │       ├── forbidden.html
    │   │   │       │       ├── hello.html
    │   │   │       │       └── login.html
    │   │   │   └── test
    │   │   │       └── java
    │   │   │           └── io
    │   │   │               └── tricking
    │   │   │                   └── challenge
    │   │   │                       └── ChallengeApplicationTests.java
    │   ├── challenge-0.0.1-SNAPSHOT.jar
    │   ├── docker-compose.yml
    │   └── flag_j4v4_chun
    ├── lumenserial
    │   ├── .dockerignore
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── cat
    │   │   ├── .env.example
    │   │   ├── .gitignore
    │   │   ├── app
    │   │   │   ├── Console
    │   │   │   │   ├── Commands
    │   │   │   │   │   └── .gitkeep
    │   │   │   │   └── Kernel.php
    │   │   │   ├── Events
    │   │   │   │   ├── Event.php
    │   │   │   │   └── ExampleEvent.php
    │   │   │   ├── Exceptions
    │   │   │   │   └── Handler.php
    │   │   │   ├── Http
    │   │   │   │   ├── Controllers
    │   │   │   │   │   ├── Controller.php
    │   │   │   │   │   └── EditorController.php
    │   │   │   │   └── Middleware
    │   │   │   │   │   ├── Authenticate.php
    │   │   │   │   │   └── ExampleMiddleware.php
    │   │   │   ├── Jobs
    │   │   │   │   ├── ExampleJob.php
    │   │   │   │   └── Job.php
    │   │   │   ├── Listeners
    │   │   │   │   └── ExampleListener.php
    │   │   │   ├── Providers
    │   │   │   │   ├── AppServiceProvider.php
    │   │   │   │   ├── AuthServiceProvider.php
    │   │   │   │   └── EventServiceProvider.php
    │   │   │   └── User.php
    │   │   ├── artisan
    │   │   ├── bootstrap
    │   │   │   └── app.php
    │   │   ├── composer.json
    │   │   ├── composer.lock
    │   │   ├── html
    │   │   │   ├── .htaccess
    │   │   │   ├── index.php
    │   │   │   └── static
    │   │   │   │   └── ueditor
    │   │   │   │       ├── dialogs
    │   │   │   │           ├── anchor
    │   │   │   │           │   └── anchor.html
    │   │   │   │           ├── emotion
    │   │   │   │           │   ├── emotion.css
    │   │   │   │           │   ├── emotion.html
    │   │   │   │           │   ├── emotion.js
    │   │   │   │           │   └── images
    │   │   │   │           │   │   ├── 0.gif
    │   │   │   │           │   │   ├── bface.gif
    │   │   │   │           │   │   ├── cface.gif
    │   │   │   │           │   │   ├── fface.gif
    │   │   │   │           │   │   ├── jxface2.gif
    │   │   │   │           │   │   ├── neweditor-tab-bg.png
    │   │   │   │           │   │   ├── tface.gif
    │   │   │   │           │   │   ├── wface.gif
    │   │   │   │           │   │   └── yface.gif
    │   │   │   │           ├── image
    │   │   │   │           │   ├── image.css
    │   │   │   │           │   ├── image.html
    │   │   │   │           │   ├── image.js
    │   │   │   │           │   └── images
    │   │   │   │           │   │   ├── alignicon.jpg
    │   │   │   │           │   │   ├── bg.png
    │   │   │   │           │   │   ├── icons.gif
    │   │   │   │           │   │   ├── icons.png
    │   │   │   │           │   │   ├── image.png
    │   │   │   │           │   │   ├── progress.png
    │   │   │   │           │   │   ├── success.gif
    │   │   │   │           │   │   └── success.png
    │   │   │   │           ├── internal.js
    │   │   │   │           ├── link
    │   │   │   │           │   └── link.html
    │   │   │   │           ├── preview
    │   │   │   │           │   └── preview.html
    │   │   │   │           ├── searchreplace
    │   │   │   │           │   ├── searchreplace.html
    │   │   │   │           │   └── searchreplace.js
    │   │   │   │           ├── spechars
    │   │   │   │           │   ├── spechars.html
    │   │   │   │           │   └── spechars.js
    │   │   │   │           └── wordimage
    │   │   │   │           │   ├── fClipboard_ueditor.swf
    │   │   │   │           │   ├── imageUploader.swf
    │   │   │   │           │   ├── tangram.js
    │   │   │   │           │   ├── wordimage.html
    │   │   │   │           │   └── wordimage.js
    │   │   │   │       ├── lang
    │   │   │   │           ├── en
    │   │   │   │           │   ├── en.js
    │   │   │   │           │   └── images
    │   │   │   │           │   │   ├── addimage.png
    │   │   │   │           │   │   ├── alldeletebtnhoverskin.png
    │   │   │   │           │   │   ├── alldeletebtnupskin.png
    │   │   │   │           │   │   ├── background.png
    │   │   │   │           │   │   ├── button.png
    │   │   │   │           │   │   ├── copy.png
    │   │   │   │           │   │   ├── deletedisable.png
    │   │   │   │           │   │   ├── deleteenable.png
    │   │   │   │           │   │   ├── listbackground.png
    │   │   │   │           │   │   ├── localimage.png
    │   │   │   │           │   │   ├── music.png
    │   │   │   │           │   │   ├── rotateleftdisable.png
    │   │   │   │           │   │   ├── rotateleftenable.png
    │   │   │   │           │   │   ├── rotaterightdisable.png
    │   │   │   │           │   │   ├── rotaterightenable.png
    │   │   │   │           │   │   └── upload.png
    │   │   │   │           └── zh-cn
    │   │   │   │           │   ├── images
    │   │   │   │           │       ├── copy.png
    │   │   │   │           │       ├── localimage.png
    │   │   │   │           │       ├── music.png
    │   │   │   │           │       └── upload.png
    │   │   │   │           │   └── zh-cn.js
    │   │   │   │       ├── themes
    │   │   │   │           ├── default
    │   │   │   │           │   ├── css
    │   │   │   │           │   │   ├── ueditor.css
    │   │   │   │           │   │   └── ueditor.min.css
    │   │   │   │           │   ├── dialogbase.css
    │   │   │   │           │   └── images
    │   │   │   │           │   │   ├── anchor.gif
    │   │   │   │           │   │   ├── arrow.png
    │   │   │   │           │   │   ├── arrow_down.png
    │   │   │   │           │   │   ├── arrow_up.png
    │   │   │   │           │   │   ├── button-bg.gif
    │   │   │   │           │   │   ├── cancelbutton.gif
    │   │   │   │           │   │   ├── charts.png
    │   │   │   │           │   │   ├── cursor_h.gif
    │   │   │   │           │   │   ├── cursor_h.png
    │   │   │   │           │   │   ├── cursor_v.gif
    │   │   │   │           │   │   ├── cursor_v.png
    │   │   │   │           │   │   ├── dialog-title-bg.png
    │   │   │   │           │   │   ├── filescan.png
    │   │   │   │           │   │   ├── highlighted.gif
    │   │   │   │           │   │   ├── icons-all.gif
    │   │   │   │           │   │   ├── icons.gif
    │   │   │   │           │   │   ├── icons.png
    │   │   │   │           │   │   ├── loaderror.png
    │   │   │   │           │   │   ├── loading.gif
    │   │   │   │           │   │   ├── lock.gif
    │   │   │   │           │   │   ├── neweditor-tab-bg.png
    │   │   │   │           │   │   ├── pagebreak.gif
    │   │   │   │           │   │   ├── scale.png
    │   │   │   │           │   │   ├── sortable.png
    │   │   │   │           │   │   ├── spacer.gif
    │   │   │   │           │   │   ├── sparator_v.png
    │   │   │   │           │   │   ├── table-cell-align.png
    │   │   │   │           │   │   ├── tangram-colorpicker.png
    │   │   │   │           │   │   ├── toolbar_bg.png
    │   │   │   │           │   │   ├── unhighlighted.gif
    │   │   │   │           │   │   ├── upload.png
    │   │   │   │           │   │   ├── videologo.gif
    │   │   │   │           │   │   ├── word.gif
    │   │   │   │           │   │   └── wordpaste.png
    │   │   │   │           └── iframe.css
    │   │   │   │       ├── third-party
    │   │   │   │           ├── SyntaxHighlighter
    │   │   │   │           │   ├── shCore.js
    │   │   │   │           │   └── shCoreDefault.css
    │   │   │   │           ├── codemirror
    │   │   │   │           │   ├── codemirror.css
    │   │   │   │           │   └── codemirror.js
    │   │   │   │           ├── jquery-1.10.2.min.js
    │   │   │   │           ├── webuploader
    │   │   │   │           │   ├── Uploader.swf
    │   │   │   │           │   ├── webuploader.css
    │   │   │   │           │   ├── webuploader.js
    │   │   │   │           │   └── webuploader.min.js
    │   │   │   │           ├── xss.min.js
    │   │   │   │           └── zeroclipboard
    │   │   │   │           │   ├── ZeroClipboard.js
    │   │   │   │           │   └── ZeroClipboard.swf
    │   │   │   │       ├── ueditor.all.min.js
    │   │   │   │       ├── ueditor.config.js
    │   │   │   │       ├── ueditor.parse.js
    │   │   │   │       └── ueditor.parse.min.js
    │   │   ├── phpunit.xml
    │   │   ├── resources
    │   │   │   ├── editor
    │   │   │   │   └── config.json
    │   │   │   └── views
    │   │   │   │   ├── .gitkeep
    │   │   │   │   └── index.blade.php
    │   │   ├── routes
    │   │   │   └── web.php
    │   │   └── storage
    │   │   │   ├── app
    │   │   │       └── .gitignore
    │   │   │   ├── framework
    │   │   │       ├── cache
    │   │   │       │   └── .gitignore
    │   │   │       └── views
    │   │   │       │   └── .gitignore
    │   │   │   └── logs
    │   │   │       └── .gitignore
    │   ├── docker-compose.yml
    │   ├── envfile
    │   ├── flag_larave1_b0ne
    │   └── sandbox.ini
    ├── nodechr
    │   ├── .dockerignore
    │   ├── .gitignore
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── config.json
    │   ├── docker-compose.yml
    │   └── www
    │   │   ├── index.js
    │   │   ├── package.json
    │   │   ├── static
    │   │       └── app.css
    │   │   └── views
    │   │       ├── admin.html
    │   │       └── index.html
    ├── pcrewaf
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── docker-compose.yml
    │   ├── flag_php7_2_1s_c0rrect
    │   ├── sandbox.ini
    │   └── www
    │   │   ├── data
    │   │       └── index.html
    │   │   └── index.php
    ├── phplimit
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── docker-compose.yml
    │   ├── flag_phpbyp4ss
    │   ├── nginx
    │   │   └── default.conf
    │   ├── sandbox.ini
    │   └── www
    │   │   └── index.php
    ├── phpmagic
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── docker-compose.yml
    │   ├── flag_phpmag1c_ur1
    │   ├── sandbox.ini
    │   └── www
    │   │   ├── data
    │   │       └── index.html
    │   │   └── index.php
    ├── picklecode
    │   ├── .env
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── docker-compose.yml
    │   ├── flag_djang0_p1ckle
    │   ├── nginx
    │   │   └── default.conf
    │   └── web
    │   │   ├── .gitignore
    │   │   ├── challenge
    │   │       ├── __init__.py
    │   │       ├── apps.py
    │   │       ├── migrations
    │   │       │   └── __init__.py
    │   │       ├── templates
    │   │       │   └── registration
    │   │       │   │   └── login.html
    │   │       ├── urls.py
    │   │       └── views.py
    │   │   ├── core
    │   │       ├── __init__.py
    │   │       ├── serializer.py
    │   │       ├── settings.py
    │   │       ├── urls.py
    │   │       └── wsgi.py
    │   │   ├── manage.py
    │   │   ├── requirements.txt
    │   │   └── server.sh
    └── thejs
    │   ├── .dockerignore
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── docker-compose.yml
    │   ├── flag_thepr0t0js
    │   ├── process.yaml
    │   └── web
    │       ├── package.json
    │       ├── server.js
    │       ├── static
    │           ├── app.css
    │           └── i.png
    │       └── views
    │           └── index.ejs
├── 2020
    └── bashinj
    │   ├── Dockerfile
    │   ├── README.md
    │   ├── serve-cgi-bin.conf
    │   └── src
    │       ├── _dep
    │           └── web.cgi
    │       └── index.cgi
├── 2025
    ├── .dockerignore
    ├── .gitignore
    ├── Dockerfile
    ├── README.md
    ├── docker-compose.yml
    ├── iptables.sh
    ├── pom.xml
    ├── run.sh
    └── src
    │   └── main
    │       ├── java
    │           └── com
    │           │   └── ar3h
    │           │       └── postgresqljdbcattack
    │           │           ├── PostgresqlJdbcAttackApplication.java
    │           │           ├── config
    │           │               └── FilterConfig.java
    │           │           ├── controller
    │           │               └── IndexController.java
    │           │           ├── filter
    │           │               └── SecurityFilter.java
    │           │           └── security
    │           │               └── ForbiddenNetworkAccessSecurityManager.java
    │       └── resources
    │           └── application.properties
└── README.md


/2018/function/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM php:7.2-apache
2 | 
3 | LABEL maintainer="phithon <root@leavesongs.com>"
4 | 
5 | COPY ./www/ /var/www/html/
6 | 
7 | RUN set -ex \
8 |     && chown root:root -R /var/www \
9 |     && chmod 0755 -R /var/www \


--------------------------------------------------------------------------------
/2018/function/README.md:
--------------------------------------------------------------------------------
 1 | # function
 2 | 
 3 | Official writeup:
 4 | 
 5 | - https://t.zsxq.com/VRfqRFe
 6 | 
 7 | Unofficial writeup:
 8 | 
 9 | - https://paper.seebug.org/755/
10 | - http://f1sh.site/2018/11/25/code-breaking-puzzles%E5%81%9A%E9%A2%98%E8%AE%B0%E5%BD%95/
11 | - https://www.cnblogs.com/iamstudy/articles/code_breaking_writeup.html
12 | - http://www.kingkk.com/2018/11/Code-Breaking-Puzzles-%E9%A2%98%E8%A7%A3-%E5%AD%A6%E4%B9%A0%E7%AF%87/
13 | - https://blog.csdn.net/fnmsd/article/details/84556522


--------------------------------------------------------------------------------
/2018/function/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3'
 2 | services:
 3 |  web:
 4 |    build: .
 5 |    ports:
 6 |     - "8087:80"
 7 |    volumes:
 8 |     - ./sandbox.ini:/usr/local/etc/php/conf.d/sandbox.ini
 9 |     - ./flag_h0w2execute_arb1trary_c0de:/var/www/flag_h0w2execute_arb1trary_c0de
10 | 


--------------------------------------------------------------------------------
/2018/function/flag_h0w2execute_arb1trary_c0de:
--------------------------------------------------------------------------------
1 | flag{03fdc0ee2fc464aac3c40ef0e20dcb5a}


--------------------------------------------------------------------------------
/2018/function/sandbox.ini:
--------------------------------------------------------------------------------
 1 | disable_functions = system,shell_exec,passthru,exec,popen,proc_open,pcntl_exec,mail,putenv,apache_setenv,mb_send_mail,dl,set_time_limit,ignore_user_abort,symlink,link,error_log
 2 | disable_classes = GlobIterator,DirectoryIterator,FilesystemIterator,RecursiveDirectoryIterator
 3 | open_basedir = /tmp/:/var/www/
 4 | post_max_size = 2M
 5 | memory_limit = 32M
 6 | default_charset = utf-8
 7 | upload_max_filesize = 2M
 8 | date.timezone = Asia/Shanghai
 9 | enable_dl = Off
10 | sys_temp_dir = /tmp/
11 | upload_tmp_dir = /tmp/
12 | request_order = GP
13 | max_execution_time = 30
14 | allow_url_include = Off
15 | allow_url_fopen = On
16 | session.auto_start = Off
17 | session.upload_progress.enabled	= Off
18 | display_errors = On
19 | error_reporting = -1
20 | log_errors = On
21 | error_log = /var/log/apache2/error.log


--------------------------------------------------------------------------------
/2018/function/www/index.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | $action = $_GET['action'] ?? '';
 3 | $arg = $_GET['arg'] ?? '';
 4 | 
 5 | if(preg_match('/^[a-z0-9_]*$/isD', $action)) {
 6 |     show_source(__FILE__);
 7 | } else {
 8 |     $action('', $arg);
 9 | }
10 | 


--------------------------------------------------------------------------------
/2018/javacon/README.md:
--------------------------------------------------------------------------------
1 | # Javacon
2 | 
3 | Unofficial Write:
4 | 
5 | - http://rui0.cn/archives/1015
6 | - https://blog.csdn.net/fnmsd/article/details/84556522


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/.gitignore:
--------------------------------------------------------------------------------
 1 | /target/
 2 | !.mvn/wrapper/maven-wrapper.jar
 3 | 
 4 | ### STS ###
 5 | .apt_generated
 6 | .classpath
 7 | .factorypath
 8 | .project
 9 | .settings
10 | .springBeans
11 | .sts4-cache
12 | 
13 | ### IntelliJ IDEA ###
14 | .idea
15 | *.iws
16 | *.iml
17 | *.ipr
18 | 
19 | ### NetBeans ###
20 | /nbproject/private/
21 | /build/
22 | /nbbuild/
23 | /dist/
24 | /nbdist/
25 | /.nb-gradle/


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 3 |          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 4 |     <modelVersion>4.0.0</modelVersion>
 5 | 
 6 |     <groupId>io.tricking</groupId>
 7 |     <artifactId>challenge</artifactId>
 8 |     <version>0.0.1-SNAPSHOT</version>
 9 |     <packaging>jar</packaging>
10 | 
11 |     <name>challenge</name>
12 |     <description>A small java challenge</description>
13 | 
14 |     <parent>
15 |         <groupId>org.springframework.boot</groupId>
16 |         <artifactId>spring-boot-starter-parent</artifactId>
17 |         <version>2.1.0.RELEASE</version>
18 |         <relativePath/> <!-- lookup parent from repository -->
19 |     </parent>
20 | 
21 |     <properties>
22 |         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
23 |         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
24 |         <java.version>1.8</java.version>
25 |     </properties>
26 | 
27 |     <dependencies>
28 |         <dependency>
29 |             <groupId>org.springframework.boot</groupId>
30 |             <artifactId>spring-boot-starter-thymeleaf</artifactId>
31 |         </dependency>
32 |         <dependency>
33 |             <groupId>org.springframework.boot</groupId>
34 |             <artifactId>spring-boot-starter-web</artifactId>
35 |         </dependency>
36 | 
37 |         <dependency>
38 |             <groupId>org.springframework.boot</groupId>
39 |             <artifactId>spring-boot-starter-test</artifactId>
40 |             <scope>test</scope>
41 |         </dependency>
42 |     </dependencies>
43 | 
44 |     <build>
45 |         <plugins>
46 |             <plugin>
47 |                 <groupId>org.springframework.boot</groupId>
48 |                 <artifactId>spring-boot-maven-plugin</artifactId>
49 |             </plugin>
50 |         </plugins>
51 |     </build>
52 | 
53 | 
54 | </project>
55 | 


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/java/io/tricking/challenge/ChallengeApplication.java:
--------------------------------------------------------------------------------
 1 | package io.tricking.challenge;
 2 | 
 3 | import org.springframework.boot.SpringApplication;
 4 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 5 | 
 6 | @SpringBootApplication
 7 | public class ChallengeApplication {
 8 | 
 9 |     public static void main(String[] args) {
10 |         SpringApplication.run(ChallengeApplication.class, args);
11 |     }
12 | }
13 | 


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/java/io/tricking/challenge/Encryptor.java:
--------------------------------------------------------------------------------
 1 | package io.tricking.challenge;
 2 | 
 3 | import javax.crypto.Cipher;
 4 | import javax.crypto.spec.IvParameterSpec;
 5 | import javax.crypto.spec.SecretKeySpec;
 6 | import java.util.Base64;
 7 | import org.slf4j.Logger;
 8 | import org.slf4j.LoggerFactory;
 9 | 
10 | public class Encryptor {
11 |     static Logger logger = LoggerFactory.getLogger(Encryptor.class);
12 | 
13 |     public static String encrypt(String key, String initVector, String value) {
14 |         try {
15 |             IvParameterSpec iv = new IvParameterSpec(initVector.getBytes("UTF-8"));
16 |             SecretKeySpec skeySpec = new SecretKeySpec(key.getBytes("UTF-8"), "AES");
17 | 
18 |             Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5PADDING");
19 |             cipher.init(Cipher.ENCRYPT_MODE, skeySpec, iv);
20 | 
21 |             byte[] encrypted = cipher.doFinal(value.getBytes());
22 | 
23 |             return Base64.getUrlEncoder().encodeToString(encrypted);
24 |         } catch (Exception ex) {
25 |             logger.warn(ex.getMessage());
26 |         }
27 | 
28 |         return null;
29 |     }
30 | 
31 |     public static String decrypt(String key, String initVector, String encrypted) {
32 |         try {
33 |             IvParameterSpec iv = new IvParameterSpec(initVector.getBytes("UTF-8"));
34 |             SecretKeySpec skeySpec = new SecretKeySpec(key.getBytes("UTF-8"), "AES");
35 | 
36 |             Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5PADDING");
37 |             cipher.init(Cipher.DECRYPT_MODE, skeySpec, iv);
38 | 
39 |             byte[] original = cipher.doFinal(Base64.getUrlDecoder().decode(encrypted));
40 | 
41 |             return new String(original);
42 |         } catch (Exception ex) {
43 |             logger.warn(ex.getMessage());
44 |         }
45 | 
46 |         return null;
47 |     }
48 | }


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/java/io/tricking/challenge/KeyworkProperties.java:
--------------------------------------------------------------------------------
 1 | package io.tricking.challenge;
 2 | 
 3 | import org.springframework.boot.context.properties.ConfigurationProperties;
 4 | import org.springframework.stereotype.Component;
 5 | 
 6 | @Component
 7 | @ConfigurationProperties(prefix = "keywords")
 8 | public class KeyworkProperties {
 9 |     private String[] blacklist;
10 | 
11 |     public String[] getBlacklist() {
12 |         return blacklist;
13 |     }
14 | 
15 |     public void setBlacklist(String[] blacklist) {
16 |         this.blacklist = blacklist;
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/java/io/tricking/challenge/MainController.java:
--------------------------------------------------------------------------------
  1 | package io.tricking.challenge;
  2 | 
  3 | import io.tricking.challenge.spel.SmallEvaluationContext;
  4 | import org.springframework.beans.factory.annotation.Autowired;
  5 | import org.springframework.expression.Expression;
  6 | import org.springframework.expression.ExpressionParser;
  7 | import org.springframework.expression.ParserContext;
  8 | import org.springframework.expression.common.TemplateParserContext;
  9 | import org.springframework.expression.spel.standard.SpelExpressionParser;
 10 | import org.springframework.http.HttpStatus;
 11 | import org.springframework.stereotype.Controller;
 12 | import org.springframework.web.bind.annotation.*;
 13 | import org.springframework.ui.Model;
 14 | import org.springframework.web.client.HttpClientErrorException;
 15 | 
 16 | import javax.servlet.http.Cookie;
 17 | import javax.servlet.http.HttpServletResponse;
 18 | import javax.servlet.http.HttpSession;
 19 | import java.util.regex.Matcher;
 20 | import java.util.regex.Pattern;
 21 | 
 22 | @Controller
 23 | public class MainController {
 24 |     ExpressionParser parser = new SpelExpressionParser();
 25 | 
 26 |     @Autowired
 27 |     private KeyworkProperties keyworkProperties;
 28 | 
 29 |     @Autowired
 30 |     private UserConfig userConfig;
 31 | 
 32 |     @GetMapping
 33 |     public String admin(@CookieValue(value = "remember-me", required = false) String rememberMeValue,
 34 |                         HttpSession session,
 35 |                         Model model) {
 36 |         if (rememberMeValue != null && !rememberMeValue.equals("")) {
 37 |             String username = userConfig.decryptRememberMe(rememberMeValue);
 38 |             if (username != null) {
 39 |                 session.setAttribute("username", username);
 40 |             }
 41 |         }
 42 | 
 43 |         Object username = session.getAttribute("username");
 44 |         if(username == null || username.toString().equals("")) {
 45 |             return "redirect:/login";
 46 |         }
 47 | 
 48 |         model.addAttribute("name", getAdvanceValue(username.toString()));
 49 |         return "hello";
 50 |     }
 51 | 
 52 |     @GetMapping("/login")
 53 |     public String login() {
 54 |         return "login";
 55 |     }
 56 | 
 57 |     @GetMapping("/login-error")
 58 |     public String loginError(Model model) {
 59 |         model.addAttribute("loginError", true);
 60 |         model.addAttribute("errorMsg", "登陆失败，用户名或者密码错误！");
 61 |         return "login";
 62 |     }
 63 | 
 64 |     @PostMapping("/login")
 65 |     public String login(@RequestParam(value = "username", required = true) String username,
 66 |                         @RequestParam(value = "password", required = true) String password,
 67 |                         @RequestParam(value = "remember-me", required = false) String isRemember,
 68 |                         HttpSession session, HttpServletResponse response)
 69 |     {
 70 |         if (userConfig.getUsername().contentEquals(username) && userConfig.getPassword().contentEquals(password)) {
 71 |             session.setAttribute("username", username);
 72 | 
 73 |             if (isRemember != null && !isRemember.equals("")) {
 74 |                 Cookie c = new Cookie("remember-me", userConfig.encryptRememberMe());
 75 |                 c.setMaxAge(60 * 60 * 24 * 30);
 76 |                 response.addCookie(c);
 77 |             }
 78 | 
 79 |             return "redirect:/";
 80 |         }
 81 |         return "redirect:/login-error";
 82 |     }
 83 | 
 84 |     @ExceptionHandler(HttpClientErrorException.class)
 85 |     @ResponseStatus(HttpStatus.FORBIDDEN)
 86 |     public String handleForbiddenException()
 87 |     {
 88 |         return "forbidden";
 89 |     }
 90 | 
 91 |     private String getAdvanceValue(String val) {
 92 |         for (String keyword: keyworkProperties.getBlacklist()) {
 93 |             Matcher matcher = Pattern.compile(keyword, Pattern.DOTALL | Pattern.CASE_INSENSITIVE).matcher(val);
 94 |             if (matcher.find()) {
 95 |                 throw new HttpClientErrorException(HttpStatus.FORBIDDEN);
 96 |             }
 97 |         }
 98 | 
 99 |         ParserContext parserContext = new TemplateParserContext();
100 |         Expression exp = parser.parseExpression(val, parserContext);
101 |         SmallEvaluationContext evaluationContext = new SmallEvaluationContext();
102 |         return exp.getValue(evaluationContext).toString();
103 |     }
104 | }
105 | 


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/java/io/tricking/challenge/UserConfig.java:
--------------------------------------------------------------------------------
 1 | package io.tricking.challenge;
 2 | 
 3 | import org.springframework.boot.context.properties.ConfigurationProperties;
 4 | import org.springframework.stereotype.Component;
 5 | 
 6 | @Component
 7 | @ConfigurationProperties(prefix = "user")
 8 | public class UserConfig {
 9 |     private String username;
10 | 
11 |     private String password;
12 | 
13 |     private String rememberMeKey;
14 | 
15 |     public String getUsername() {
16 |         return username;
17 |     }
18 | 
19 |     public String getPassword() {
20 |         return password;
21 |     }
22 | 
23 |     public String getRememberMeKey() {
24 |         return rememberMeKey;
25 |     }
26 | 
27 |     public void setUsername(String username) {
28 |         this.username = username;
29 |     }
30 | 
31 |     public void setPassword(String password) {
32 |         this.password = password;
33 |     }
34 | 
35 |     public void setRememberMeKey(String rememberMeKey) {
36 |         this.rememberMeKey = rememberMeKey;
37 |     }
38 | 
39 |     public String encryptRememberMe() {
40 |         String encryptd = Encryptor.encrypt(rememberMeKey, "0123456789abcdef", username);
41 |         return encryptd;
42 |     }
43 | 
44 |     public String decryptRememberMe(String encryptd) {
45 |         return Encryptor.decrypt(rememberMeKey, "0123456789abcdef", encryptd);
46 |     }
47 | }
48 | 


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/java/io/tricking/challenge/spel/SmallEvaluationContext.java:
--------------------------------------------------------------------------------
 1 | package io.tricking.challenge.spel;
 2 | 
 3 | import org.springframework.expression.ConstructorResolver;
 4 | import org.springframework.expression.spel.support.StandardEvaluationContext;
 5 | 
 6 | import java.util.Collections;
 7 | import java.util.List;
 8 | 
 9 | public class SmallEvaluationContext extends StandardEvaluationContext {
10 |     public void setConstructorResolvers(List<ConstructorResolver> constructorResolvers) { }
11 |     public List<ConstructorResolver> getConstructorResolvers() {
12 |         return Collections.emptyList();
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/resources/application.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |   thymeleaf:
 3 |     encoding: UTF-8
 4 |     cache: false
 5 |     mode: HTML
 6 | keywords:
 7 |   blacklist:
 8 |     - java.+lang
 9 |     - Runtime
10 |     - exec.*\(
11 | user:
12 |   username: admin
13 |   password: admin
14 |   rememberMeKey: c0dehack1nghere1


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/resources/templates/forbidden.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Forbidden</title>
 6 | </head>
 7 | <body>
 8 | 
 9 | <p>Your request is not allowed.</p>
10 | 
11 | </body>
12 | </html>


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/resources/templates/hello.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html xmlns="http://www.w3.org/1999/xhtml"
 3 |       xmlns:th="http://www.thymeleaf.org"
 4 |       xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity4">
 5 | <head>
 6 |     <meta charset="UTF-8" />
 7 |     <title>Hello</title>
 8 | 
 9 |     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css" integrity="sha256-eSi1q2PG6J7g7ib17yAaWMcrr5GrtohYChqibrV7PBE=" crossorigin="anonymous" />
10 | </head>
11 | <body>
12 | 
13 | <div class="container">
14 |     <div class="row">
15 |         <article>
16 |             <h2 th:text="'Hello, ' + ${session.username}"></h2>
17 |             <p>This is admin panel.</p>
18 |         </article>
19 |     </div>
20 | </div>
21 | 
22 | </body>
23 | </html>


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/main/resources/templates/login.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en" xmlns:th="http://www.thymeleaf.org">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Hello</title>
 6 | 
 7 |     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css" integrity="sha256-eSi1q2PG6J7g7ib17yAaWMcrr5GrtohYChqibrV7PBE=" crossorigin="anonymous">
 8 | </head>
 9 | <body>
10 | 
11 | <div class="container-fluid">
12 |     <div class="row">
13 |         <div class="col-md-3">
14 |         </div>
15 |         <div class="col-md-6">
16 |             <div class="row">
17 |                 <div class="col-md-12">
18 |                     <h2>
19 |                         Please login first.
20 |                     </h2>
21 |                     <p th:if="${loginError}" th:text="${errorMsg}">用户名密码错误！</p>
22 |                     <form role="form" th:action="@{/login}" method="post">
23 |                         <div class="form-group">
24 |                             <label>
25 |                                 Username
26 |                             </label>
27 |                             <input type="text" class="form-control" name="username" />
28 |                         </div>
29 |                         <div class="form-group">
30 | 
31 |                             <label>
32 |                                 Password
33 |                             </label>
34 |                             <input type="password" class="form-control" name="password" />
35 |                         </div>
36 |                         <div class="checkbox">
37 | 
38 |                             <label>
39 |                                 <input type="checkbox" name="remember-me" /> Remember me
40 |                             </label>
41 |                         </div>
42 |                         <button type="submit" class="btn btn-primary">
43 |                             Login
44 |                         </button>
45 |                     </form>
46 |                 </div>
47 |             </div>
48 |         </div>
49 |         <div class="col-md-3">
50 |         </div>
51 |     </div>
52 | </div>
53 | 
54 | </body>
55 | </html>


--------------------------------------------------------------------------------
/2018/javacon/admin-panel/src/test/java/io/tricking/challenge/ChallengeApplicationTests.java:
--------------------------------------------------------------------------------
 1 | package io.tricking.challenge;
 2 | 
 3 | import org.junit.Test;
 4 | import org.junit.runner.RunWith;
 5 | import org.springframework.boot.test.context.SpringBootTest;
 6 | import org.springframework.test.context.junit4.SpringRunner;
 7 | 
 8 | @RunWith(SpringRunner.class)
 9 | @SpringBootTest
10 | public class ChallengeApplicationTests {
11 | 
12 |     @Test
13 |     public void contextLoads() {
14 |     }
15 | 
16 | }
17 | 


--------------------------------------------------------------------------------
/2018/javacon/challenge-0.0.1-SNAPSHOT.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/javacon/challenge-0.0.1-SNAPSHOT.jar


--------------------------------------------------------------------------------
/2018/javacon/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '2'
 2 | services:
 3 |  web:
 4 |    image: openjdk:8-jre
 5 |    ports:
 6 |     - "8081:8080"
 7 |    volumes:
 8 |     - ./challenge-0.0.1-SNAPSHOT.jar:/challenge-0.0.1-SNAPSHOT.jar
 9 |     - ./flag_j4v4_chun:/flag_j4v4_chun
10 |    user: nobody
11 |    command: java -Djava.security.egd=file:/dev/./urandom -jar /challenge-0.0.1-SNAPSHOT.jar
12 | 


--------------------------------------------------------------------------------
/2018/javacon/flag_j4v4_chun:
--------------------------------------------------------------------------------
1 | flag{ea915bcdda16c93cd180147bb5fbbe67}


--------------------------------------------------------------------------------
/2018/lumenserial/.dockerignore:
--------------------------------------------------------------------------------
1 | cat/vendor/


--------------------------------------------------------------------------------
/2018/lumenserial/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM php:7.2-apache
 2 | 
 3 | LABEL maintainer="phithon <root@leavesongs.com>"
 4 | 
 5 | RUN set -ex \
 6 |     && apt-get update && apt-get install -y \
 7 |         libfreetype6-dev \
 8 |         libjpeg62-turbo-dev \
 9 |         libpng-dev \
10 |         libzip-dev \
11 |     && docker-php-ext-install -j$(nproc) iconv zip pdo_mysql mysqli \
12 |     && docker-php-ext-configure gd --with-freetype-dir=/usr/include/ --with-jpeg-dir=/usr/include/ \
13 |     && docker-php-ext-install -j$(nproc) gd 
14 | 
15 | RUN set -ex \
16 |     && cd / \
17 |     && mkdir -p /var/lib/php/sessions \
18 |     && chown www-data:www-data -R /var/lib/php/sessions \
19 |     && rm -rf /var/www/* \
20 |     && a2enmod rewrite
21 | 
22 | COPY cat/ /var/www/
23 | 
24 | RUN set -ex \
25 |     && cd / \
26 |     && curl -s https://getcomposer.org/installer \
27 |         | php -- --install-dir=/usr/local/bin --filename=composer \
28 |     && chmod +x /usr/local/bin/composer \
29 |     && cd /var/www \
30 |     && composer update
31 | 
32 | RUN set -ex \
33 |     && cd /var/www \
34 |     && mkdir html/upload/ \
35 |     && chown root:root -R . \
36 |     && chmod 0755 -R . \
37 |     && chown www-data:www-data -R storage/app/ storage/framework/cache/ storage/framework/views/ storage/logs/ html/upload/
38 | 


--------------------------------------------------------------------------------
/2018/lumenserial/README.md:
--------------------------------------------------------------------------------
1 | # lumenserial
2 | 
3 | Unofficial writeup:
4 | 
5 | - http://m4p1e.com/web/20181224.html
6 | - https://www.cnblogs.com/iamstudy/articles/code_breaking_lumenserial_writeup.html
7 | - http://www.kingkk.com/2018/11/Code-Breaking-Puzzles-%E9%A2%98%E8%A7%A3-%E5%AD%A6%E4%B9%A0%E7%AF%87/


--------------------------------------------------------------------------------
/2018/lumenserial/cat/.env.example:
--------------------------------------------------------------------------------
 1 | APP_NAME=Laravel
 2 | APP_ENV=local
 3 | APP_KEY=secret
 4 | APP_DEBUG=true
 5 | APP_URL=http://localhost:8080
 6 | 
 7 | LOG_CHANNEL=stack
 8 | 
 9 | DB_CONNECTION=mysql
10 | DB_HOST=127.0.0.1
11 | DB_PORT=3306
12 | DB_DATABASE=homestead
13 | DB_USERNAME=homestead
14 | DB_PASSWORD=secret
15 | 
16 | BROADCAST_DRIVER=log
17 | CACHE_DRIVER=file
18 | SESSION_DRIVER=file
19 | SESSION_LIFETIME=120
20 | QUEUE_DRIVER=sync
21 | 
22 | REDIS_HOST=127.0.0.1
23 | REDIS_PASSWORD=null
24 | REDIS_PORT=6379
25 | 
26 | MAIL_DRIVER=smtp
27 | MAIL_HOST=smtp.mailtrap.io
28 | MAIL_PORT=2525
29 | MAIL_USERNAME=null
30 | MAIL_PASSWORD=null
31 | MAIL_ENCRYPTION=null
32 | 
33 | PUSHER_APP_ID=
34 | PUSHER_APP_KEY=
35 | PUSHER_APP_SECRET=
36 | PUSHER_APP_CLUSTER=mt1
37 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/.gitignore:
--------------------------------------------------------------------------------
1 | /vendor
2 | /.idea
3 | Homestead.json
4 | Homestead.yaml
5 | .env
6 | /.vscode
7 | /html/upload/


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Console/Commands/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/app/Console/Commands/.gitkeep


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Console/Kernel.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Console;
 4 | 
 5 | use Illuminate\Console\Scheduling\Schedule;
 6 | use Laravel\Lumen\Console\Kernel as ConsoleKernel;
 7 | 
 8 | class Kernel extends ConsoleKernel
 9 | {
10 |     /**
11 |      * The Artisan commands provided by your application.
12 |      *
13 |      * @var array
14 |      */
15 |     protected $commands = [
16 |         //
17 |     ];
18 | 
19 |     /**
20 |      * Define the application's command schedule.
21 |      *
22 |      * @param  \Illuminate\Console\Scheduling\Schedule  $schedule
23 |      * @return void
24 |      */
25 |     protected function schedule(Schedule $schedule)
26 |     {
27 |         //
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Events/Event.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Events;
 4 | 
 5 | use Illuminate\Queue\SerializesModels;
 6 | 
 7 | abstract class Event
 8 | {
 9 |     use SerializesModels;
10 | }
11 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Events/ExampleEvent.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Events;
 4 | 
 5 | class ExampleEvent extends Event
 6 | {
 7 |     /**
 8 |      * Create a new event instance.
 9 |      *
10 |      * @return void
11 |      */
12 |     public function __construct()
13 |     {
14 |         //
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Exceptions/Handler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Exceptions;
 4 | 
 5 | use Exception;
 6 | use Illuminate\Validation\ValidationException;
 7 | use Illuminate\Auth\Access\AuthorizationException;
 8 | use Illuminate\Database\Eloquent\ModelNotFoundException;
 9 | use Laravel\Lumen\Exceptions\Handler as ExceptionHandler;
10 | use Symfony\Component\HttpKernel\Exception\HttpException;
11 | 
12 | class Handler extends ExceptionHandler
13 | {
14 |     /**
15 |      * A list of the exception types that should not be reported.
16 |      *
17 |      * @var array
18 |      */
19 |     protected $dontReport = [
20 |         AuthorizationException::class,
21 |         HttpException::class,
22 |         ModelNotFoundException::class,
23 |         ValidationException::class,
24 |     ];
25 | 
26 |     /**
27 |      * Report or log an exception.
28 |      *
29 |      * This is a great spot to send exceptions to Sentry, Bugsnag, etc.
30 |      *
31 |      * @param  \Exception  $exception
32 |      * @return void
33 |      */
34 |     public function report(Exception $exception)
35 |     {
36 |         parent::report($exception);
37 |     }
38 | 
39 |     /**
40 |      * Render an exception into an HTTP response.
41 |      *
42 |      * @param  \Illuminate\Http\Request  $request
43 |      * @param  \Exception  $exception
44 |      * @return \Illuminate\Http\Response
45 |      */
46 |     public function render($request, Exception $exception)
47 |     {
48 |         return parent::render($request, $exception);
49 |     }
50 | }
51 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Http/Controllers/Controller.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Http\Controllers;
 4 | 
 5 | use Laravel\Lumen\Routing\Controller as BaseController;
 6 | 
 7 | class Controller extends BaseController
 8 | {
 9 |     //
10 | }
11 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Http/Controllers/EditorController.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | /**
  3 |  * Created by PhpStorm.
  4 |  * User: shiyu
  5 |  * Date: 2018/10/31
  6 |  * Time: 2:27 PM
  7 |  */
  8 | 
  9 | namespace App\Http\Controllers;
 10 | 
 11 | use Illuminate\Http\Request;
 12 | use Illuminate\Validation\Rule;
 13 | use Symfony\Component\HttpFoundation\File\Exception\FileException;
 14 | use Symfony\Component\HttpFoundation\File\File;
 15 | use Symfony\Component\HttpFoundation\File\MimeType\ExtensionGuesser;
 16 | 
 17 | 
 18 | class EditorController extends Controller
 19 | {
 20 |     protected $config = [];
 21 | 
 22 |     function __construct()
 23 |     {
 24 |         $config_filename = app()->basePath('resources/editor/config.json');
 25 |         $this->config = json_decode(preg_replace("/\/\*[\s\S]+?\*\//", "", file_get_contents($config_filename)), true);
 26 |     }
 27 | 
 28 |     protected function doUploadImage(Request $request)
 29 |     {
 30 |         $maxSize = $this->config['imageMaxSize'] / 1024;
 31 |         $limitExtension = implode(',', array_map(function ($ext) {
 32 |             return ltrim($ext, '.');
 33 |         }, $this->config['imageAllowFiles']));
 34 | 
 35 |         $this->validate($request, [
 36 |             $this->config['imageFieldName'] => "required|image|mimes:{$limitExtension}|max:{$maxSize}"
 37 |         ]);
 38 | 
 39 |         $file = $request->file($this->config['imageFieldName']);
 40 |         $html_path = app()->basePath('html');
 41 |         $upload_path = $this->fullPath($this->config['imagePathFormat']) . '/';
 42 | 
 43 |         if ($file->isValid()) {
 44 |             $filename = \bin2hex(\random_bytes(10)) . '.' . $file->guessExtension();
 45 | 
 46 |             $file->move($html_path . $upload_path, $filename);
 47 |             return response()->json([
 48 |                 'state' => 'SUCCESS',
 49 |                 'url' => $upload_path . $filename,
 50 |                 'title' => $file->getClientOriginalName(),
 51 |                 'original' => $file->getClientOriginalName()
 52 |             ]);
 53 |         } else {
 54 |             throw new FileException($file->getErrorMessage());
 55 |         }
 56 |     }
 57 | 
 58 |     protected function doCatchimage(Request $request)
 59 |     {
 60 |         $sources = $request->input($this->config['catcherFieldName']);
 61 |         $rets = [];
 62 | 
 63 |         if ($sources) {
 64 |             foreach ($sources as $url) {
 65 |                 $rets[] = $this->download($url);
 66 |             }
 67 |         }
 68 | 
 69 |         return response()->json([
 70 |             'state' => 'SUCCESS',
 71 |             'list' => $rets
 72 |         ]);
 73 |     }
 74 | 
 75 |     protected function doListImage(Request $request)
 76 |     {
 77 |         $defaultSize = $this->config['imageManagerListSize'];
 78 | 
 79 |         $start = intval($request->query('start', 0));
 80 |         $size = intval($request->query('size', $defaultSize));
 81 | 
 82 |         $limitExtension = implode(',', array_map(function ($ext) {
 83 |             return ltrim($ext, '.');
 84 |         }, $this->config['imageManagerAllowFiles']));
 85 |         $webPath = app()->basePath('html');
 86 |         $listPath = $webPath . $this->fullPath($this->config['imageManagerListPath']);
 87 | 
 88 |         $data = array_map(function ($url) use ($webPath) {
 89 |             return [
 90 |                 'url' => str_replace($webPath, '', $url)
 91 |             ];
 92 |         }, glob("{$listPath}/*/*/*.\x7B{$limitExtension}\x7D", GLOB_BRACE));
 93 | 
 94 |         return response()->json([
 95 |             'state' => 'SUCCESS',
 96 |             'list' => array_slice($data, $start, $size),
 97 |             'start' => $start,
 98 |             'total' => count($data)
 99 |         ]);
100 |     }
101 | 
102 |     protected function doConfig(Request $request)
103 |     {
104 |         return response()->json($this->config, 200, [], \JSON_PRETTY_PRINT);
105 |     }
106 | 
107 |     public function main(Request $request)
108 |     {
109 |         $action = $request->query('action');
110 | 
111 |         try {
112 |             if (is_string($action) && method_exists($this, "do{$action}")) {
113 |                 return call_user_func([$this, "do{$action}"], $request);
114 |             } else {
115 |                 throw new FileException('Method error');
116 |             }
117 |         } catch (FileException $e) {
118 |             return response()->json(['state' => $e->getMessage()]);
119 |         }
120 |     }
121 | 
122 |     private function fullPath($path_template)
123 |     {
124 |         //替换日期事件
125 |         $t = time();
126 |         $d = explode('-', date("Y-y-m-d-H-i-s"));
127 |         $format = $path_template;
128 |         $format = str_replace("{yyyy}", $d[0], $format);
129 |         $format = str_replace("{yy}", $d[1], $format);
130 |         $format = str_replace("{mm}", $d[2], $format);
131 |         $format = str_replace("{dd}", $d[3], $format);
132 |         $format = str_replace("{hh}", $d[4], $format);
133 |         $format = str_replace("{ii}", $d[5], $format);
134 |         $format = str_replace("{ss}", $d[6], $format);
135 |         $format = str_replace("{time}", $t, $format);
136 |         $format = str_replace('{iphash}', md5($_SERVER['REMOTE_ADDR']), $format);
137 |         return rtrim($format, '/');
138 |     }
139 | 
140 |     private function download($url)
141 |     {
142 |         $maxSize = $this->config['catcherMaxSize'];
143 |         $limitExtension = array_map(function ($ext) {
144 |             return ltrim($ext, '.');
145 |         }, $this->config['catcherAllowFiles']);
146 |         $allowTypes = array_map(function ($ext) {
147 |             return "image/{$ext}";
148 |         }, $limitExtension);
149 | 
150 |         $content = file_get_contents($url);
151 |         $img = getimagesizefromstring($content);
152 | 
153 |         if ($img && in_array($img['mime'], $allowTypes)) {
154 |             $guesser = ExtensionGuesser::getInstance();
155 |             $ext = $guesser->guess($img['mime']);
156 |             $size = strlen($content);
157 | 
158 |             $html_path = app()->basePath('html');
159 |             $upload_path = $this->fullPath($this->config['catcherPathFormat']);
160 | 
161 |             if (in_array($ext, $limitExtension) && $size <= $maxSize) {
162 |                 if (!is_dir("{$html_path}{$upload_path}")) {
163 |                     mkdir("{$html_path}{$upload_path}", 0777, true);
164 |                 }
165 | 
166 |                 $filename = \bin2hex(\random_bytes(10)) . '.' . $ext;
167 |                 file_put_contents("{$html_path}{$upload_path}/{$filename}", $content);
168 | 
169 |                 return [
170 |                     "url" => "{$upload_path}/{$filename}",
171 |                     "source" => $url,
172 |                     "state" => "SUCCESS"
173 |                 ];
174 |             } else {
175 |                 throw new FileException("file extension .{$ext} or size {$size} error");
176 |             }
177 | 
178 |         } else {
179 |             throw new FileException('Only support catching image file');
180 |         }
181 |     }
182 | }


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Http/Middleware/Authenticate.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Http\Middleware;
 4 | 
 5 | use Closure;
 6 | use Illuminate\Contracts\Auth\Factory as Auth;
 7 | 
 8 | class Authenticate
 9 | {
10 |     /**
11 |      * The authentication guard factory instance.
12 |      *
13 |      * @var \Illuminate\Contracts\Auth\Factory
14 |      */
15 |     protected $auth;
16 | 
17 |     /**
18 |      * Create a new middleware instance.
19 |      *
20 |      * @param  \Illuminate\Contracts\Auth\Factory  $auth
21 |      * @return void
22 |      */
23 |     public function __construct(Auth $auth)
24 |     {
25 |         $this->auth = $auth;
26 |     }
27 | 
28 |     /**
29 |      * Handle an incoming request.
30 |      *
31 |      * @param  \Illuminate\Http\Request  $request
32 |      * @param  \Closure  $next
33 |      * @param  string|null  $guard
34 |      * @return mixed
35 |      */
36 |     public function handle($request, Closure $next, $guard = null)
37 |     {
38 |         if ($this->auth->guard($guard)->guest()) {
39 |             return response('Unauthorized.', 401);
40 |         }
41 | 
42 |         return $next($request);
43 |     }
44 | }
45 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Http/Middleware/ExampleMiddleware.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Http\Middleware;
 4 | 
 5 | use Closure;
 6 | 
 7 | class ExampleMiddleware
 8 | {
 9 |     /**
10 |      * Handle an incoming request.
11 |      *
12 |      * @param  \Illuminate\Http\Request  $request
13 |      * @param  \Closure  $next
14 |      * @return mixed
15 |      */
16 |     public function handle($request, Closure $next)
17 |     {
18 |         return $next($request);
19 |     }
20 | }
21 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Jobs/ExampleJob.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Jobs;
 4 | 
 5 | class ExampleJob extends Job
 6 | {
 7 |     /**
 8 |      * Create a new job instance.
 9 |      *
10 |      * @return void
11 |      */
12 |     public function __construct()
13 |     {
14 |         //
15 |     }
16 | 
17 |     /**
18 |      * Execute the job.
19 |      *
20 |      * @return void
21 |      */
22 |     public function handle()
23 |     {
24 |         //
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Jobs/Job.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Jobs;
 4 | 
 5 | use Illuminate\Bus\Queueable;
 6 | use Illuminate\Queue\SerializesModels;
 7 | use Illuminate\Queue\InteractsWithQueue;
 8 | use Illuminate\Contracts\Queue\ShouldQueue;
 9 | 
10 | abstract class Job implements ShouldQueue
11 | {
12 |     /*
13 |     |--------------------------------------------------------------------------
14 |     | Queueable Jobs
15 |     |--------------------------------------------------------------------------
16 |     |
17 |     | This job base class provides a central location to place any logic that
18 |     | is shared across all of your jobs. The trait included with the class
19 |     | provides access to the "queueOn" and "delay" queue helper methods.
20 |     |
21 |     */
22 | 
23 |     use InteractsWithQueue, Queueable, SerializesModels;
24 | }
25 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Listeners/ExampleListener.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Listeners;
 4 | 
 5 | use App\Events\ExampleEvent;
 6 | use Illuminate\Queue\InteractsWithQueue;
 7 | use Illuminate\Contracts\Queue\ShouldQueue;
 8 | 
 9 | class ExampleListener
10 | {
11 |     /**
12 |      * Create the event listener.
13 |      *
14 |      * @return void
15 |      */
16 |     public function __construct()
17 |     {
18 |         //
19 |     }
20 | 
21 |     /**
22 |      * Handle the event.
23 |      *
24 |      * @param  ExampleEvent  $event
25 |      * @return void
26 |      */
27 |     public function handle(ExampleEvent $event)
28 |     {
29 |         //
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Providers/AppServiceProvider.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Providers;
 4 | 
 5 | use Illuminate\Support\ServiceProvider;
 6 | 
 7 | class AppServiceProvider extends ServiceProvider
 8 | {
 9 |     /**
10 |      * Register any application services.
11 |      *
12 |      * @return void
13 |      */
14 |     public function register()
15 |     {
16 |         //
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Providers/AuthServiceProvider.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Providers;
 4 | 
 5 | use App\User;
 6 | use Illuminate\Support\Facades\Gate;
 7 | use Illuminate\Support\ServiceProvider;
 8 | 
 9 | class AuthServiceProvider extends ServiceProvider
10 | {
11 |     /**
12 |      * Register any application services.
13 |      *
14 |      * @return void
15 |      */
16 |     public function register()
17 |     {
18 |         //
19 |     }
20 | 
21 |     /**
22 |      * Boot the authentication services for the application.
23 |      *
24 |      * @return void
25 |      */
26 |     public function boot()
27 |     {
28 |         // Here you may define how you wish users to be authenticated for your Lumen
29 |         // application. The callback which receives the incoming request instance
30 |         // should return either a User instance or null. You're free to obtain
31 |         // the User instance via an API token or any other method necessary.
32 | 
33 |         $this->app['auth']->viaRequest('api', function ($request) {
34 |             if ($request->input('api_token')) {
35 |                 return User::where('api_token', $request->input('api_token'))->first();
36 |             }
37 |         });
38 |     }
39 | }
40 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/Providers/EventServiceProvider.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App\Providers;
 4 | 
 5 | use Laravel\Lumen\Providers\EventServiceProvider as ServiceProvider;
 6 | 
 7 | class EventServiceProvider extends ServiceProvider
 8 | {
 9 |     /**
10 |      * The event listener mappings for the application.
11 |      *
12 |      * @var array
13 |      */
14 |     protected $listen = [
15 |         'App\Events\ExampleEvent' => [
16 |             'App\Listeners\ExampleListener',
17 |         ],
18 |     ];
19 | }
20 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/app/User.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace App;
 4 | 
 5 | use Illuminate\Auth\Authenticatable;
 6 | use Laravel\Lumen\Auth\Authorizable;
 7 | use Illuminate\Database\Eloquent\Model;
 8 | use Illuminate\Contracts\Auth\Authenticatable as AuthenticatableContract;
 9 | use Illuminate\Contracts\Auth\Access\Authorizable as AuthorizableContract;
10 | 
11 | class User extends Model implements AuthenticatableContract, AuthorizableContract
12 | {
13 |     use Authenticatable, Authorizable;
14 | 
15 |     /**
16 |      * The attributes that are mass assignable.
17 |      *
18 |      * @var array
19 |      */
20 |     protected $fillable = [
21 |         'name', 'email',
22 |     ];
23 | 
24 |     /**
25 |      * The attributes excluded from the model's JSON form.
26 |      *
27 |      * @var array
28 |      */
29 |     protected $hidden = [
30 |         'password',
31 |     ];
32 | }
33 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/artisan:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env php
 2 | <?php
 3 | 
 4 | use Symfony\Component\Console\Input\ArgvInput;
 5 | use Symfony\Component\Console\Output\ConsoleOutput;
 6 | 
 7 | /*
 8 | |--------------------------------------------------------------------------
 9 | | Create The Application
10 | |--------------------------------------------------------------------------
11 | |
12 | | First we need to get an application instance. This creates an instance
13 | | of the application / container and bootstraps the application so it
14 | | is ready to receive HTTP / Console requests from the environment.
15 | |
16 | */
17 | 
18 | $app = require __DIR__.'/bootstrap/app.php';
19 | 
20 | /*
21 | |--------------------------------------------------------------------------
22 | | Run The Artisan Application
23 | |--------------------------------------------------------------------------
24 | |
25 | | When we run the console application, the current CLI command will be
26 | | executed in this console and the response sent back to a terminal
27 | | or another output device for the developers. Here goes nothing!
28 | |
29 | */
30 | 
31 | $kernel = $app->make(
32 |     'Illuminate\Contracts\Console\Kernel'
33 | );
34 | 
35 | exit($kernel->handle(new ArgvInput, new ConsoleOutput));
36 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/bootstrap/app.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | require_once __DIR__.'/../vendor/autoload.php';
  4 | 
  5 | /*
  6 | try {
  7 |     (new Dotenv\Dotenv(dirname(__DIR__)))->load();
  8 | } catch (Dotenv\Exception\InvalidPathException $e) {
  9 |     //
 10 | }
 11 |  */
 12 | 
 13 | 
 14 | /*
 15 | |--------------------------------------------------------------------------
 16 | | Create The Application
 17 | |--------------------------------------------------------------------------
 18 | |
 19 | | Here we will load the environment and create the application instance
 20 | | that serves as the central piece of this framework. We'll use this
 21 | | application as an "IoC" container and router for this framework.
 22 | |
 23 | */
 24 | 
 25 | $app = new Laravel\Lumen\Application(
 26 |     dirname(__DIR__)
 27 | );
 28 | 
 29 | // $app->withFacades();
 30 | 
 31 | // $app->withEloquent();
 32 | 
 33 | /*
 34 | |--------------------------------------------------------------------------
 35 | | Register Container Bindings
 36 | |--------------------------------------------------------------------------
 37 | |
 38 | | Now we will register a few bindings in the service container. We will
 39 | | register the exception handler and the console kernel. You may add
 40 | | your own bindings here if you like or you can make another file.
 41 | |
 42 | */
 43 | 
 44 | $app->singleton(
 45 |     Illuminate\Contracts\Debug\ExceptionHandler::class,
 46 |     App\Exceptions\Handler::class
 47 | );
 48 | 
 49 | $app->singleton(
 50 |     Illuminate\Contracts\Console\Kernel::class,
 51 |     App\Console\Kernel::class
 52 | );
 53 | 
 54 | /*
 55 | |--------------------------------------------------------------------------
 56 | | Register Middleware
 57 | |--------------------------------------------------------------------------
 58 | |
 59 | | Next, we will register the middleware with the application. These can
 60 | | be global middleware that run before and after each request into a
 61 | | route or middleware that'll be assigned to some specific routes.
 62 | |
 63 | */
 64 | 
 65 | // $app->middleware([
 66 | //     App\Http\Middleware\ExampleMiddleware::class
 67 | // ]);
 68 | 
 69 | // $app->routeMiddleware([
 70 | //     'auth' => App\Http\Middleware\Authenticate::class,
 71 | // ]);
 72 | 
 73 | /*
 74 | |--------------------------------------------------------------------------
 75 | | Register Service Providers
 76 | |--------------------------------------------------------------------------
 77 | |
 78 | | Here we will register all of the application's service providers which
 79 | | are used to bind services into the container. Service providers are
 80 | | totally optional, so you are not required to uncomment this line.
 81 | |
 82 | */
 83 | 
 84 | // $app->register(App\Providers\AppServiceProvider::class);
 85 | // $app->register(App\Providers\AuthServiceProvider::class);
 86 | // $app->register(App\Providers\EventServiceProvider::class);
 87 | 
 88 | /*
 89 | |--------------------------------------------------------------------------
 90 | | Load The Application Routes
 91 | |--------------------------------------------------------------------------
 92 | |
 93 | | Next we will include the routes file so that they can all be added to
 94 | | the application. This will provide all of the URLs the application
 95 | | can respond to, as well as the controllers that may handle them.
 96 | |
 97 | */
 98 | 
 99 | $app->router->group([
100 |     'namespace' => 'App\Http\Controllers',
101 | ], function ($router) use ($app) {
102 |     require __DIR__.'/../routes/web.php';
103 | });
104 | 
105 | return $app;
106 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "laravel/lumen",
 3 |     "description": "The Laravel Lumen Framework.",
 4 |     "keywords": ["framework", "laravel", "lumen"],
 5 |     "license": "MIT",
 6 |     "type": "project",
 7 |     "require": {
 8 |         "php": ">=7.1.3",
 9 |         "ext-json": "*",
10 |         "laravel/lumen-framework": "5.7.*",
11 |         "vlucas/phpdotenv": "~2.2"
12 |     },
13 |     "require-dev": {
14 |         "fzaninotto/faker": "~1.4",
15 |         "mockery/mockery": "~1.0",
16 |         "phpunit/phpunit": "~7.0"
17 |     },
18 |     "autoload": {
19 |         "psr-4": {
20 |             "App\\": "app/"
21 |         }
22 |     },
23 |     "scripts": {
24 |         "post-root-package-install": [
25 |             "@php -r \"file_exists('.env') || copy('.env.example', '.env');\""
26 |         ]
27 |     },
28 |     "config": {
29 |         "preferred-install": "dist",
30 |         "sort-packages": true,
31 |         "optimize-autoloader": true
32 |     },
33 |     "minimum-stability": "dev",
34 |     "prefer-stable": true
35 | }
36 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/.htaccess:
--------------------------------------------------------------------------------
 1 | <IfModule mod_rewrite.c>
 2 |     <IfModule mod_negotiation.c>
 3 |         Options -MultiViews -Indexes
 4 |     </IfModule>
 5 | 
 6 |     RewriteEngine On
 7 | 
 8 |     # Handle Authorization Header
 9 |     RewriteCond %{HTTP:Authorization} .
10 |     RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
11 | 
12 |     # Redirect Trailing Slashes If Not A Folder...
13 |     RewriteCond %{REQUEST_FILENAME} !-d
14 |     RewriteCond %{REQUEST_URI} (.+)/$
15 |     RewriteRule ^ %1 [L,R=301]
16 | 
17 |     # Handle Front Controller...
18 |     RewriteCond %{REQUEST_FILENAME} !-d
19 |     RewriteCond %{REQUEST_FILENAME} !-f
20 |     RewriteRule ^ index.php [L]
21 | </IfModule>
22 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/index.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /*
 4 | |--------------------------------------------------------------------------
 5 | | Create The Application
 6 | |--------------------------------------------------------------------------
 7 | |
 8 | | First we need to get an application instance. This creates an instance
 9 | | of the application / container and bootstraps the application so it
10 | | is ready to receive HTTP / Console requests from the environment.
11 | |
12 | */
13 | 
14 | $app = require __DIR__.'/../bootstrap/app.php';
15 | 
16 | /*
17 | |--------------------------------------------------------------------------
18 | | Run The Application
19 | |--------------------------------------------------------------------------
20 | |
21 | | Once we have the application, we can handle the incoming request
22 | | through the kernel, and send the associated response back to
23 | | the client's browser allowing them to enjoy the creative
24 | | and wonderful application we have prepared for them.
25 | |
26 | */
27 | 
28 | $app->run();
29 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/anchor/anchor.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 2 |     "http://www.w3.org/TR/html4/loose.dtd">
 3 | <html>
 4 |     <head>
 5 |         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 6 |         <title></title>
 7 |         <style type="text/css">
 8 |             *{color: #838383;margin: 0;padding: 0}
 9 |             html,body {font-size: 12px;overflow: hidden; }
10 |             .content{padding:5px 0 0 15px;}
11 |             input{width:210px;height:21px;line-height:21px;margin-left: 4px;}
12 |         </style>
13 |     </head>
14 |     <body>
15 |         <div class="content">
16 |             <span><var id="lang_input_anchorName"></var></span><input id="anchorName"  value="" />
17 |         </div>
18 |         <script type="text/javascript" src="../internal.js"></script>
19 |         <script type="text/javascript">
20 |             var anchorInput = $G('anchorName'),
21 |                 node = editor.selection.getRange().getClosedNode();
22 |             if(node && node.tagName == 'IMG' && (node = node.getAttribute('anchorname'))){
23 |                 anchorInput.value = node;
24 |             }
25 |             anchorInput.onkeydown = function(evt){
26 |                 evt = evt || window.event;
27 |                 if(evt.keyCode == 13){
28 |                     editor.execCommand('anchor', anchorInput.value);
29 |                     dialog.close();
30 |                     domUtils.preventDefault(evt)
31 |                 }
32 |             };
33 |             dialog.onok = function (){
34 |                 editor.execCommand('anchor', anchorInput.value);
35 |                 dialog.close();
36 |             };
37 |             $focus(anchorInput);
38 |         </script>
39 |     </body>
40 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/emotion.css:
--------------------------------------------------------------------------------
 1 | .jd img{
 2 |     background:transparent url(images/jxface2.gif?v=1.1) no-repeat scroll left top;
 3 |     cursor:pointer;width:35px;height:35px;display:block;
 4 | }
 5 | .pp img{
 6 |     background:transparent url(images/fface.gif?v=1.1) no-repeat scroll left top;
 7 |     cursor:pointer;width:25px;height:25px;display:block;
 8 | }
 9 | .ldw img{
10 |     background:transparent url(images/wface.gif?v=1.1) no-repeat scroll left top;
11 |     cursor:pointer;width:35px;height:35px;display:block;
12 | }
13 | .tsj img{
14 |     background:transparent url(images/tface.gif?v=1.1) no-repeat scroll left top;
15 |     cursor:pointer;width:35px;height:35px;display:block;
16 | }
17 | .cat img{
18 |     background:transparent url(images/cface.gif?v=1.1) no-repeat scroll left top;
19 |     cursor:pointer;width:35px;height:35px;display:block;
20 | }
21 | .bb img{
22 |     background:transparent url(images/bface.gif?v=1.1) no-repeat scroll left top;
23 |     cursor:pointer;width:35px;height:35px;display:block;
24 | }
25 | .youa img{
26 |     background:transparent url(images/yface.gif?v=1.1) no-repeat scroll left top;
27 |     cursor:pointer;width:35px;height:35px;display:block;
28 | }
29 | 
30 | .smileytable td {height: 37px;}
31 | #tabPanel{margin-left:5px;overflow: hidden;}
32 | #tabContent {float:left;background:#FFFFFF;}
33 | #tabContent div{display: none;width:480px;overflow:hidden;}
34 | #tabIconReview.show{left:17px;display:block;}
35 | .menuFocus{background:#ACCD3C;}
36 | .menuDefault{background:#FFFFFF;}
37 | #tabIconReview{position:absolute;left:406px;left:398px \9;top:41px;z-index:65533;width:90px;height:76px;}
38 | img.review{width:90px;height:76px;border:2px solid #9cb945;background:#FFFFFF;background-position:center;background-repeat:no-repeat;}
39 | 
40 | .wrapper .tabbody{position:relative;float:left;clear:both;padding:10px;width: 95%;}
41 | .tabbody table{width: 100%;}
42 | .tabbody td{border:1px solid #BAC498;}
43 | .tabbody td span{display: block;zoom:1;padding:0 4px;}


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/emotion.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
 2 | <html xmlns="http://www.w3.org/1999/xhtml">
 3 | <head>
 4 |     <title></title>
 5 |     <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 6 |     <meta name="robots" content="noindex, nofollow"/>
 7 |     <script type="text/javascript" src="../internal.js"></script>
 8 |     <link rel="stylesheet" type="text/css" href="emotion.css">
 9 | </head>
10 | <body>
11 | <div id="tabPanel" class="wrapper">
12 |     <div id="tabHeads" class="tabhead">
13 |         <span><var id="lang_input_choice"></var></span>
14 |         <span><var id="lang_input_Tuzki"></var></span>
15 |         <span><var id="lang_input_lvdouwa"></var></span>
16 |         <span><var id="lang_input_BOBO"></var></span>
17 |         <span><var id="lang_input_babyCat"></var></span>
18 |         <span><var id="lang_input_bubble"></var></span>
19 |         <span><var id="lang_input_youa"></var></span>
20 |     </div>
21 |     <div id="tabBodys" class="tabbody">
22 |         <div id="tab0"></div>
23 |         <div id="tab1"></div>
24 |         <div id="tab2"></div>
25 |         <div id="tab3"></div>
26 |         <div id="tab4"></div>
27 |         <div id="tab5"></div>
28 |         <div id="tab6"></div>
29 |     </div>
30 | </div>
31 | <div id="tabIconReview">
32 |     <img id='faceReview' class='review' src="../../themes/default/images/spacer.gif"/>
33 | </div>
34 | <script type="text/javascript" src="emotion.js"></script>
35 | <script type="text/javascript">
36 |     var emotion = {
37 |         tabNum:7, //切换面板数量
38 |         SmilmgName:{ tab0:['j_00', 84], tab1:['t_00', 40], tab2:['w_00', 52], tab3:['B_00', 63], tab4:['C_00', 20], tab5:['i_f', 50], tab6:['y_00', 40] }, //图片前缀名
39 |         imageFolders:{ tab0:'jx2/', tab1:'tsj/', tab2:'ldw/', tab3:'bobo/', tab4:'babycat/', tab5:'face/', tab6:'youa/'}, //图片对应文件夹路径
40 |         imageCss:{tab0:'jd', tab1:'tsj', tab2:'ldw', tab3:'bb', tab4:'cat', tab5:'pp', tab6:'youa'}, //图片css类名
41 |         imageCssOffset:{tab0:35, tab1:35, tab2:35, tab3:35, tab4:35, tab5:25, tab6:35}, //图片偏移
42 |         SmileyInfor:{
43 |             tab0:['Kiss', 'Love', 'Yeah', '啊！', '背扭', '顶', '抖胸', '88', '汗', '瞌睡', '鲁拉', '拍砖', '揉脸', '生日快乐', '大笑', '瀑布汗~', '惊讶', '臭美', '傻笑', '抛媚眼', '发怒', '打酱油', '俯卧撑', '气愤', '?', '吻', '怒', '胜利', 'HI', 'KISS', '不说', '不要', '扯花', '大心', '顶', '大惊', '飞吻', '鬼脸', '害羞', '口水', '狂哭', '来', '发财了', '吃西瓜', '套牢', '害羞', '庆祝', '我来了', '敲打', '晕了', '胜利', '臭美', '被打了', '贪吃', '迎接', '酷', '微笑', '亲吻', '调皮', '惊恐', '耍酷', '发火', '害羞', '汗水', '大哭', '', '加油', '困', '你NB', '晕倒', '开心', '偷笑', '大哭', '滴汗', '叹气', '超赞', '??', '飞吻', '天使', '撒花', '生气', '被砸', '吓傻', '随意吐'],
44 |             tab1:['Kiss', 'Love', 'Yeah', '啊！', '背扭', '顶', '抖胸', '88', '汗', '瞌睡', '鲁拉', '拍砖', '揉脸', '生日快乐', '摊手', '睡觉', '瘫坐', '无聊', '星星闪', '旋转', '也不行', '郁闷', '正Music', '抓墙', '撞墙至死', '歪头', '戳眼', '飘过', '互相拍砖', '砍死你', '扔桌子', '少林寺', '什么？', '转头', '我爱牛奶', '我踢', '摇晃', '晕厥', '在笼子里', '震荡'],
45 |             tab2:['大笑', '瀑布汗~', '惊讶', '臭美', '傻笑', '抛媚眼', '发怒', '我错了', 'money', '气愤', '挑逗', '吻', '怒', '胜利', '委屈', '受伤', '说啥呢？', '闭嘴', '不', '逗你玩儿', '飞吻', '眩晕', '魔法', '我来了', '睡了', '我打', '闭嘴', '打', '打晕了', '刷牙', '爆揍', '炸弹', '倒立', '刮胡子', '邪恶的笑', '不要不要', '爱恋中', '放大仔细看', '偷窥', '超高兴', '晕', '松口气', '我跑', '享受', '修养', '哭', '汗', '啊~', '热烈欢迎', '打酱油', '俯卧撑', '?'],
46 |             tab3:['HI', 'KISS', '不说', '不要', '扯花', '大心', '顶', '大惊', '飞吻', '鬼脸', '害羞', '口水', '狂哭', '来', '泪眼', '流泪', '生气', '吐舌', '喜欢', '旋转', '再见', '抓狂', '汗', '鄙视', '拜', '吐血', '嘘', '打人', '蹦跳', '变脸', '扯肉', '吃To', '吃花', '吹泡泡糖', '大变身', '飞天舞', '回眸', '可怜', '猛抽', '泡泡', '苹果', '亲', '', '骚舞', '烧香', '睡', '套娃娃', '捅捅', '舞倒', '西红柿', '爱慕', '摇', '摇摆', '杂耍', '招财', '被殴', '被球闷', '大惊', '理想', '欧打', '呕吐', '碎', '吐痰'],
47 |             tab4:['发财了', '吃西瓜', '套牢', '害羞', '庆祝', '我来了', '敲打', '晕了', '胜利', '臭美', '被打了', '贪吃', '迎接', '酷', '顶', '幸运', '爱心', '躲', '送花', '选择'],
48 |             tab5:['微笑', '亲吻', '调皮', '惊讶', '耍酷', '发火', '害羞', '汗水', '大哭', '得意', '鄙视', '困', '夸奖', '晕倒', '疑问', '媒婆', '狂吐', '青蛙', '发愁', '亲吻', '', '爱心', '心碎', '玫瑰', '礼物', '哭', '奸笑', '可爱', '得意', '呲牙', '暴汗', '楚楚可怜', '困', '哭', '生气', '惊讶', '口水', '彩虹', '夜空', '太阳', '钱钱', '灯泡', '咖啡', '蛋糕', '音乐', '爱', '胜利', '赞', '鄙视', 'OK'],
49 |             tab6:['男兜', '女兜', '开心', '乖乖', '偷笑', '大笑', '抽泣', '大哭', '无奈', '滴汗', '叹气', '狂晕', '委屈', '超赞', '??', '疑问', '飞吻', '天使', '撒花', '生气', '被砸', '口水', '泪奔', '吓傻', '吐舌头', '点头', '随意吐', '旋转', '困困', '鄙视', '狂顶', '篮球', '再见', '欢迎光临', '恭喜发财', '稍等', '我在线', '恕不议价', '库房有货', '货在路上']
50 |         }
51 |     };
52 | </script>
53 | </body>
54 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/0.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/0.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/bface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/bface.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/cface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/cface.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/fface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/fface.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/jxface2.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/jxface2.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/neweditor-tab-bg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/neweditor-tab-bg.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/tface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/tface.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/wface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/wface.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/yface.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/emotion/images/yface.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/image.html:
--------------------------------------------------------------------------------
  1 | <!doctype html>
  2 | <html>
  3 | <head>
  4 |     <meta charset="UTF-8">
  5 |     <title>ueditor图片对话框</title>
  6 |     <script type="text/javascript" src="../internal.js"></script>
  7 | 
  8 |     <!-- jquery -->
  9 |     <script type="text/javascript" src="../../third-party/jquery-1.10.2.min.js"></script>
 10 | 
 11 |     <!-- webuploader -->
 12 |     <script src="../../third-party/webuploader/webuploader.min.js"></script>
 13 |     <link rel="stylesheet" type="text/css" href="../../third-party/webuploader/webuploader.css">
 14 | 
 15 |     <!-- image dialog -->
 16 |     <link rel="stylesheet" href="image.css" type="text/css" />
 17 | </head>
 18 | <body>
 19 | 
 20 |     <div class="wrapper">
 21 |         <div id="tabhead" class="tabhead">
 22 |             <span class="tab" data-content-id="remote"><var id="lang_tab_remote"></var></span>
 23 |             <span class="tab focus" data-content-id="upload"><var id="lang_tab_upload"></var></span>
 24 |             <span class="tab" data-content-id="online"><var id="lang_tab_online"></var></span>
 25 |             <span class="tab" data-content-id="search"><var id="lang_tab_search"></var></span>
 26 |         </div>
 27 |         <div class="alignBar">
 28 |             <label class="algnLabel"><var id="lang_input_align"></var></label>
 29 |                     <span id="alignIcon">
 30 |                         <span id="noneAlign" class="none-align focus" data-align="none"></span>
 31 |                         <span id="leftAlign" class="left-align" data-align="left"></span>
 32 |                         <span id="rightAlign" class="right-align" data-align="right"></span>
 33 |                         <span id="centerAlign" class="center-align" data-align="center"></span>
 34 |                     </span>
 35 |             <input id="align" name="align" type="hidden" value="none"/>
 36 |         </div>
 37 |         <div id="tabbody" class="tabbody">
 38 | 
 39 |             <!-- 远程图片 -->
 40 |             <div id="remote" class="panel">
 41 |                 <div class="top">
 42 |                     <div class="row">
 43 |                         <label for="url"><var id="lang_input_url"></var></label>
 44 |                         <span><input class="text" id="url" type="text"/></span>
 45 |                     </div>
 46 |                 </div>
 47 |                 <div class="left">
 48 |                     <div class="row">
 49 |                         <label><var id="lang_input_size"></var></label>
 50 |                         <span><var id="lang_input_width">&nbsp;&nbsp;</var><input class="text" type="text" id="width"/>px </span>
 51 |                         <span><var id="lang_input_height">&nbsp;&nbsp;</var><input class="text" type="text" id="height"/>px </span>
 52 |                         <span><input id="lock" type="checkbox" disabled="disabled"><span id="lockicon"></span></span>
 53 |                     </div>
 54 |                     <div class="row">
 55 |                         <label><var id="lang_input_border"></var></label>
 56 |                         <span><input class="text" type="text" id="border"/>px </span>
 57 |                     </div>
 58 |                     <div class="row">
 59 |                         <label><var id="lang_input_vhspace"></var></label>
 60 |                         <span><input class="text" type="text" id="vhSpace"/>px </span>
 61 |                     </div>
 62 |                     <div class="row">
 63 |                         <label><var id="lang_input_title"></var></label>
 64 |                         <span><input class="text" type="text" id="title"/></span>
 65 |                     </div>
 66 |                 </div>
 67 |                 <div class="right"><div id="preview"></div></div>
 68 |             </div>
 69 | 
 70 |             <!-- 上传图片 -->
 71 |             <div id="upload" class="panel focus">
 72 |                 <div id="queueList" class="queueList">
 73 |                     <div class="statusBar element-invisible">
 74 |                         <div class="progress">
 75 |                             <span class="text">0%</span>
 76 |                             <span class="percentage"></span>
 77 |                         </div><div class="info"></div>
 78 |                         <div class="btns">
 79 |                             <div id="filePickerBtn"></div>
 80 |                             <div class="uploadBtn"><var id="lang_start_upload"></var></div>
 81 |                         </div>
 82 |                     </div>
 83 |                     <div id="dndArea" class="placeholder">
 84 |                         <div class="filePickerContainer">
 85 |                             <div id="filePickerReady"></div>
 86 |                         </div>
 87 |                     </div>
 88 |                     <ul class="filelist element-invisible">
 89 |                         <li id="filePickerBlock" class="filePickerBlock"></li>
 90 |                     </ul>
 91 |                 </div>
 92 |             </div>
 93 | 
 94 |             <!-- 在线图片 -->
 95 |             <div id="online" class="panel">
 96 |                 <div id="imageList"><var id="lang_imgLoading"></var></div>
 97 |             </div>
 98 | 
 99 |             <!-- 搜索图片 -->
100 |             <div id="search" class="panel">
101 |                 <div class="searchBar">
102 |                     <input id="searchTxt" class="searchTxt text" type="text" />
103 |                     <select id="searchType" class="searchType">
104 |                         <option value="&s=4&z=0"></option>
105 |                         <option value="&s=1&z=19"></option>
106 |                         <option value="&s=2&z=0"></option>
107 |                         <option value="&s=3&z=0"></option>
108 |                     </select>
109 |                     <input id="searchReset" type="button"  />
110 |                     <input id="searchBtn" type="button"  />
111 |                 </div>
112 |                 <div id="searchList" class="searchList"><ul id="searchListUl"></ul></div>
113 |             </div>
114 | 
115 |         </div>
116 |     </div>
117 |     <script type="text/javascript" src="image.js"></script>
118 | 
119 | </body>
120 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/alignicon.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/alignicon.jpg


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/bg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/bg.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/icons.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/icons.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/icons.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/icons.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/image.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/image.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/progress.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/progress.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/success.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/success.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/success.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/image/images/success.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/internal.js:
--------------------------------------------------------------------------------
 1 | (function () {
 2 |     var parent = window.parent;
 3 |     //dialog对象
 4 |     dialog = parent.$EDITORUI[window.frameElement.id.replace( /_iframe$/, '' )];
 5 |     //当前打开dialog的编辑器实例
 6 |     editor = dialog.editor;
 7 | 
 8 |     UE = parent.UE;
 9 | 
10 |     domUtils = UE.dom.domUtils;
11 | 
12 |     utils = UE.utils;
13 | 
14 |     browser = UE.browser;
15 | 
16 |     ajax = UE.ajax;
17 | 
18 |     $G = function ( id ) {
19 |         return document.getElementById( id )
20 |     };
21 |     //focus元素
22 |     $focus = function ( node ) {
23 |         setTimeout( function () {
24 |             if ( browser.ie ) {
25 |                 var r = node.createTextRange();
26 |                 r.collapse( false );
27 |                 r.select();
28 |             } else {
29 |                 node.focus()
30 |             }
31 |         }, 0 )
32 |     };
33 |     utils.loadFile(document,{
34 |         href:editor.options.themePath + editor.options.theme + "/dialogbase.css?cache="+Math.random(),
35 |         tag:"link",
36 |         type:"text/css",
37 |         rel:"stylesheet"
38 |     });
39 |     lang = editor.getLang(dialog.className.split( "-" )[2]);
40 |     if(lang){
41 |         domUtils.on(window,'load',function () {
42 | 
43 |             var langImgPath = editor.options.langPath + editor.options.lang + "/images/";
44 |             //针对静态资源
45 |             for ( var i in lang["static"] ) {
46 |                 var dom = $G( i );
47 |                 if(!dom) continue;
48 |                 var tagName = dom.tagName,
49 |                     content = lang["static"][i];
50 |                 if(content.src){
51 |                     //clone
52 |                     content = utils.extend({},content,false);
53 |                     content.src = langImgPath + content.src;
54 |                 }
55 |                 if(content.style){
56 |                     content = utils.extend({},content,false);
57 |                     content.style = content.style.replace(/url\s*\(/g,"url(" + langImgPath)
58 |                 }
59 |                 switch ( tagName.toLowerCase() ) {
60 |                     case "var":
61 |                         dom.parentNode.replaceChild( document.createTextNode( content ), dom );
62 |                         break;
63 |                     case "select":
64 |                         var ops = dom.options;
65 |                         for ( var j = 0, oj; oj = ops[j]; ) {
66 |                             oj.innerHTML = content.options[j++];
67 |                         }
68 |                         for ( var p in content ) {
69 |                             p != "options" && dom.setAttribute( p, content[p] );
70 |                         }
71 |                         break;
72 |                     default :
73 |                         domUtils.setAttributes( dom, content);
74 |                 }
75 |             }
76 |         } );
77 |     }
78 | 
79 | 
80 | })();
81 | 
82 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/link/link.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
  2 |         "http://www.w3.org/TR/html4/loose.dtd">
  3 | <html>
  4 | <head>
  5 |     <title></title>
  6 |     <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
  7 |     <script type="text/javascript" src="../internal.js"></script>
  8 |     <style type="text/css">
  9 |         *{margin:0;padding:0;color: #838383;}
 10 |         table{font-size: 12px;margin: 10px;line-height: 30px}
 11 |         .txt{width:300px;height:21px;line-height:21px;border:1px solid #d7d7d7;}
 12 |     </style>
 13 | </head>
 14 | <body>
 15 |     <table>
 16 |         <tr>
 17 |             <td><label for="text"> <var id="lang_input_text"></var></label></td>
 18 |             <td><input class="txt" id="text" type="text" disabled="true"/></td>
 19 |         </tr>
 20 |         <tr>
 21 |             <td><label for="href"> <var id="lang_input_url"></var></label></td>
 22 |             <td><input class="txt" id="href" type="text" /></td>
 23 |         </tr>
 24 |         <tr>
 25 |             <td><label for="title"> <var id="lang_input_title"></var></label></td>
 26 |             <td><input class="txt" id="title" type="text"/></td>
 27 |         </tr>
 28 |         <tr>
 29 |              <td colspan="2">
 30 |                  <label for="target"><var id="lang_input_target"></var></label>
 31 |                  <input id="target" type="checkbox"/>
 32 |              </td>
 33 |         </tr>
 34 |         <tr>
 35 |             <td colspan="2" id="msg"></td>
 36 |         </tr>
 37 |     </table>
 38 | <script type="text/javascript">
 39 |     var range = editor.selection.getRange(),
 40 |         link = range.collapsed ? editor.queryCommandValue( "link" ) : editor.selection.getStart(),
 41 |         url,
 42 |         text = $G('text'),
 43 |         rangeLink = domUtils.findParentByTagName(range.getCommonAncestor(),'a',true),
 44 |         orgText;
 45 |     link = domUtils.findParentByTagName( link, "a", true );
 46 |     if(link){
 47 |         url = utils.html(link.getAttribute( '_href' ) || link.getAttribute( 'href', 2 ));
 48 | 
 49 |         if(rangeLink === link && !link.getElementsByTagName('img').length){
 50 |             text.removeAttribute('disabled');
 51 |             orgText = text.value = link[browser.ie ? 'innerText':'textContent'];
 52 |         }else{
 53 |             text.setAttribute('disabled','true');
 54 |             text.value = lang.validLink;
 55 |         }
 56 | 
 57 |     }else{
 58 |         if(range.collapsed){
 59 |             text.removeAttribute('disabled');
 60 |             text.value = '';
 61 |         }else{
 62 |             text.setAttribute('disabled','true');
 63 |             text.value = lang.validLink;
 64 |         }
 65 | 
 66 |     }
 67 |     $G("title").value = url ? link.title : "";
 68 |     $G("href").value = url ? url: '';
 69 |     $G("target").checked = url && link.target == "_blank" ? true :  false;
 70 |     $focus($G("href"));
 71 | 
 72 |     function handleDialogOk(){
 73 |         var href =$G('href').value.replace(/^\s+|\s+$/g, '');
 74 |         if(href){
 75 |             if(!hrefStartWith(href,["http","/","ftp://",'#'])) {
 76 |                 href  = "http://" + href;
 77 |             }
 78 |             var obj = {
 79 |                 'href' : href,
 80 |                 'target' : $G("target").checked ? "_blank" : '_self',
 81 |                 'title' : $G("title").value.replace(/^\s+|\s+$/g, ''),
 82 |                 '_href':href
 83 |             };
 84 |             //修改链接内容的情况太特殊了，所以先做到这里了
 85 |             //todo:情况多的时候，做到command里
 86 |             if(orgText && text.value != orgText){
 87 |                 link[browser.ie ? 'innerText' : 'textContent'] =  obj.textValue = text.value;
 88 |                 range.selectNode(link).select()
 89 |             }
 90 |             if(range.collapsed){
 91 |                 obj.textValue = text.value;
 92 |             }
 93 |             editor.execCommand('link',utils.clearEmptyAttrs(obj) );
 94 |             dialog.close();
 95 |         }
 96 |     }
 97 |     dialog.onok = handleDialogOk;
 98 |     $G('href').onkeydown = $G('title').onkeydown = function(evt){
 99 |         evt = evt || window.event;
100 |         if (evt.keyCode == 13) {
101 |             handleDialogOk();
102 |             return false;
103 |         }
104 |     };
105 |     $G('href').onblur = function(){
106 |         if(!hrefStartWith(this.value,["http","/","ftp://",'#'])){
107 |             $G("msg").innerHTML = "<span style='color: red'>"+lang.httpPrompt+"</span>";
108 |         }else{
109 |             $G("msg").innerHTML = "";
110 |         }
111 |     };
112 | 
113 |     function hrefStartWith(href,arr){
114 |         href = href.replace(/^\s+|\s+$/g, '');
115 |         for(var i=0,ai;ai=arr[i++];){
116 |             if(href.indexOf(ai)==0){
117 |                 return true;
118 |             }
119 |         }
120 |         return false;
121 |     }
122 | 
123 | 
124 | </script>
125 | </body>
126 | </html>
127 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/preview/preview.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 2 |     "http://www.w3.org/TR/html4/loose.dtd">
 3 | <html>
 4 |     <head>
 5 |         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 6 |         <style>
 7 |             html,body{
 8 |                 height:100%;
 9 |                 width:100%;
10 |                 padding:0;
11 |                 margin:0;
12 |             }
13 |             #preview{
14 |                 width:100%;
15 |                 height:100%;
16 |                 padding:0;
17 |                 margin:0;
18 |             }
19 |             #preview *{font-family:sans-serif;font-size:16px;}
20 |         </style>
21 |         <script type="text/javascript" src="../internal.js"></script>
22 |         <script src="../../ueditor.parse.js"></script>
23 |         <title></title>
24 |     </head>
25 |     <body class="view">
26 |         <div id="preview" style="margin:8px">
27 | 
28 |         </div>
29 |     </body>
30 |     <script>
31 |         document.getElementById('preview').innerHTML = editor.getContent();
32 |         uParse('#preview',{
33 |             rootPath : '../../',
34 |             chartContainerHeight:500
35 |         })
36 |         dialog.oncancel = function(){
37 |             document.getElementById('preview').innerHTML = '';
38 |         }
39 |     </script>
40 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/searchreplace/searchreplace.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
  2 |         "http://www.w3.org/TR/html4/loose.dtd">
  3 | <html>
  4 | <head>
  5 |     <title></title>
  6 |     <meta content="text/html; charset=utf-8" http-equiv="Content-Type"/>
  7 |     <script type="text/javascript" src="../internal.js"></script>
  8 |     <style type="text/css">
  9 |         .warpper{ position:relative;width: 380px; height: 100%; margin: 10px auto;}
 10 |         .tabbody{height: 160px;}
 11 |         .tabbody table{width:100%;border-collapse: separate;border-spacing: 3px;}
 12 |         .tabbody .panel{width:373px;height:100%;padding-left: 5px;position: absolute;background-color: #fff;}
 13 |         .tabbody input.int{ width:190px;height:21px;border:1px solid #d7d7d7;line-height:21px;}
 14 |         .tabbody input.btn{padding: 0 5px; text-align:center;line-height:24px; text-decoration: none;height:24px;background:url("../../themes/default/images/dialog-title-bg.png") repeat-x;border:1px solid #ccc; }
 15 |     </style>
 16 | </head>
 17 | <body>
 18 | <div class="warpper" id="searchtab">
 19 |     <div id="head" class="tabhead">
 20 |         <span  tabsrc="find" class="focus"><var id="lang_tab_search"></var></span>
 21 |         <span  tabsrc="replace" ><var id="lang_tab_replace"></var></span>
 22 |     </div>
 23 |     <div class="tabbody">
 24 |         <div class="panel" id="find">
 25 |             <table>
 26 |                 <tr>
 27 |                     <td width="80"><var id="lang_search1"></var>: </td>
 28 |                     <td><input id="findtxt" type="text" class="int" /></td>
 29 |                 </tr>
 30 |                 <!--<tr>-->
 31 | 
 32 |                     <!--<td colspan="2"><span style="color:red"><var id="lang_searchReg"></var></span></td>-->
 33 |                 <!--</tr>-->
 34 |                 <tr>
 35 |                     <td><var id="lang_case_sensitive1"></var></td>
 36 |                     <td>
 37 |                         <input id="matchCase" type="checkbox" />
 38 |                     </td>
 39 |                 </tr>
 40 |                 <tr>
 41 |                     <td colspan="2">
 42 |                         <input id="nextFindBtn" type="button" class="btn" />
 43 |                         <input id="preFindBtn" type="button" class="btn" />
 44 |                     </td>
 45 |                 </tr>
 46 |                 <tr>
 47 |                     <td colspan="2">
 48 |                         &nbsp;
 49 |                     </td>
 50 |                 </tr>
 51 |                 <tr>
 52 |                     <td colspan="2">
 53 |                         <span id="search-msg" style="color:red"></span>
 54 |                     </td>
 55 |                 </tr>
 56 |             </table>
 57 |         </div>
 58 |         <div class="panel" id="replace">
 59 |             <table>
 60 |                 <tr>
 61 |                     <td width="80"><var id="lang_search2"></var>: </td>
 62 |                     <td><input id="findtxt1" type="text" class="int"  /></td>
 63 |                 </tr>
 64 |                 <!--<tr>-->
 65 | 
 66 |                     <!--<td colspan="2"><span style="color:red"><var id="lang_searchReg1"></var></span></td>-->
 67 |                 <!--</tr>-->
 68 |                 <tr>
 69 |                     <td><var id="lang_replace"></var>: </td>
 70 |                     <td><input id="replacetxt" type="text" class="int" /></td>
 71 |                 </tr>
 72 |                 <tr>
 73 |                     <td><var id="lang_case_sensitive2"></var></td>
 74 |                     <td>
 75 |                         <input id="matchCase1" type="checkbox" />
 76 |                     </td>
 77 |                 </tr>
 78 |                 <tr>
 79 |                     <td colspan="2">
 80 |                         <input id="nextReplaceBtn" type="button" class="btn" />
 81 |                         <input id="preReplaceBtn" type="button" class="btn" />
 82 |                         <input id="repalceBtn" type="button" class="btn" />
 83 |                         <input id="repalceAllBtn" type="button" class="btn" />
 84 |                     </td>
 85 |                 </tr>
 86 |                 <tr>
 87 |                     <td colspan="2">
 88 |                         &nbsp;
 89 |                     </td>
 90 |                 </tr>
 91 |                 <tr>
 92 |                     <td colspan="2">
 93 |                         <span id="replace-msg" style="color:red"></span>
 94 |                     </td>
 95 |                 </tr>
 96 |             </table>
 97 |         </div>
 98 |     </div>
 99 | </div>
100 | <script type="text/javascript" src="searchreplace.js"></script>
101 | </body>
102 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/searchreplace/searchreplace.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Created with JetBrains PhpStorm.
  3 |  * User: xuheng
  4 |  * Date: 12-9-26
  5 |  * Time: 下午12:29
  6 |  * To change this template use File | Settings | File Templates.
  7 |  */
  8 | 
  9 | //清空上次查选的痕迹
 10 | editor.firstForSR = 0;
 11 | editor.currentRangeForSR = null;
 12 | //给tab注册切换事件
 13 | /**
 14 |  * tab点击处理事件
 15 |  * @param tabHeads
 16 |  * @param tabBodys
 17 |  * @param obj
 18 |  */
 19 | function clickHandler( tabHeads,tabBodys,obj ) {
 20 |     //head样式更改
 21 |     for ( var k = 0, len = tabHeads.length; k < len; k++ ) {
 22 |         tabHeads[k].className = "";
 23 |     }
 24 |     obj.className = "focus";
 25 |     //body显隐
 26 |     var tabSrc = obj.getAttribute( "tabSrc" );
 27 |     for ( var j = 0, length = tabBodys.length; j < length; j++ ) {
 28 |         var body = tabBodys[j],
 29 |             id = body.getAttribute( "id" );
 30 |         if ( id != tabSrc ) {
 31 |             body.style.zIndex = 1;
 32 |         } else {
 33 |             body.style.zIndex = 200;
 34 |         }
 35 |     }
 36 | 
 37 | }
 38 | 
 39 | /**
 40 |  * TAB切换
 41 |  * @param tabParentId  tab的父节点ID或者对象本身
 42 |  */
 43 | function switchTab( tabParentId ) {
 44 |     var tabElements = $G( tabParentId ).children,
 45 |         tabHeads = tabElements[0].children,
 46 |         tabBodys = tabElements[1].children;
 47 | 
 48 |     for ( var i = 0, length = tabHeads.length; i < length; i++ ) {
 49 |         var head = tabHeads[i];
 50 |         if ( head.className === "focus" )clickHandler(tabHeads,tabBodys, head );
 51 |         head.onclick = function () {
 52 |             clickHandler(tabHeads,tabBodys,this);
 53 |         }
 54 |     }
 55 | }
 56 | $G('searchtab').onmousedown = function(){
 57 |     $G('search-msg').innerHTML = '';
 58 |     $G('replace-msg').innerHTML = ''
 59 | }
 60 | //是否区分大小写
 61 | function getMatchCase(id) {
 62 |     return $G(id).checked ? true : false;
 63 | }
 64 | //查找
 65 | $G("nextFindBtn").onclick = function (txt, dir, mcase) {
 66 |     var findtxt = $G("findtxt").value, obj;
 67 |     if (!findtxt) {
 68 |         return false;
 69 |     }
 70 |     obj = {
 71 |         searchStr:findtxt,
 72 |         dir:1,
 73 |         casesensitive:getMatchCase("matchCase")
 74 |     };
 75 |     if (!frCommond(obj)) {
 76 |         var bk = editor.selection.getRange().createBookmark();
 77 |         $G('search-msg').innerHTML = lang.getEnd;
 78 |         editor.selection.getRange().moveToBookmark(bk).select();
 79 | 
 80 | 
 81 |     }
 82 | };
 83 | $G("nextReplaceBtn").onclick = function (txt, dir, mcase) {
 84 |     var findtxt = $G("findtxt1").value, obj;
 85 |     if (!findtxt) {
 86 |         return false;
 87 |     }
 88 |     obj = {
 89 |         searchStr:findtxt,
 90 |         dir:1,
 91 |         casesensitive:getMatchCase("matchCase1")
 92 |     };
 93 |     frCommond(obj);
 94 | };
 95 | $G("preFindBtn").onclick = function (txt, dir, mcase) {
 96 |     var findtxt = $G("findtxt").value, obj;
 97 |     if (!findtxt) {
 98 |         return false;
 99 |     }
100 |     obj = {
101 |         searchStr:findtxt,
102 |         dir:-1,
103 |         casesensitive:getMatchCase("matchCase")
104 |     };
105 |     if (!frCommond(obj)) {
106 |         $G('search-msg').innerHTML = lang.getStart;
107 |     }
108 | };
109 | $G("preReplaceBtn").onclick = function (txt, dir, mcase) {
110 |     var findtxt = $G("findtxt1").value, obj;
111 |     if (!findtxt) {
112 |         return false;
113 |     }
114 |     obj = {
115 |         searchStr:findtxt,
116 |         dir:-1,
117 |         casesensitive:getMatchCase("matchCase1")
118 |     };
119 |     frCommond(obj);
120 | };
121 | //替换
122 | $G("repalceBtn").onclick = function () {
123 |     var findtxt = $G("findtxt1").value.replace(/^\s|\s$/g, ""), obj,
124 |         replacetxt = $G("replacetxt").value.replace(/^\s|\s$/g, "");
125 |     if (!findtxt) {
126 |         return false;
127 |     }
128 |     if (findtxt == replacetxt || (!getMatchCase("matchCase1") && findtxt.toLowerCase() == replacetxt.toLowerCase())) {
129 |         return false;
130 |     }
131 |     obj = {
132 |         searchStr:findtxt,
133 |         dir:1,
134 |         casesensitive:getMatchCase("matchCase1"),
135 |         replaceStr:replacetxt
136 |     };
137 |     frCommond(obj);
138 | };
139 | //全部替换
140 | $G("repalceAllBtn").onclick = function () {
141 |     var findtxt = $G("findtxt1").value.replace(/^\s|\s$/g, ""), obj,
142 |         replacetxt = $G("replacetxt").value.replace(/^\s|\s$/g, "");
143 |     if (!findtxt) {
144 |         return false;
145 |     }
146 |     if (findtxt == replacetxt || (!getMatchCase("matchCase1") && findtxt.toLowerCase() == replacetxt.toLowerCase())) {
147 |         return false;
148 |     }
149 |     obj = {
150 |         searchStr:findtxt,
151 |         casesensitive:getMatchCase("matchCase1"),
152 |         replaceStr:replacetxt,
153 |         all:true
154 |     };
155 |     var num = frCommond(obj);
156 |     if (num) {
157 |         $G('replace-msg').innerHTML = lang.countMsg.replace("{#count}", num);
158 |     }
159 | };
160 | //执行
161 | var frCommond = function (obj) {
162 |     return editor.execCommand("searchreplace", obj);
163 | };
164 | switchTab("searchtab");


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/spechars/spechars.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 2 |         "http://www.w3.org/TR/html4/loose.dtd">
 3 | <html>
 4 | <head>
 5 |     <title></title>
 6 |     <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
 7 |     <script type="text/javascript" src="../internal.js"></script>
 8 |     <style type="text/css">
 9 |         html,body{overflow:hidden;}
10 |         #specharsTab{width: 97%;margin: 10px auto; zoom:1;position: relative}
11 |         .tabbody {height:447px;}
12 |         .tabbody span{ margin: 5px 3px;text-align: center;display:inline-block;width: 40px;height:16px;line-height: 16px;cursor: pointer; }
13 |     </style>
14 | </head>
15 | <body>
16 |     <div id="specharsTab">
17 |         <div id="tabHeads" class="tabhead"></div><div id="tabBodys" class="tabbody"></div>
18 |     </div>
19 | <script type="text/javascript" src="spechars.js"></script>
20 | </body>
21 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/spechars/spechars.js:
--------------------------------------------------------------------------------
 1 | /**
 2 |  * Created with JetBrains PhpStorm.
 3 |  * User: xuheng
 4 |  * Date: 12-9-26
 5 |  * Time: 下午1:09
 6 |  * To change this template use File | Settings | File Templates.
 7 |  */
 8 | var charsContent = [
 9 |     { name:"tsfh", title:lang.tsfh, content:toArray("、,。,·,ˉ,ˇ,¨,〃,々,—,～,‖,…,‘,’,“,”,〔,〕,〈,〉,《,》,「,」,『,』,〖,〗,【,】,±,×,÷,∶,∧,∨,∑,∏,∪,∩,∈,∷,√,⊥,∥,∠,⌒,⊙,∫,∮,≡,≌,≈,∽,∝,≠,≮,≯,≤,≥,∞,∵,∴,♂,♀,°,′,″,℃,＄,¤,￠,￡,‰,§,№,☆,★,○,●,◎,◇,◆,□,■,△,▲,※,→,←,↑,↓,〓,〡,〢,〣,〤,〥,〦,〧,〨,〩,㊣,㎎,㎏,㎜,㎝,㎞,㎡,㏄,㏎,㏑,㏒,㏕,︰,￢,￤,℡,ˊ,ˋ,˙,–,―,‥,‵,℅,℉,↖,↗,↘,↙,∕,∟,∣,≒,≦,≧,⊿,═,║,╒,╓,╔,╕,╖,╗,╘,╙,╚,╛,╜,╝,╞,╟,╠,╡,╢,╣,╤,╥,╦,╧,╨,╩,╪,╫,╬,╭,╮,╯,╰,╱,╲,╳,▁,▂,▃,▄,▅,▆,▇,�,█,▉,▊,▋,▌,▍,▎,▏,▓,▔,▕,▼,▽,◢,◣,◤,◥,☉,⊕,〒,〝,〞")},
10 |     { name:"lmsz", title:lang.lmsz, content:toArray("ⅰ,ⅱ,ⅲ,ⅳ,ⅴ,ⅵ,ⅶ,ⅷ,ⅸ,ⅹ,Ⅰ,Ⅱ,Ⅲ,Ⅳ,Ⅴ,Ⅵ,Ⅶ,Ⅷ,Ⅸ,Ⅹ,Ⅺ,Ⅻ")},
11 |     { name:"szfh", title:lang.szfh, content:toArray("⒈,⒉,⒊,⒋,⒌,⒍,⒎,⒏,⒐,⒑,⒒,⒓,⒔,⒕,⒖,⒗,⒘,⒙,⒚,⒛,⑴,⑵,⑶,⑷,⑸,⑹,⑺,⑻,⑼,⑽,⑾,⑿,⒀,⒁,⒂,⒃,⒄,⒅,⒆,⒇,①,②,③,④,⑤,⑥,⑦,⑧,⑨,⑩,㈠,㈡,㈢,㈣,㈤,㈥,㈦,㈧,㈨,㈩")},
12 |     { name:"rwfh", title:lang.rwfh, content:toArray("ぁ,あ,ぃ,い,ぅ,う,ぇ,え,ぉ,お,か,が,き,ぎ,く,ぐ,け,げ,こ,ご,さ,ざ,し,じ,す,ず,せ,ぜ,そ,ぞ,た,だ,ち,ぢ,っ,つ,づ,て,で,と,ど,な,に,ぬ,ね,の,は,ば,ぱ,ひ,び,ぴ,ふ,ぶ,ぷ,へ,べ,ぺ,ほ,ぼ,ぽ,ま,み,む,め,も,ゃ,や,ゅ,ゆ,ょ,よ,ら,り,る,れ,ろ,ゎ,わ,ゐ,ゑ,を,ん,ァ,ア,ィ,イ,ゥ,ウ,ェ,エ,ォ,オ,カ,ガ,キ,ギ,ク,グ,ケ,ゲ,コ,ゴ,サ,ザ,シ,ジ,ス,ズ,セ,ゼ,ソ,ゾ,タ,ダ,チ,ヂ,ッ,ツ,ヅ,テ,デ,ト,ド,ナ,ニ,ヌ,ネ,ノ,ハ,バ,パ,ヒ,ビ,ピ,フ,ブ,プ,ヘ,ベ,ペ,ホ,ボ,ポ,マ,ミ,ム,メ,モ,ャ,ヤ,ュ,ユ,ョ,ヨ,ラ,リ,ル,レ,ロ,ヮ,ワ,ヰ,ヱ,ヲ,ン,ヴ,ヵ,ヶ")},
13 |     { name:"xlzm", title:lang.xlzm, content:toArray("Α,Β,Γ,Δ,Ε,Ζ,Η,Θ,Ι,Κ,Λ,Μ,Ν,Ξ,Ο,Π,Ρ,Σ,Τ,Υ,Φ,Χ,Ψ,Ω,α,β,γ,δ,ε,ζ,η,θ,ι,κ,λ,μ,ν,ξ,ο,π,ρ,σ,τ,υ,φ,χ,ψ,ω")},
14 |     { name:"ewzm", title:lang.ewzm, content:toArray("А,Б,В,Г,Д,Е,Ё,Ж,З,И,Й,К,Л,М,Н,О,П,Р,С,Т,У,Ф,Х,Ц,Ч,Ш,Щ,Ъ,Ы,Ь,Э,Ю,Я,а,б,в,г,д,е,ё,ж,з,и,й,к,л,м,н,о,п,р,с,т,у,ф,х,ц,ч,ш,щ,ъ,ы,ь,э,ю,я")},
15 |     { name:"pyzm", title:lang.pyzm, content:toArray("ā,á,ǎ,à,ē,é,ě,è,ī,í,ǐ,ì,ō,ó,ǒ,ò,ū,ú,ǔ,ù,ǖ,ǘ,ǚ,ǜ,ü")},
16 |     { name:"yyyb", title:lang.yyyb, content:toArray("i:,i,e,æ,ʌ,ə:,ə,u:,u,ɔ:,ɔ,a:,ei,ai,ɔi,əu,au,iə,εə,uə,p,t,k,b,d,g,f,s,ʃ,θ,h,v,z,ʒ,ð,tʃ,tr,ts,dʒ,dr,dz,m,n,ŋ,l,r,w,j,")},
17 |     { name:"zyzf", title:lang.zyzf, content:toArray("ㄅ,ㄆ,ㄇ,ㄈ,ㄉ,ㄊ,ㄋ,ㄌ,ㄍ,ㄎ,ㄏ,ㄐ,ㄑ,ㄒ,ㄓ,ㄔ,ㄕ,ㄖ,ㄗ,ㄘ,ㄙ,ㄚ,ㄛ,ㄜ,ㄝ,ㄞ,ㄟ,ㄠ,ㄡ,ㄢ,ㄣ,ㄤ,ㄥ,ㄦ,ㄧ,ㄨ")}
18 | ];
19 | (function createTab(content) {
20 |     for (var i = 0, ci; ci = content[i++];) {
21 |         var span = document.createElement("span");
22 |         span.setAttribute("tabSrc", ci.name);
23 |         span.innerHTML = ci.title;
24 |         if (i == 1)span.className = "focus";
25 |         domUtils.on(span, "click", function () {
26 |             var tmps = $G("tabHeads").children;
27 |             for (var k = 0, sk; sk = tmps[k++];) {
28 |                 sk.className = "";
29 |             }
30 |             tmps = $G("tabBodys").children;
31 |             for (var k = 0, sk; sk = tmps[k++];) {
32 |                 sk.style.display = "none";
33 |             }
34 |             this.className = "focus";
35 |             $G(this.getAttribute("tabSrc")).style.display = "";
36 |         });
37 |         $G("tabHeads").appendChild(span);
38 |         domUtils.insertAfter(span, document.createTextNode("\n"));
39 |         var div = document.createElement("div");
40 |         div.id = ci.name;
41 |         div.style.display = (i == 1) ? "" : "none";
42 |         var cons = ci.content;
43 |         for (var j = 0, con; con = cons[j++];) {
44 |             var charSpan = document.createElement("span");
45 |             charSpan.innerHTML = con;
46 |             domUtils.on(charSpan, "click", function () {
47 |                 editor.execCommand("insertHTML", this.innerHTML);
48 |                 dialog.close();
49 |             });
50 |             div.appendChild(charSpan);
51 |         }
52 |         $G("tabBodys").appendChild(div);
53 |     }
54 | })(charsContent);
55 | function toArray(str) {
56 |     return str.split(",");
57 | }
58 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/wordimage/fClipboard_ueditor.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/wordimage/fClipboard_ueditor.swf


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/wordimage/imageUploader.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/dialogs/wordimage/imageUploader.swf


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/wordimage/wordimage.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
  2 |         "http://www.w3.org/TR/html4/loose.dtd">
  3 | <html>
  4 | <head>
  5 |     <title></title>
  6 |     <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
  7 |     <script type="text/javascript" src="../internal.js"></script>
  8 |     <style type="text/css">
  9 |         .wrapper{width: 600px;padding: 10px;height: 352px;overflow: hidden;position: relative;border-bottom: 1px solid #d7d7d7}
 10 |         .localPath input{float: left;width: 350px;line-height: 20px;height: 20px;}
 11 |         #clipboard{float:left;width: 70px;height: 30px; }
 12 |         .description{ color: #0066cc; margin-top: 2px; width: 450px; height: 45px;float: left;line-height: 22px}
 13 |         #upload{width: 100px;height: 30px;float: right; margin:10px 2px 0 0;cursor: pointer;}
 14 |         #msg{ width: 140px; height: 30px; line-height:25px;float: left;color: red}
 15 |     </style>
 16 | </head>
 17 | <body>
 18 |     <div class="wrapper">
 19 |         <div class="localPath">
 20 |             <input id="localPath" type="text" readonly />
 21 |             <div id="clipboard"></div>
 22 |             <div id="msg"></div>
 23 |         </div>
 24 |         <div id="flashContainer"></div>
 25 |         <div>
 26 |             <div id="upload" style="display: none" ><img id="uploadBtn"></div>
 27 |             <div class="description">
 28 |                 <span style="color: red"><var id="lang_resave"></var>: </span><var id="lang_step"></var>
 29 |             </div>
 30 |           </div>
 31 |     </div>
 32 |     <script type="text/javascript" src="tangram.js"></script>
 33 |     <script type="text/javascript" src="wordimage.js"></script>
 34 |     <script type="text/javascript">
 35 |         editor.setOpt({
 36 |             wordImageFieldName:"upfile",
 37 |             compressSide:0,
 38 |             maxImageSideLength:900
 39 |         });
 40 | 
 41 |             //全局变量
 42 |         var imageUrls = [],          //用于保存从服务器返回的图片信息数组
 43 |             selectedImageCount = 0,  //当前已选择的但未上传的图片数量
 44 |             optImageUrl = editor.getActionUrl(editor.getOpt('imageActionName')),
 45 |             optImageFieldName = editor.getOpt('imageFieldName'),
 46 |             optImageCompressBorder = editor.getOpt('imageCompressEnable') ? editor.getOpt('imageCompressBorder'):null,
 47 |             maxSize = editor.getOpt('imageMaxSize') / 1024,
 48 |             extension = editor.getOpt('imageAllowFiles').join(';').replace(/\./g, '*.');
 49 | 
 50 |         /* 添加额外的GET参数 */
 51 |         var params = utils.serializeParam(editor.queryCommandValue('serverparam')) || '',
 52 |             urlWidthParams = optImageUrl + (optImageUrl.indexOf('?') == -1 ? '?':'&') + params;
 53 | 
 54 |         utils.domReady(function(){
 55 |             //创建Flash相关的参数集合
 56 |             var flashOptions = {
 57 |                 container:"flashContainer",                                                    //flash容器id
 58 |                 url:urlWidthParams,                                           // 上传处理页面的url地址
 59 |                 ext:editor.queryCommandValue('serverParam') || {},                                 //可向服务器提交的自定义参数列表
 60 |                 fileType:'{"description":"'+lang.fileType+'", "extension":"' + extension + '"}',     //上传文件格式限制
 61 |                 flashUrl:'imageUploader.swf',                                                  //上传用的flash组件地址
 62 |                 width:600,          //flash的宽度
 63 |                 height:272,         //flash的高度
 64 |                 gridWidth:120,     // 每一个预览图片所占的宽度
 65 |                 gridHeight:120,    // 每一个预览图片所占的高度
 66 |                 picWidth:100,      // 单张预览图片的宽度
 67 |                 picHeight:100,     // 单张预览图片的高度
 68 |                 uploadDataFieldName: optImageFieldName,    // POST请求中图片数据的key
 69 |                 picDescFieldName:'pictitle',      // POST请求中图片描述的key
 70 |                 maxSize: maxSize,                         // 文件的最大体积,单位M
 71 |                 compressSize:1,                   // 上传前如果图片体积超过该值，会先压缩,单位M
 72 |                 maxNum:32,                         // 单次最大可上传多少个文件
 73 |                 compressSide: 0,                 //等比压缩的基准，0为按照最长边，1为按照宽度，2为按照高度
 74 |                 compressLength: optImageCompressBorder        //能接受的最大边长，超过该值Flash会自动等比压缩
 75 |             };
 76 |             //回调函数集合，支持传递函数名的字符串、函数句柄以及函数本身三种类型
 77 |             var callbacks={
 78 |                 selectFileCallback: function(selectFiles){                // 选择文件的回调
 79 |                     selectedImageCount += selectFiles.length;
 80 |                     if(selectedImageCount) baidu.g("upload").style.display = "";
 81 |                     dialog.buttons[0].setDisabled(true); //初始化时置灰确定按钮
 82 |                 },
 83 |                 deleteFileCallback: function(delFiles){                 // 删除文件的回调
 84 |                     selectedImageCount -= delFiles.length;
 85 |                     if (!selectedImageCount) {
 86 |                         baidu.g("upload").style.display = "none";
 87 |                         dialog.buttons[0].setDisabled(false);         //没有选择图片时重新点亮按钮
 88 |                     }
 89 |                 },
 90 |                 uploadCompleteCallback: function(data){               // 单个文件上传完成的回调
 91 |                     try{var info = eval("(" + data.info + ")");
 92 |                     info && imageUrls.push(info);
 93 |                     selectedImageCount--;
 94 |                     }catch(e){}
 95 |                 },
 96 |                 uploadErrorCallback: function (data){         // 单个文件上传失败的回调,
 97 |                     console && console.log(data);
 98 |                 },
 99 |                 allCompleteCallback: function(){              // 全部上传完成时的回调
100 |                     dialog.buttons[0].setDisabled(false);    //上传完毕后点亮按钮
101 |                 }
102 |                 //exceedFileCallback: 'exceedFileCallback',   // 文件超出限制的最大体积时的回调
103 |                 //startUploadCallback: startUploadCallback    // 开始上传某个文件时的回调
104 |             };
105 |             wordImage.init(flashOptions,callbacks);
106 |         });
107 | 
108 |     </script>
109 | 
110 | </body>
111 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/dialogs/wordimage/wordimage.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Created by JetBrains PhpStorm.
  3 |  * User: taoqili
  4 |  * Date: 12-1-30
  5 |  * Time: 下午12:50
  6 |  * To change this template use File | Settings | File Templates.
  7 |  */
  8 | 
  9 | 
 10 | 
 11 | var wordImage = {};
 12 | //(function(){
 13 | var g = baidu.g,
 14 | 	flashObj,flashContainer;
 15 | 
 16 | wordImage.init = function(opt, callbacks) {
 17 | 	showLocalPath("localPath");
 18 | 	//createCopyButton("clipboard","localPath");
 19 | 	createFlashUploader(opt, callbacks);
 20 | 	addUploadListener();
 21 | 	addOkListener();
 22 | };
 23 | 
 24 | function hideFlash(){
 25 |     flashObj = null;
 26 |     flashContainer.innerHTML = "";
 27 | }
 28 | function addOkListener() {
 29 | 	dialog.onok = function() {
 30 | 		if (!imageUrls.length) return;
 31 | 		var urlPrefix = editor.getOpt('imageUrlPrefix'),
 32 |             images = domUtils.getElementsByTagName(editor.document,"img");
 33 |         editor.fireEvent('saveScene');
 34 | 		for (var i = 0,img; img = images[i++];) {
 35 | 			var src = img.getAttribute("word_img");
 36 | 			if (!src) continue;
 37 | 			for (var j = 0,url; url = imageUrls[j++];) {
 38 | 				if (src.indexOf(url.original.replace(" ","")) != -1) {
 39 | 					img.src = urlPrefix + url.url;
 40 | 					img.setAttribute("_src", urlPrefix + url.url);  //同时修改"_src"属性
 41 | 					img.setAttribute("title",url.title);
 42 |                     domUtils.removeAttributes(img, ["word_img","style","width","height"]);
 43 | 					editor.fireEvent("selectionchange");
 44 | 					break;
 45 | 				}
 46 | 			}
 47 | 		}
 48 |         editor.fireEvent('saveScene');
 49 |         hideFlash();
 50 | 	};
 51 |     dialog.oncancel = function(){
 52 |         hideFlash();
 53 |     }
 54 | }
 55 | 
 56 | /**
 57 |  * 绑定开始上传事件
 58 |  */
 59 | function addUploadListener() {
 60 | 	g("upload").onclick = function () {
 61 | 		flashObj.upload();
 62 | 		this.style.display = "none";
 63 | 	};
 64 | }
 65 | 
 66 | function showLocalPath(id) {
 67 |     //单张编辑
 68 |     var img = editor.selection.getRange().getClosedNode();
 69 |     var images = editor.execCommand('wordimage');
 70 |     if(images.length==1 || img && img.tagName == 'IMG'){
 71 |         g(id).value = images[0];
 72 |         return;
 73 |     }
 74 | 	var path = images[0];
 75 |     var leftSlashIndex  = path.lastIndexOf("/")||0,  //不同版本的doc和浏览器都可能影响到这个符号，故直接判断两种
 76 |         rightSlashIndex = path.lastIndexOf("\\")||0,
 77 |         separater = leftSlashIndex > rightSlashIndex ? "/":"\\" ;
 78 | 
 79 | 	path = path.substring(0, path.lastIndexOf(separater)+1);
 80 | 	g(id).value = path;
 81 | }
 82 | 
 83 | function createFlashUploader(opt, callbacks) {
 84 |     //由于lang.flashI18n是静态属性，不可以直接进行修改，否则会影响到后续内容
 85 |     var i18n = utils.extend({},lang.flashI18n);
 86 |     //处理图片资源地址的编码，补全等问题
 87 |     for(var i in i18n){
 88 |         if(!(i in {"lang":1,"uploadingTF":1,"imageTF":1,"textEncoding":1}) && i18n[i]){
 89 |             i18n[i] = encodeURIComponent(editor.options.langPath + editor.options.lang + "/images/" + i18n[i]);
 90 |         }
 91 |     }
 92 |     opt = utils.extend(opt,i18n,false);
 93 | 	var option = {
 94 | 		createOptions:{
 95 | 			id:'flash',
 96 | 			url:opt.flashUrl,
 97 | 			width:opt.width,
 98 | 			height:opt.height,
 99 | 			errorMessage:lang.flashError,
100 | 			wmode:browser.safari ? 'transparent' : 'window',
101 | 			ver:'10.0.0',
102 | 			vars:opt,
103 | 			container:opt.container
104 | 		}
105 | 	};
106 | 
107 | 	option = extendProperty(callbacks, option);
108 | 	flashObj = new baidu.flash.imageUploader(option);
109 |     flashContainer = $G(opt.container);
110 | }
111 | 
112 | function extendProperty(fromObj, toObj) {
113 | 	for (var i in fromObj) {
114 | 		if (!toObj[i]) {
115 | 			toObj[i] = fromObj[i];
116 | 		}
117 | 	}
118 | 	return toObj;
119 | }
120 | 
121 | //})();
122 | 
123 | function getPasteData(id) {
124 | 	baidu.g("msg").innerHTML = lang.copySuccess + "</br>";
125 | 	setTimeout(function() {
126 | 		baidu.g("msg").innerHTML = "";
127 | 	}, 5000);
128 | 	return baidu.g(id).value;
129 | }
130 | 
131 | function createCopyButton(id, dataFrom) {
132 | 	baidu.swf.create({
133 | 			id:"copyFlash",
134 | 			url:"fClipboard_ueditor.swf",
135 | 			width:"58",
136 | 			height:"25",
137 | 			errorMessage:"",
138 | 			bgColor:"#CBCBCB",
139 | 			wmode:"transparent",
140 | 			ver:"10.0.0",
141 | 			vars:{
142 | 				tid:dataFrom
143 | 			}
144 | 		}, id
145 | 	);
146 | 
147 | 	var clipboard = baidu.swf.getMovie("copyFlash");
148 | 	var clipinterval = setInterval(function() {
149 | 		if (clipboard && clipboard.flashInit) {
150 | 			clearInterval(clipinterval);
151 | 			clipboard.setHandCursor(true);
152 | 			clipboard.setContentFuncName("getPasteData");
153 | 			//clipboard.setMEFuncName("mouseEventHandler");
154 | 		}
155 | 	}, 500);
156 | }
157 | createCopyButton("clipboard", "localPath");


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/addimage.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/addimage.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/alldeletebtnhoverskin.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/alldeletebtnhoverskin.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/alldeletebtnupskin.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/alldeletebtnupskin.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/background.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/background.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/button.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/button.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/copy.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/copy.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/deletedisable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/deletedisable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/deleteenable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/deleteenable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/listbackground.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/listbackground.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/localimage.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/localimage.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/music.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/music.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotateleftdisable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotateleftdisable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotateleftenable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotateleftenable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotaterightdisable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotaterightdisable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotaterightenable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/rotaterightenable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/en/images/upload.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/en/images/upload.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/copy.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/copy.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/localimage.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/localimage.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/music.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/music.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/upload.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/lang/zh-cn/images/upload.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/dialogbase.css:
--------------------------------------------------------------------------------
  1 | /*弹出对话框页面样式组件
  2 | */
  3 | 
  4 | /*reset
  5 | */
  6 | html, body, div, span, applet, object, iframe,
  7 | h1, h2, h3, h4, h5, h6, p, blockquote, pre,
  8 | a, abbr, acronym, address, big, cite, code,
  9 | del, dfn, em, font, img, ins, kbd, q, s, samp,
 10 | small, strike, strong, sub, sup, tt, var,
 11 | b, u, i, center,
 12 | dl, dt, dd, ol, ul, li,
 13 | fieldset, form, label, legend,
 14 | table, caption, tbody, tfoot, thead, tr, th, td {
 15 |     margin: 0;
 16 |     padding: 0;
 17 |     outline: 0;
 18 |     font-size: 100%;
 19 | }
 20 | 
 21 | body {
 22 |     line-height: 1;
 23 | }
 24 | 
 25 | ol, ul {
 26 |     list-style: none;
 27 | }
 28 | 
 29 | blockquote, q {
 30 |     quotes: none;
 31 | }
 32 | 
 33 | ins {
 34 |     text-decoration: none;
 35 | }
 36 | 
 37 | del {
 38 |     text-decoration: line-through;
 39 | }
 40 | 
 41 | table {
 42 |     border-collapse: collapse;
 43 |     border-spacing: 0;
 44 | }
 45 | 
 46 | /*module
 47 | */
 48 | body {
 49 |     background-color: #fff;
 50 |     font: 12px/1.5 sans-serif, "宋体", "Arial Narrow", HELVETICA;
 51 |     color: #646464;
 52 | }
 53 | 
 54 | /*tab*/
 55 | .tabhead {
 56 |     position: relative;
 57 |     z-index: 10;
 58 | }
 59 | 
 60 | .tabhead span {
 61 |     display: inline-block;
 62 |     padding: 0 5px;
 63 |     height: 30px;
 64 |     border: 1px solid #ccc;
 65 |     background: url("images/dialog-title-bg.png") repeat-x;
 66 |     text-align: center;
 67 |     line-height: 30px;
 68 |     cursor: pointer;
 69 |     *margin-right: 5px;
 70 | }
 71 | 
 72 | .tabhead span.focus {
 73 |     height: 31px;
 74 |     border-bottom: none;
 75 |     background: #fff;
 76 | }
 77 | 
 78 | .tabbody {
 79 |     position: relative;
 80 |     top: -1px;
 81 |     margin: 0 auto;
 82 |     border: 1px solid #ccc;
 83 | }
 84 | 
 85 | /*button*/
 86 | a.button {
 87 |     display: block;
 88 |     text-align: center;
 89 |     line-height: 24px;
 90 |     text-decoration: none;
 91 |     height: 24px;
 92 |     width: 95px;
 93 |     border: 0;
 94 |     color: #838383;
 95 |     background: url(../../themes/default/images/icons-all.gif) no-repeat;
 96 | }
 97 | 
 98 | a.button:hover {
 99 |     background-position: 0 -30px;
100 | }


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/anchor.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/anchor.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/arrow.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/arrow.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/arrow_down.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/arrow_down.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/arrow_up.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/arrow_up.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/button-bg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/button-bg.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cancelbutton.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cancelbutton.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/charts.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/charts.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_h.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_h.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_h.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_h.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_v.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_v.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_v.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/cursor_v.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/dialog-title-bg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/dialog-title-bg.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/filescan.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/filescan.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/highlighted.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/highlighted.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/icons-all.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/icons-all.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/icons.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/icons.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/icons.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/icons.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/loaderror.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/loaderror.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/loading.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/loading.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/lock.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/lock.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/neweditor-tab-bg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/neweditor-tab-bg.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/pagebreak.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/pagebreak.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/scale.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/scale.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/sortable.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/sortable.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/spacer.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/spacer.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/sparator_v.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/sparator_v.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/table-cell-align.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/table-cell-align.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/tangram-colorpicker.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/tangram-colorpicker.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/toolbar_bg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/toolbar_bg.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/unhighlighted.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/unhighlighted.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/upload.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/upload.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/videologo.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/videologo.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/word.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/word.gif


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/default/images/wordpaste.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/themes/default/images/wordpaste.png


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/themes/iframe.css:
--------------------------------------------------------------------------------
1 | /*可以在这里添加你自己的css*/
2 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/third-party/SyntaxHighlighter/shCoreDefault.css:
--------------------------------------------------------------------------------
1 | .syntaxhighlighter a,.syntaxhighlighter div,.syntaxhighlighter code,.syntaxhighlighter,.syntaxhighlighter td,.syntaxhighlighter tr,.syntaxhighlighter tbody,.syntaxhighlighter thead,.syntaxhighlighter caption,.syntaxhighlighter textarea{-moz-border-radius:0 0 0 0!important;-webkit-border-radius:0 0 0 0!important;background:none!important;border:0!important;bottom:auto!important;float:none!important;left:auto!important;line-height:1.1em!important;margin:0!important;outline:0!important;overflow:visible!important;padding:0!important;position:static!important;right:auto!important;text-align:left!important;top:auto!important;vertical-align:baseline!important;width:auto!important;box-sizing:content-box!important;font-family:Monaco,Menlo,Consolas,"Courier New",monospace;font-weight:normal!important;font-style:normal!important;min-height:inherit!important;min-height:auto!important;font-size:13px!important}.syntaxhighlighter{width:100%!important;margin:.3em 0 .3em 0!important;position:relative!important;overflow:auto!important;background-color:#f5f5f5!important;border:1px solid #ccc!important;border-radius:4px!important;border-collapse:separate!important}.syntaxhighlighter.source{overflow:hidden!important}.syntaxhighlighter .bold{font-weight:bold!important}.syntaxhighlighter .italic{font-style:italic!important}.syntaxhighlighter .gutter div{white-space:pre!important;word-wrap:normal}.syntaxhighlighter caption{text-align:left!important;padding:.5em 0 .5em 1em!important}.syntaxhighlighter td.code{width:100%!important}.syntaxhighlighter td.code .container{position:relative!important}.syntaxhighlighter td.code .container textarea{box-sizing:border-box!important;position:absolute!important;left:0!important;top:0!important;width:100%!important;border:none!important;background:white!important;padding-left:1em!important;overflow:hidden!important;white-space:pre!important}.syntaxhighlighter td.gutter .line{text-align:right!important;padding:0 .5em 0 1em!important}.syntaxhighlighter td.code .line{padding:0 1em!important}.syntaxhighlighter.nogutter td.code .container textarea,.syntaxhighlighter.nogutter td.code .line{padding-left:0!important}.syntaxhighlighter.show{display:block!important}.syntaxhighlighter.collapsed table{display:none!important}.syntaxhighlighter.collapsed .toolbar{padding:.1em .8em 0 .8em!important;font-size:1em!important;position:static!important;width:auto!important}.syntaxhighlighter.collapsed .toolbar span{display:inline!important;margin-right:1em!important}.syntaxhighlighter.collapsed .toolbar span a{padding:0!important;display:none!important}.syntaxhighlighter.collapsed .toolbar span a.expandSource{display:inline!important}.syntaxhighlighter .toolbar{position:absolute!important;right:1px!important;top:1px!important;width:11px!important;height:11px!important;font-size:10px!important;z-index:10!important}.syntaxhighlighter .toolbar span.title{display:inline!important}.syntaxhighlighter .toolbar a{display:block!important;text-align:center!important;text-decoration:none!important;padding-top:1px!important}.syntaxhighlighter .toolbar a.expandSource{display:none!important}.syntaxhighlighter.ie{font-size:.9em!important;padding:1px 0 1px 0!important}.syntaxhighlighter.ie .toolbar{line-height:8px!important}.syntaxhighlighter.ie .toolbar a{padding-top:0!important}.syntaxhighlighter.printing .line.alt1 .content,.syntaxhighlighter.printing .line.alt2 .content,.syntaxhighlighter.printing .line.highlighted .number,.syntaxhighlighter.printing .line.highlighted.alt1 .content,.syntaxhighlighter.printing .line.highlighted.alt2 .content{background:none!important}.syntaxhighlighter.printing .line .number{color:#bbb!important}.syntaxhighlighter.printing .line .content{color:black!important}.syntaxhighlighter.printing .toolbar{display:none!important}.syntaxhighlighter.printing a{text-decoration:none!important}.syntaxhighlighter.printing .plain,.syntaxhighlighter.printing .plain a{color:black!important}.syntaxhighlighter.printing .comments,.syntaxhighlighter.printing .comments a{color:#008200!important}.syntaxhighlighter.printing .string,.syntaxhighlighter.printing .string a{color:blue!important}.syntaxhighlighter.printing .keyword{color:#ff7800!important;font-weight:bold!important}.syntaxhighlighter.printing .preprocessor{color:gray!important}.syntaxhighlighter.printing .variable{color:#a70!important}.syntaxhighlighter.printing .value{color:#090!important}.syntaxhighlighter.printing .functions{color:#ff1493!important}.syntaxhighlighter.printing .constants{color:#06c!important}.syntaxhighlighter.printing .script{font-weight:bold!important}.syntaxhighlighter.printing .color1,.syntaxhighlighter.printing .color1 a{color:gray!important}.syntaxhighlighter.printing .color2,.syntaxhighlighter.printing .color2 a{color:#ff1493!important}.syntaxhighlighter.printing .color3,.syntaxhighlighter.printing .color3 a{color:red!important}.syntaxhighlighter.printing .break,.syntaxhighlighter.printing .break a{color:black!important}.syntaxhighlighter{background-color:#f5f5f5!important}.syntaxhighlighter .line.highlighted.number{color:black!important}.syntaxhighlighter caption{color:black!important}.syntaxhighlighter .gutter{color:#afafaf!important;background-color:#f7f7f9!important;border-right:1px solid #e1e1e8!important;padding:9.5px 0 9.5px 9.5px!important;border-top-left-radius:4px!important;border-bottom-left-radius:4px!important;user-select:none!important;-moz-user-select:none!important;-webkit-user-select:none!important}.syntaxhighlighter .gutter .line.highlighted{background-color:#6ce26c!important;color:white!important}.syntaxhighlighter.printing .line .content{border:none!important}.syntaxhighlighter.collapsed{overflow:visible!important}.syntaxhighlighter.collapsed .toolbar{color:blue!important;background:white!important;border:1px solid #6ce26c!important}.syntaxhighlighter.collapsed .toolbar a{color:blue!important}.syntaxhighlighter.collapsed .toolbar a:hover{color:red!important}.syntaxhighlighter .toolbar{color:white!important;background:#6ce26c!important;border:none!important}.syntaxhighlighter .toolbar a{color:white!important}.syntaxhighlighter .toolbar a:hover{color:black!important}.syntaxhighlighter .plain,.syntaxhighlighter .plain a{color:black!important}.syntaxhighlighter .comments,.syntaxhighlighter .comments a{color:#008200!important}.syntaxhighlighter .string,.syntaxhighlighter .string a{color:blue!important}.syntaxhighlighter .keyword{color:#ff7800!important}.syntaxhighlighter .preprocessor{color:gray!important}.syntaxhighlighter .variable{color:#a70!important}.syntaxhighlighter .value{color:#090!important}.syntaxhighlighter .functions{color:#ff1493!important}.syntaxhighlighter .constants{color:#06c!important}.syntaxhighlighter .script{font-weight:bold!important;color:#ff7800!important;background-color:none!important}.syntaxhighlighter .color1,.syntaxhighlighter .color1 a{color:gray!important}.syntaxhighlighter .color2,.syntaxhighlighter .color2 a{color:#ff1493!important}.syntaxhighlighter .color3,.syntaxhighlighter .color3 a{color:red!important}.syntaxhighlighter .keyword{font-weight:bold!important}


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/third-party/codemirror/codemirror.css:
--------------------------------------------------------------------------------
  1 | .CodeMirror {
  2 |     line-height: 1em;
  3 |     font-family: monospace;
  4 | }
  5 | 
  6 | .CodeMirror-scroll {
  7 |     overflow: auto;
  8 |     height: 300px;
  9 |     /* This is needed to prevent an IE[67] bug where the scrolled content
 10 |        is visible outside of the scrolling box. */
 11 |     position: relative;
 12 | }
 13 | 
 14 | .CodeMirror-gutter {
 15 |     position: absolute; left: 0; top: 0;
 16 |     z-index: 10;
 17 |     background-color: #f7f7f7;
 18 |     border-right: 1px solid #eee;
 19 |     min-width: 2em;
 20 |     height: 100%;
 21 | }
 22 | .CodeMirror-gutter-text {
 23 |     color: #aaa;
 24 |     text-align: right;
 25 |     padding: .4em .2em .4em .4em;
 26 |     white-space: pre !important;
 27 | }
 28 | .CodeMirror-lines {
 29 |     padding: .4em;
 30 | }
 31 | 
 32 | .CodeMirror pre {
 33 |     -moz-border-radius: 0;
 34 |     -webkit-border-radius: 0;
 35 |     -o-border-radius: 0;
 36 |     border-radius: 0;
 37 |     border-width: 0; margin: 0; padding: 0; background: transparent;
 38 |     font-family: inherit;
 39 |     font-size: inherit;
 40 |     padding: 0; margin: 0;
 41 |     white-space: pre;
 42 |     word-wrap: normal;
 43 | }
 44 | 
 45 | .CodeMirror-wrap pre {
 46 |     word-wrap: break-word;
 47 |     white-space: pre-wrap;
 48 | }
 49 | .CodeMirror-wrap .CodeMirror-scroll {
 50 |     overflow-x: hidden;
 51 | }
 52 | 
 53 | .CodeMirror textarea {
 54 |     outline: none !important;
 55 | }
 56 | 
 57 | .CodeMirror pre.CodeMirror-cursor {
 58 |     z-index: 10;
 59 |     position: absolute;
 60 |     visibility: hidden;
 61 |     border-left: 1px solid black;
 62 | }
 63 | .CodeMirror-focused pre.CodeMirror-cursor {
 64 |     visibility: visible;
 65 | }
 66 | 
 67 | span.CodeMirror-selected { background: #d9d9d9; }
 68 | .CodeMirror-focused span.CodeMirror-selected { background: #d2dcf8; }
 69 | 
 70 | .CodeMirror-searching {background: #ffa;}
 71 | 
 72 | /* Default theme */
 73 | 
 74 | .cm-s-default span.cm-keyword {color: #708;}
 75 | .cm-s-default span.cm-atom {color: #219;}
 76 | .cm-s-default span.cm-number {color: #164;}
 77 | .cm-s-default span.cm-def {color: #00f;}
 78 | .cm-s-default span.cm-variable {color: black;}
 79 | .cm-s-default span.cm-variable-2 {color: #05a;}
 80 | .cm-s-default span.cm-variable-3 {color: #085;}
 81 | .cm-s-default span.cm-property {color: black;}
 82 | .cm-s-default span.cm-operator {color: black;}
 83 | .cm-s-default span.cm-comment {color: #a50;}
 84 | .cm-s-default span.cm-string {color: #a11;}
 85 | .cm-s-default span.cm-string-2 {color: #f50;}
 86 | .cm-s-default span.cm-meta {color: #555;}
 87 | .cm-s-default span.cm-error {color: #f00;}
 88 | .cm-s-default span.cm-qualifier {color: #555;}
 89 | .cm-s-default span.cm-builtin {color: #30a;}
 90 | .cm-s-default span.cm-bracket {color: #cc7;}
 91 | .cm-s-default span.cm-tag {color: #170;}
 92 | .cm-s-default span.cm-attribute {color: #00c;}
 93 | .cm-s-default span.cm-header {color: #a0a;}
 94 | .cm-s-default span.cm-quote {color: #090;}
 95 | .cm-s-default span.cm-hr {color: #999;}
 96 | .cm-s-default span.cm-link {color: #00c;}
 97 | 
 98 | span.cm-header, span.cm-strong {font-weight: bold;}
 99 | span.cm-em {font-style: italic;}
100 | span.cm-emstrong {font-style: italic; font-weight: bold;}
101 | span.cm-link {text-decoration: underline;}
102 | 
103 | div.CodeMirror span.CodeMirror-matchingbracket {color: #0f0;}
104 | div.CodeMirror span.CodeMirror-nonmatchingbracket {color: #f22;}
105 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/third-party/webuploader/Uploader.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/third-party/webuploader/Uploader.swf


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/third-party/webuploader/webuploader.css:
--------------------------------------------------------------------------------
 1 | .webuploader-container {
 2 | 	position: relative;
 3 | }
 4 | .webuploader-element-invisible {
 5 | 	position: absolute !important;
 6 | 	clip: rect(1px 1px 1px 1px); /* IE6, IE7 */
 7 |     clip: rect(1px,1px,1px,1px);
 8 | }
 9 | .webuploader-pick {
10 | 	position: relative;
11 | 	display: inline-block;
12 | 	cursor: pointer;
13 | 	background: #00b7ee;
14 | 	padding: 10px 15px;
15 | 	color: #fff;
16 | 	text-align: center;
17 | 	border-radius: 3px;
18 | 	overflow: hidden;
19 | }
20 | .webuploader-pick-hover {
21 | 	background: #00a2d4;
22 | }
23 | 
24 | .webuploader-pick-disable {
25 | 	opacity: 0.6;
26 | 	pointer-events:none;
27 | }
28 | 
29 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/html/static/ueditor/third-party/zeroclipboard/ZeroClipboard.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/html/static/ueditor/third-party/zeroclipboard/ZeroClipboard.swf


--------------------------------------------------------------------------------
/2018/lumenserial/cat/phpunit.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit backupGlobals="false"
 3 |          backupStaticAttributes="false"
 4 |          bootstrap="bootstrap/app.php"
 5 |          colors="true"
 6 |          convertErrorsToExceptions="true"
 7 |          convertNoticesToExceptions="true"
 8 |          convertWarningsToExceptions="true"
 9 |          processIsolation="false"
10 |          stopOnFailure="false">
11 |     <testsuites>
12 |         <testsuite name="Application Test Suite">
13 |             <directory suffix="Test.php">./tests</directory>
14 |         </testsuite>
15 |     </testsuites>
16 |     <filter>
17 |         <whitelist processUncoveredFilesFromWhitelist="true">
18 |             <directory suffix=".php">./app</directory>
19 |         </whitelist>
20 |     </filter>
21 |     <php>
22 |         <env name="APP_ENV" value="testing"/>
23 |         <env name="CACHE_DRIVER" value="array"/>
24 |         <env name="QUEUE_CONNECTION" value="sync"/>
25 |     </php>
26 | </phpunit>
27 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/resources/editor/config.json:
--------------------------------------------------------------------------------
 1 | /* 前后端通信相关的配置,注释只允许使用多行方式 */
 2 | {
 3 |   /* 上传图片配置项 */
 4 |   "imageActionName": "uploadimage", /* 执行上传图片的action名称 */
 5 |   "imageFieldName": "upfile", /* 提交的图片表单名称 */
 6 |   "imageMaxSize": 2097152, /* 上传大小限制，单位kb */
 7 |   "imageAllowFiles": [".png", ".jpg", ".jpeg", ".gif", ".bmp"], /* 上传图片格式显示 */
 8 |   "imageCompressEnable": true, /* 是否压缩图片,默认是true */
 9 |   "imageCompressBorder": 1600, /* 图片压缩最长边限制 */
10 |   "imageInsertAlign": "none", /* 插入的图片浮动方式 */
11 |   "imageUrlPrefix": "", /* 图片访问路径前缀 */
12 |   "imagePathFormat": "/upload/image/{iphash}/{yyyy}{mm}/{dd}/", /* 上传保存路径,可以自定义保存路径和文件名格式 */
13 |   /* {filename} 会替换成原文件名,配置这项需要注意中文乱码问题 */
14 |   /* {rand:6} 会替换成随机数,后面的数字是随机数的位数 */
15 |   /* {time} 会替换成时间戳 */
16 |   /* {yyyy} 会替换成四位年份 */
17 |   /* {yy} 会替换成两位年份 */
18 |   /* {mm} 会替换成两位月份 */
19 |   /* {dd} 会替换成两位日期 */
20 |   /* {hh} 会替换成两位小时 */
21 |   /* {ii} 会替换成两位分钟 */
22 |   /* {ss} 会替换成两位秒 */
23 |   /* 非法字符 \ : * ? " < > | */
24 |   /* 具请体看线上文档: fex.baidu.com/ueditor/#use-format_upload_filename */
25 |   /* 抓取远程图片配置 */
26 |   "catcherLocalDomain": ["127.0.0.1", "localhost", "img.baidu.com"],
27 |   "catcherActionName": "catchimage", /* 执行抓取远程图片的action名称 */
28 |   "catcherFieldName": "source", /* 提交的图片列表表单名称 */
29 |   "catcherPathFormat": "/upload/image/{iphash}/{yyyy}{mm}/{dd}/", /* 上传保存路径,可以自定义保存路径和文件名格式 */
30 |   "catcherUrlPrefix": "", /* 图片访问路径前缀 */
31 |   "catcherMaxSize": 2097152, /* 上传大小限制，单位B */
32 |   "catcherAllowFiles": [".png", ".jpg", ".jpeg", ".gif", ".bmp"], /* 抓取图片格式显示 */
33 |   /* 列出指定目录下的图片 */
34 |   "imageManagerActionName": "listimage", /* 执行图片管理的action名称 */
35 |   "imageManagerListPath": "/upload/image/{iphash}/", /* 指定要列出图片的目录 */
36 |   "imageManagerListSize": 20, /* 每次列出文件数量 */
37 |   "imageManagerUrlPrefix": "", /* 图片访问路径前缀 */
38 |   "imageManagerInsertAlign": "none", /* 插入的图片浮动方式 */
39 |   "imageManagerAllowFiles": [".png", ".jpg", ".jpeg", ".gif", ".bmp"] /* 列出的文件类型 */
40 | }


--------------------------------------------------------------------------------
/2018/lumenserial/cat/resources/views/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/lumenserial/cat/resources/views/.gitkeep


--------------------------------------------------------------------------------
/2018/lumenserial/cat/resources/views/index.blade.php:
--------------------------------------------------------------------------------
 1 | <!doctype html>
 2 | <html lang="en">
 3 | <head>
 4 |     <!-- Required meta tags -->
 5 |     <meta charset="utf-8">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
 7 | 
 8 |     <!-- Bootstrap CSS -->
 9 |     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css" integrity="sha256-eSi1q2PG6J7g7ib17yAaWMcrr5GrtohYChqibrV7PBE=" crossorigin="anonymous">
10 | 
11 |     <title>Hello, world!</title>
12 |     <style>
13 |         #editor {
14 |             height: 500px;
15 |         }
16 |     </style>
17 | </head>
18 | <body>
19 | 
20 | <div class="container">
21 |     <div class="row">
22 |         <script id="editor" type="text/plain"></script>
23 |     </div>
24 | </div>
25 | 
26 | <!-- Optional JavaScript -->
27 | <!-- jQuery first, then Popper.js, then Bootstrap JS -->
28 | <script src="/static/ueditor/ueditor.config.js" type="text/javascript"></script>
29 | <script src="/static/ueditor/ueditor.all.min.js" type="text/javascript"></script>
30 | <script type="text/javascript">
31 | 
32 |     (function () {
33 |         var ue = UE.getEditor('editor');
34 |     })()
35 | 
36 | </script>
37 | 
38 | </body>
39 | </html>


--------------------------------------------------------------------------------
/2018/lumenserial/cat/routes/web.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | use Illuminate\Http\Request;
 3 | use Symfony\Component\HttpFoundation\File\File;
 4 | 
 5 | $router->get('/', function (Request $request) use ($router) {
 6 |     return view('index');
 7 | });
 8 | 
 9 | $router->get('/server/editor', 'EditorController@main');
10 | $router->post('/server/editor', 'EditorController@main');
11 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/storage/app/.gitignore:
--------------------------------------------------------------------------------
1 | *
2 | !.gitignore
3 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/storage/framework/cache/.gitignore:
--------------------------------------------------------------------------------
1 | *
2 | !.gitignore
3 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/storage/framework/views/.gitignore:
--------------------------------------------------------------------------------
1 | *
2 | !.gitignore
3 | 


--------------------------------------------------------------------------------
/2018/lumenserial/cat/storage/logs/.gitignore:
--------------------------------------------------------------------------------
1 | *
2 | !.gitignore
3 | 


--------------------------------------------------------------------------------
/2018/lumenserial/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3'
 2 | services:
 3 |  web:
 4 |    build: .
 5 |    env_file:
 6 |     - ./envfile
 7 |    ports:
 8 |     - "8080:80"
 9 |    volumes:
10 |     - ./sandbox.ini:/usr/local/etc/php/conf.d/sandbox.ini
11 |     - ./flag_larave1_b0ne:/var/www/flag_larave1_b0ne
12 | 


--------------------------------------------------------------------------------
/2018/lumenserial/envfile:
--------------------------------------------------------------------------------
 1 | APP_NAME=Lumenserial
 2 | APP_ENV=production
 3 | APP_KEY=6xrJ9u8vm2r3enVR34BUgetQ
 4 | APP_DEBUG=false
 5 | APP_URL=http://localhost:8080
 6 | 
 7 | LOG_CHANNEL=stack
 8 | 
 9 | DB_CONNECTION=mysql
10 | DB_HOST=127.0.0.1
11 | DB_PORT=3306
12 | DB_DATABASE=homestead
13 | DB_USERNAME=homestead
14 | DB_PASSWORD=secret
15 | 
16 | BROADCAST_DRIVER=log
17 | CACHE_DRIVER=file
18 | SESSION_DRIVER=file
19 | SESSION_LIFETIME=120
20 | QUEUE_DRIVER=sync
21 | 
22 | REDIS_HOST=127.0.0.1
23 | REDIS_PASSWORD=null
24 | REDIS_PORT=6379
25 | 
26 | MAIL_DRIVER=smtp
27 | MAIL_HOST=smtp.mailtrap.io
28 | MAIL_PORT=2525
29 | MAIL_USERNAME=null
30 | MAIL_PASSWORD=null
31 | MAIL_ENCRYPTION=null
32 | 
33 | PUSHER_APP_ID=
34 | PUSHER_APP_KEY=
35 | PUSHER_APP_SECRET=
36 | PUSHER_APP_CLUSTER=mt1
37 | 


--------------------------------------------------------------------------------
/2018/lumenserial/flag_larave1_b0ne:
--------------------------------------------------------------------------------
1 | flag{d49040f122108da142aeb2e08797b896}


--------------------------------------------------------------------------------
/2018/lumenserial/sandbox.ini:
--------------------------------------------------------------------------------
 1 | disable_functions = system,shell_exec,passthru,exec,popen,proc_open,pcntl_exec,mail,apache_setenv,mb_send_mail,dl,set_time_limit,ignore_user_abort,symlink,link,error_log
 2 | disable_classes = GlobIterator,DirectoryIterator,FilesystemIterator,RecursiveDirectoryIterator
 3 | open_basedir = /tmp/:/var/www/
 4 | post_max_size = 2M
 5 | memory_limit = 32M
 6 | default_charset = utf-8
 7 | upload_max_filesize = 2M
 8 | date.timezone = Asia/Shanghai
 9 | enable_dl = Off
10 | sys_temp_dir = /tmp/
11 | upload_tmp_dir = /tmp/
12 | request_order = GP
13 | max_execution_time = 30
14 | allow_url_include = Off
15 | allow_url_fopen = On
16 | session.auto_start = Off
17 | session.upload_progress.enabled	= Off
18 | display_errors = Off
19 | error_reporting = -1
20 | log_errors = On
21 | error_log = /dev/stdout


--------------------------------------------------------------------------------
/2018/nodechr/.dockerignore:
--------------------------------------------------------------------------------
1 | www/node_modules/*
2 | www/build/*


--------------------------------------------------------------------------------
/2018/nodechr/.gitignore:
--------------------------------------------------------------------------------
1 | www/node_modules/
2 | www/build/


--------------------------------------------------------------------------------
/2018/nodechr/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM node:11-alpine
 2 | 
 3 | LABEL maintainer="phithon <root@leavesongs.com>"
 4 | 
 5 | COPY www/ /usr/src
 6 | 
 7 | RUN set -ex \
 8 |     && apk add --no-cache --virtual .gyp \
 9 |         python \
10 |         make \
11 |         g++ \
12 |     && cd /usr/src \
13 |     && yarn install --production --network-timeout 30000 \
14 |     && apk del .gyp
15 | 
16 | WORKDIR /usr/src
17 | CMD ["node", "index.js"]
18 | 


--------------------------------------------------------------------------------
/2018/nodechr/README.md:
--------------------------------------------------------------------------------
 1 | # nodechr
 2 | 
 3 | Unofficial writeup:
 4 | 
 5 | - https://paper.seebug.org/755/
 6 | - http://f1sh.site/2018/11/25/code-breaking-puzzles%E5%81%9A%E9%A2%98%E8%AE%B0%E5%BD%95/
 7 | - https://www.cnblogs.com/iamstudy/articles/code_breaking_writeup.html
 8 | - https://blog.l0ca1.xyz/Code-Breaking
 9 | - http://www.kingkk.com/2018/11/Code-Breaking-Puzzles-%E9%A2%98%E8%A7%A3-%E5%AD%A6%E4%B9%A0%E7%AF%87/
10 | 


--------------------------------------------------------------------------------
/2018/nodechr/config.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "users": [
 3 |         {
 4 |             "username": "ADMIN",
 5 |             "password": "ADMIN"
 6 |         }
 7 |     ],
 8 |     "signed": [
 9 |         "C4n",
10 |         "Y0u",
11 |         "Wr1te",
12 |         "Java5cr1pt",
13 |         "?"
14 |     ],
15 |     "flag": "flag{8640bf2dc4aac43e92c19e0404464394}"
16 | }


--------------------------------------------------------------------------------
/2018/nodechr/docker-compose.yml:
--------------------------------------------------------------------------------
1 | version: '3'
2 | services:
3 |  web:
4 |    build: .
5 |    ports:
6 |     - "8085:3000"
7 |    volumes:
8 |     - ./config.json:/usr/config.json
9 | 


--------------------------------------------------------------------------------
/2018/nodechr/www/index.js:
--------------------------------------------------------------------------------
  1 | // initial libraries
  2 | const Koa = require('koa')
  3 | const sqlite = require('sqlite')
  4 | const fs = require('fs')
  5 | const views = require('koa-views')
  6 | const Router = require('koa-router')
  7 | const send = require('koa-send')
  8 | const bodyParser = require('koa-bodyparser')
  9 | const session = require('koa-session')
 10 | const isString = require('underscore').isString
 11 | const basename = require('path').basename
 12 | 
 13 | const config = JSON.parse(fs.readFileSync('../config.json', {encoding: 'utf-8', flag: 'r'}))
 14 | 
 15 | async function main() {
 16 |     const app = new Koa()
 17 |     const router = new Router()
 18 |     const db = await sqlite.open(':memory:')
 19 | 
 20 |     await db.exec(`CREATE TABLE "main"."users" (
 21 |         "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
 22 |         "username" TEXT NOT NULL,
 23 |         "password" TEXT,
 24 |         CONSTRAINT "unique_username" UNIQUE ("username")
 25 |     )`)
 26 |     await db.exec(`CREATE TABLE "main"."flags" (
 27 |         "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
 28 |         "flag" TEXT NOT NULL
 29 |     )`)
 30 |     for (let user of config.users) {
 31 |         await db.run(`INSERT INTO "users"("username", "password") VALUES ('${user.username}', '${user.password}')`)
 32 |     }
 33 |     await db.run(`INSERT INTO "flags"("flag") VALUES ('${config.flag}')`)
 34 | 
 35 |     router.all('login', '/login/', login).get('admin', '/', admin).get('static', '/static/:path(.+)', static).get('/source', source)
 36 | 
 37 |     app.use(views(__dirname + '/views', {
 38 |         map: {
 39 |             html: 'underscore'
 40 |         },
 41 |         extension: 'html'
 42 |     })).use(bodyParser()).use(session(app))
 43 |     
 44 |     app.use(router.routes()).use(router.allowedMethods());
 45 |     
 46 |     app.keys = config.signed
 47 |     app.context.db = db
 48 |     app.context.router = router
 49 |     app.listen(3000)
 50 | }
 51 | 
 52 | function safeKeyword(keyword) {
 53 |     if(isString(keyword) && !keyword.match(/(union|select|;|\-\-)/is)) {
 54 |         return keyword
 55 |     }
 56 | 
 57 |     return undefined
 58 | }
 59 | 
 60 | async function login(ctx, next) {
 61 |     if(ctx.method == 'POST') {
 62 |         let username = safeKeyword(ctx.request.body['username'])
 63 |         let password = safeKeyword(ctx.request.body['password'])
 64 | 
 65 |         let jump = ctx.router.url('login')
 66 |         if (username && password) {
 67 |             let user = await ctx.db.get(`SELECT * FROM "users" WHERE "username" = '${username.toUpperCase()}' AND "password" = '${password.toUpperCase()}'`)
 68 | 
 69 |             if (user) {
 70 |                 ctx.session.user = user
 71 | 
 72 |                 jump = ctx.router.url('admin')
 73 |             }
 74 | 
 75 |         }
 76 | 
 77 |         ctx.status = 303
 78 |         ctx.redirect(jump)
 79 |     } else {
 80 |         await ctx.render('index')
 81 |     }
 82 | }
 83 | 
 84 | async function static(ctx, next) {
 85 |     await send(ctx, ctx.path)
 86 | }
 87 | 
 88 | async function admin(ctx, next) {
 89 |     if(!ctx.session.user) {
 90 |         ctx.status = 303
 91 |         return ctx.redirect(ctx.router.url('login'))
 92 |     }
 93 | 
 94 |     await ctx.render('admin', {
 95 |         'user': ctx.session.user
 96 |     })
 97 | }
 98 | 
 99 | async function source(ctx, next) {
100 |     await send(ctx, basename(__filename))
101 | }
102 | 
103 | main()
104 | 


--------------------------------------------------------------------------------
/2018/nodechr/www/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "dependencies": {
 3 |     "koa": "^2.6.2",
 4 |     "koa-bodyparser": "^4.2.1",
 5 |     "koa-router": "^7.4.0",
 6 |     "koa-send": "^5.0.0",
 7 |     "koa-session": "^5.10.0",
 8 |     "koa-static": "^5.0.0",
 9 |     "koa-views": "^6.1.4",
10 |     "sqlite": "^3.0.0",
11 |     "underscore": "^1.9.1"
12 |   },
13 |   "devDependencies": {
14 |     "nodemon": "^1.18.6"
15 |   },
16 |   "scripts": {
17 |     "debug": "nodemon index.js"
18 |   }
19 | }
20 | 


--------------------------------------------------------------------------------
/2018/nodechr/www/static/app.css:
--------------------------------------------------------------------------------
  1 | @font-face {
  2 |     font-family: 'Roboto';
  3 |     font-style: normal;
  4 |     font-weight: 300;
  5 |     src: url('//lib.baomitu.com/fonts/roboto/roboto-300.eot'); /* IE9 Compat Modes */
  6 |     src: local('Roboto'), local('Roboto-Normal'),
  7 |         url('//lib.baomitu.com/fonts/roboto/roboto-300.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
  8 |         url('//lib.baomitu.com/fonts/roboto/roboto-300.woff2') format('woff2'), /* Super Modern Browsers */
  9 |         url('//lib.baomitu.com/fonts/roboto/roboto-300.woff') format('woff'), /* Modern Browsers */
 10 |         url('//lib.baomitu.com/fonts/roboto/roboto-300.ttf') format('truetype'), /* Safari, Android, iOS */
 11 |         url('//lib.baomitu.com/fonts/roboto/roboto-300.svg#Roboto') format('svg'); /* Legacy iOS */
 12 | }
 13 | 
 14 | 
 15 | .login-page {
 16 |     width: 360px;
 17 |     padding: 8% 0 0;
 18 |     margin: auto;
 19 | }
 20 | .form {
 21 |     position: relative;
 22 |     z-index: 1;
 23 |     background: #FFFFFF;
 24 |     max-width: 360px;
 25 |     margin: 0 auto 100px;
 26 |     padding: 45px;
 27 |     text-align: center;
 28 |     box-shadow: 0 0 20px 0 rgba(0, 0, 0, 0.2), 0 5px 5px 0 rgba(0, 0, 0, 0.24);
 29 | }
 30 | .form input {
 31 |     font-family: "Roboto", sans-serif;
 32 |     outline: 0;
 33 |     background: #f2f2f2;
 34 |     width: 100%;
 35 |     border: 0;
 36 |     margin: 0 0 15px;
 37 |     padding: 15px;
 38 |     box-sizing: border-box;
 39 |     font-size: 14px;
 40 | }
 41 | .form button {
 42 |     font-family: "Roboto", sans-serif;
 43 |     text-transform: uppercase;
 44 |     outline: 0;
 45 |     background: #4CAF50;
 46 |     width: 100%;
 47 |     border: 0;
 48 |     padding: 15px;
 49 |     color: #FFFFFF;
 50 |     font-size: 14px;
 51 |     -webkit-transition: all 0.3 ease;
 52 |     transition: all 0.3 ease;
 53 |     cursor: pointer;
 54 | }
 55 | .form button:hover,.form button:active,.form button:focus {
 56 |     background: #43A047;
 57 | }
 58 | .form .message {
 59 |     margin: 15px 0 0;
 60 |     color: #b3b3b3;
 61 |     font-size: 12px;
 62 | }
 63 | .form .message a {
 64 |     color: #4CAF50;
 65 |     text-decoration: none;
 66 | }
 67 | .form .register-form {
 68 |     display: none;
 69 | }
 70 | .container {
 71 |     position: relative;
 72 |     z-index: 1;
 73 |     max-width: 300px;
 74 |     margin: 0 auto;
 75 | }
 76 | .container:before, .container:after {
 77 |     content: "";
 78 |     display: block;
 79 |     clear: both;
 80 | }
 81 | .container .info {
 82 |     margin: 50px auto;
 83 |     text-align: center;
 84 | }
 85 | .container .info h1 {
 86 |     margin: 0 0 15px;
 87 |     padding: 0;
 88 |     font-size: 36px;
 89 |     font-weight: 300;
 90 |     color: #1a1a1a;
 91 | }
 92 | .container .info span {
 93 |     color: #4d4d4d;
 94 |     font-size: 12px;
 95 | }
 96 | .container .info span a {
 97 |     color: #000000;
 98 |     text-decoration: none;
 99 | }
100 | .container .info span .fa {
101 |     color: #EF3B3A;
102 | }
103 | body {
104 |     background: #76b852; /* fallback for old browsers */
105 |     background: -webkit-linear-gradient(right, #76b852, #8DC26F);
106 |     background: -moz-linear-gradient(right, #76b852, #8DC26F);
107 |     background: -o-linear-gradient(right, #76b852, #8DC26F);
108 |     background: linear-gradient(to left, #76b852, #8DC26F);
109 |     font-family: "Roboto", sans-serif;
110 |     -webkit-font-smoothing: antialiased;
111 |     -moz-osx-font-smoothing: grayscale;      
112 | }
113 | .panel {
114 |     position: relative;
115 |     display: -ms-flexbox;
116 |     display: flex;
117 |     -ms-flex-direction: column;
118 |     flex-direction: column;
119 |     min-width: 0;
120 |     word-wrap: break-word;
121 |     background-color: #fff;
122 |     background-clip: border-box;
123 |     border: 1px solid rgba(0,0,0,.125);
124 |     border-radius: .25rem;
125 | }
126 | 
127 | .panel-body {
128 |     flex: 1 1 auto;
129 |     padding: 1.25rem;
130 | }


--------------------------------------------------------------------------------
/2018/nodechr/www/views/admin.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 6 |     <meta http-equiv="X-UA-Compatible" content="ie=edge">
 7 |     <title>User Panel</title>
 8 |     <link rel="stylesheet" href="/static/app.css">
 9 | </head>
10 | <body>
11 |     <div class="login-page">
12 |         <div class="panel">
13 |             <div class="panel-body">
14 |                 <p>Hello, <%= user.username %></p>
15 |                 <p>This is your control panel.</p>
16 |             </div>
17 |         </div>
18 |     </div>
19 | 
20 | </body>
21 | </html>


--------------------------------------------------------------------------------
/2018/nodechr/www/views/index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 6 |     <meta http-equiv="X-UA-Compatible" content="ie=edge">
 7 |     <title>User Login</title>
 8 |     <link rel="stylesheet" href="/static/app.css">
 9 | </head>
10 | <body>
11 |     <div class="login-page">
12 |         <div class="form">
13 |           <form class="login-form" method="post">
14 |             <input type="text" name="username" placeholder="username"/>
15 |             <input type="password" name="password" placeholder="password"/>
16 |             <button>login</button>
17 |           </form>
18 |         </div>
19 |     </div>
20 | 
21 | </body>
22 | </html>


--------------------------------------------------------------------------------
/2018/pcrewaf/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM php:7.1-apache
2 | 
3 | LABEL maintainer="phithon <root@leavesongs.com>"
4 | 
5 | COPY www/ /var/www/html/
6 | RUN chown root:root -R /var/www \
7 |     && chmod 0755 -R /var/www \
8 |     && chown www-data:www-data -R /var/www/html/data/


--------------------------------------------------------------------------------
/2018/pcrewaf/README.md:
--------------------------------------------------------------------------------
 1 | # pcrewaf
 2 | 
 3 | Official writeup:
 4 | 
 5 | - https://www.leavesongs.com/PENETRATION/use-pcre-backtrack-limit-to-bypass-restrict.html
 6 | 
 7 | Unofficial writeup:
 8 | 
 9 | - https://paper.seebug.org/755/#easy-pcrewaf
10 | - https://blog.csdn.net/fnmsd/article/details/84556522
11 | - http://f1sh.site/2018/11/25/code-breaking-puzzles%E5%81%9A%E9%A2%98%E8%AE%B0%E5%BD%95/
12 | - https://www.cnblogs.com/iamstudy/articles/code_breaking_writeup.html#_label1
13 | - http://www.kingkk.com/2018/11/Code-Breaking-Puzzles-%E9%A2%98%E8%A7%A3-%E5%AD%A6%E4%B9%A0%E7%AF%87/#pcrewaf
14 | 


--------------------------------------------------------------------------------
/2018/pcrewaf/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3'
 2 | services:
 3 |  web:
 4 |    build: .
 5 |    volumes:
 6 |     - ./sandbox.ini:/usr/local/etc/php/conf.d/sandbox.ini
 7 |     - ./flag_php7_2_1s_c0rrect:/var/www/flag_php7_2_1s_c0rrect
 8 |    ports:
 9 |     - "8088:80"
10 | 


--------------------------------------------------------------------------------
/2018/pcrewaf/flag_php7_2_1s_c0rrect:
--------------------------------------------------------------------------------
1 | flag{216728a834fb4c1e0bc6893e135f436e}


--------------------------------------------------------------------------------
/2018/pcrewaf/sandbox.ini:
--------------------------------------------------------------------------------
 1 | disable_functions = system,shell_exec,passthru,exec,popen,proc_open,pcntl_exec,mail,putenv,apache_setenv,mb_send_mail,dl,set_time_limit,ignore_user_abort,symlink,link,error_log
 2 | disable_classes = GlobIterator,DirectoryIterator,FilesystemIterator,RecursiveDirectoryIterator
 3 | open_basedir = /tmp/:/var/www/
 4 | post_max_size = 2M
 5 | memory_limit = 128M
 6 | default_charset = utf-8
 7 | upload_max_filesize = 2M
 8 | date.timezone = Asia/Shanghai
 9 | enable_dl = Off
10 | sys_temp_dir = /tmp/
11 | upload_tmp_dir = /tmp/
12 | request_order = GP
13 | max_execution_time = 30
14 | allow_url_include = Off
15 | allow_url_fopen = On
16 | session.auto_start = Off
17 | session.upload_progress.enabled	= Off
18 | display_errors = Off
19 | error_reporting = -1
20 | log_errors = On
21 | error_log = /dev/stdout


--------------------------------------------------------------------------------
/2018/pcrewaf/www/data/index.html:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/pcrewaf/www/data/index.html


--------------------------------------------------------------------------------
/2018/pcrewaf/www/index.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | function is_php($data){
 3 |     return preg_match('/<\?.*[(`;?>].*/is', $data);
 4 | }
 5 | 
 6 | if(empty($_FILES)) {
 7 |     die(show_source(__FILE__));
 8 | }
 9 | 
10 | $user_dir = 'data/' . md5($_SERVER['REMOTE_ADDR']);
11 | $data = file_get_contents($_FILES['file']['tmp_name']);
12 | if (is_php($data)) {
13 |     echo "bad request";
14 | } else {
15 |     @mkdir($user_dir, 0755);
16 |     $path = $user_dir . '/' . random_int(0, 10) . '.php';
17 |     move_uploaded_file($_FILES['file']['tmp_name'], $path);
18 | 
19 |     header("Location: $path", true, 303);
20 | }


--------------------------------------------------------------------------------
/2018/phplimit/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM php:5.6-fpm
2 | 
3 | LABEL maintainer="phithon <root@leavesongs.com>"
4 | 
5 | COPY ./www/ /var/www/html/
6 | 
7 | RUN set -ex \
8 |     && chown root:root -R /var/www/ \
9 |     && chmod 0755 -R /var/www


--------------------------------------------------------------------------------
/2018/phplimit/README.md:
--------------------------------------------------------------------------------
 1 | # phplimit
 2 | 
 3 | Unofficial writeup:
 4 | 
 5 | - https://paper.seebug.org/755/#easy-phplimit
 6 | - https://blog.csdn.net/fnmsd/article/details/84556522
 7 | - http://f1sh.site/2018/11/25/code-breaking-puzzles%E5%81%9A%E9%A2%98%E8%AE%B0%E5%BD%95/
 8 | - https://www.cnblogs.com/iamstudy/articles/code_breaking_writeup.html#_label3
 9 | - http://www.kingkk.com/2018/11/Code-Breaking-Puzzles-%E9%A2%98%E8%A7%A3-%E5%AD%A6%E4%B9%A0%E7%AF%87/#phplimit
10 | 


--------------------------------------------------------------------------------
/2018/phplimit/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3'
 2 | services:
 3 |  nginx:
 4 |    image: nginx:1-alpine
 5 |    depends_on:
 6 |      - web
 7 |    volumes:
 8 |      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
 9 |      - ./www/:/usr/share/nginx/html/
10 |    ports:
11 |      - "8084:80"
12 |  web:
13 |    build: .
14 |    volumes:
15 |     - ./sandbox.ini:/usr/local/etc/php/conf.d/sandbox.ini
16 |     - ./flag_phpbyp4ss:/var/www/flag_phpbyp4ss
17 | 


--------------------------------------------------------------------------------
/2018/phplimit/flag_phpbyp4ss:
--------------------------------------------------------------------------------
1 | flag{e86963ba34687d269b9faf526ce68cd7}


--------------------------------------------------------------------------------
/2018/phplimit/nginx/default.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |     listen       80;
 3 |     server_name  localhost;
 4 |     root /usr/share/nginx/html;
 5 |     index index.html index.php;
 6 | 
 7 |     charset utf-8;
 8 | 
 9 |     location ~ ^(.+\.php)(.*)$ {
10 |         fastcgi_split_path_info       ^(.+\.php)(.*)$;
11 |         fastcgi_param SCRIPT_FILENAME /var/www/html$fastcgi_script_name;
12 |         fastcgi_param PATH_INFO       $fastcgi_path_info;
13 | 
14 |         fastcgi_pass   web:9000;
15 |         fastcgi_index  index.php;
16 |         include        fastcgi_params;
17 |     }
18 | 
19 |     location ~ /\.ht {
20 |        deny  all;
21 |     }
22 | }


--------------------------------------------------------------------------------
/2018/phplimit/sandbox.ini:
--------------------------------------------------------------------------------
 1 | disable_functions = system,shell_exec,passthru,exec,popen,proc_open,pcntl_exec,mail,putenv,apache_setenv,mb_send_mail,dl,set_time_limit,ignore_user_abort,symlink,link,error_log
 2 | disable_classes = GlobIterator,DirectoryIterator,FilesystemIterator,RecursiveDirectoryIterator
 3 | open_basedir = /tmp/:/var/www/
 4 | post_max_size = 2M
 5 | memory_limit = 32M
 6 | default_charset = utf-8
 7 | upload_max_filesize = 2M
 8 | date.timezone = Asia/Shanghai
 9 | enable_dl = Off
10 | sys_temp_dir = /tmp/
11 | upload_tmp_dir = /tmp/
12 | request_order = GP
13 | max_execution_time = 30
14 | allow_url_include = Off
15 | allow_url_fopen = On
16 | session.auto_start = Off
17 | session.upload_progress.enabled	= Off
18 | display_errors = On
19 | log_errors = On
20 | error_log = /dev/stdout


--------------------------------------------------------------------------------
/2018/phplimit/www/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | if(';' === preg_replace('/[^\W]+\((?R)?\)/', '', $_GET['code'])) {    
3 |     eval($_GET['code']);
4 | } else {
5 |     show_source(__FILE__);
6 | }
7 | 


--------------------------------------------------------------------------------
/2018/phpmagic/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM php:5.6.33-apache
 2 | 
 3 | LABEL maintainer="phithon <root@leavesongs.com>"
 4 | 
 5 | RUN set -ex \
 6 |     && sed -i 's/deb http:\/\/security\.debian\.org.*//g' /etc/apt/sources.list \
 7 |     && apt-get update \
 8 |     && apt-get install -y --no-install-recommends dnsutils \
 9 |     && rm -rf /var/lib/apt/lists/*
10 | 
11 | COPY www/ /var/www/html/
12 | RUN chown root:root -R /var/www \
13 |     && chmod 0755 -R /var/www \
14 |     && chown www-data:www-data /var/www/html/data/


--------------------------------------------------------------------------------
/2018/phpmagic/README.md:
--------------------------------------------------------------------------------
1 | # phpmagic
2 | 
3 | Unofficial writeup:
4 | 
5 | - https://paper.seebug.org/755/#easy-phpmagic
6 | - http://f1sh.site/2018/11/25/code-breaking-puzzles%E5%81%9A%E9%A2%98%E8%AE%B0%E5%BD%95/
7 | - https://www.cnblogs.com/iamstudy/articles/code_breaking_writeup.html#_label2
8 | - http://www.kingkk.com/2018/11/Code-Breaking-Puzzles-%E9%A2%98%E8%A7%A3-%E5%AD%A6%E4%B9%A0%E7%AF%87/#phpmagic
9 | 


--------------------------------------------------------------------------------
/2018/phpmagic/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3'
 2 | services:
 3 |  web:
 4 |    build: .
 5 |    ports:
 6 |     - "8082:80"
 7 |    volumes:
 8 |     - ./sandbox.ini:/usr/local/etc/php/conf.d/sandbox.ini
 9 |     - ./flag_phpmag1c_ur1:/var/www/flag_phpmag1c_ur1
10 |    dns:
11 |     - 223.5.5.5
12 |     - 223.6.6.6
13 | 


--------------------------------------------------------------------------------
/2018/phpmagic/flag_phpmag1c_ur1:
--------------------------------------------------------------------------------
1 | flag{8fd9046cde2d53d1ceea8970286fd38c}


--------------------------------------------------------------------------------
/2018/phpmagic/sandbox.ini:
--------------------------------------------------------------------------------
 1 | disable_functions = system,passthru,exec,popen,proc_open,pcntl_exec,mail,putenv,apache_setenv,mb_send_mail,dl,set_time_limit,ignore_user_abort,symlink,link,error_log
 2 | disable_classes = GlobIterator,DirectoryIterator,FilesystemIterator,RecursiveDirectoryIterator
 3 | open_basedir = /tmp/:/var/www/
 4 | post_max_size = 2M
 5 | memory_limit = 32M
 6 | default_charset = utf-8
 7 | upload_max_filesize = 2M
 8 | date.timezone = Asia/Shanghai
 9 | enable_dl = Off
10 | sys_temp_dir = /tmp/
11 | upload_tmp_dir = /tmp/
12 | request_order = GP
13 | max_execution_time = 30
14 | allow_url_include = Off
15 | allow_url_fopen = On
16 | session.auto_start = Off
17 | session.upload_progress.enabled	= Off
18 | display_errors = Off
19 | error_reporting = -1
20 | log_errors = On
21 | error_log = /var/log/apache2/error.log


--------------------------------------------------------------------------------
/2018/phpmagic/www/data/index.html:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/phpmagic/www/data/index.html


--------------------------------------------------------------------------------
/2018/phpmagic/www/index.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | if(isset($_GET['read-source'])) {
 3 |     exit(show_source(__FILE__));
 4 | }
 5 | 
 6 | define('DATA_DIR', dirname(__FILE__) . '/data/' . md5($_SERVER['REMOTE_ADDR']));
 7 | 
 8 | if(!is_dir(DATA_DIR)) {
 9 |     mkdir(DATA_DIR, 0755, true);
10 | }
11 | chdir(DATA_DIR);
12 | 
13 | $domain = isset($_POST['domain']) ? $_POST['domain'] : '';
14 | $log_name = isset($_POST['log']) ? $_POST['log'] : date('-Y-m-d');
15 | ?>
16 | <!doctype html>
17 | <html lang="en">
18 | <head>
19 |     <!-- Required meta tags -->
20 |     <meta charset="utf-8">
21 |     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
22 | 
23 |     <!-- Bootstrap CSS -->
24 |     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css" integrity="sha256-eSi1q2PG6J7g7ib17yAaWMcrr5GrtohYChqibrV7PBE=" crossorigin="anonymous">
25 | 
26 |     <title>Domain Detail</title>
27 |     <style>
28 |     pre {
29 |         width: 100%;
30 |         background-color: #f6f8fa;
31 |         border-radius: 3px;
32 |         font-size: 85%;
33 |         line-height: 1.45;
34 |         overflow: auto;
35 |         padding: 16px;
36 |         border: 1px solid #ced4da;
37 |     }
38 |     </style>
39 | </head>
40 | <body>
41 | 
42 | <div class="container">
43 |     <div class="row">
44 |         <div class="col">
45 |             <form method="post">
46 |                 <div class="input-group mt-3">
47 |                     <div class="input-group-prepend">
48 |                         <span class="input-group-text" id="basic-addon1">dig -t A -q</span>
49 |                     </div>
50 |                     <input type="text" name="domain" class="form-control" placeholder="Your domain">
51 |                     <div class="input-group-append">
52 |                         <button class="btn btn-outline-secondary" type="submit">执行</button>
53 |                     </div>
54 |                 </div>
55 |             </form>
56 |         </div>
57 |     
58 |     </div>
59 | 
60 |     <div class="row">
61 |         <div class="col">
62 |             <pre class="mt-3"><?php if(!empty($_POST) && $domain):
63 |                 $command = sprintf("dig -t A -q %s", escapeshellarg($domain));
64 |                 $output = shell_exec($command);
65 | 
66 |                 $output = htmlspecialchars($output, ENT_HTML401 | ENT_QUOTES);
67 | 
68 |                 $log_name = $_SERVER['SERVER_NAME'] . $log_name;
69 |                 if(!in_array(pathinfo($log_name, PATHINFO_EXTENSION), ['php', 'php3', 'php4', 'php5', 'phtml', 'pht'], true)) {
70 |                     file_put_contents($log_name, $output);
71 |                 }
72 | 
73 |                 echo $output;
74 |             endif; ?></pre>
75 |         </div>
76 |     </div>
77 | 
78 | </div>
79 | 
80 | </body>
81 | </html>


--------------------------------------------------------------------------------
/2018/picklecode/.env:
--------------------------------------------------------------------------------
1 | DEBUG=false
2 | SECRET_KEY=zs%o-mvuihtk6g4pgd+xpa&1hh9%&ulnf!@9qx8_y5kk+7^cvm
3 | 
4 | 


--------------------------------------------------------------------------------
/2018/picklecode/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM python:3.7
 2 | 
 3 | ARG PIP_MIRROR="https://pypi.tuna.tsinghua.edu.cn/simple"
 4 | ADD ./web/requirements.txt /requirements.txt
 5 | 
 6 | RUN set -ex \
 7 |     && pip install -i $PIP_MIRROR -r /requirements.txt
 8 | 
 9 | COPY ./web/ /usr/src/
10 | 
11 | WORKDIR /usr/src
12 | EXPOSE 8000
13 | 
14 | CMD ["bash", "server.sh"]
15 | 


--------------------------------------------------------------------------------
/2018/picklecode/README.md:
--------------------------------------------------------------------------------
1 | # picklecode
2 | 
3 | Temporarily no writeup.


--------------------------------------------------------------------------------
/2018/picklecode/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3'
 2 | services:
 3 |  nginx:
 4 |    image: nginx:1-alpine
 5 |    depends_on:
 6 |      - web
 7 |    volumes:
 8 |      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
 9 |    ports:
10 |      - "8083:80"
11 |  web:
12 |    build: .
13 |    command: bash server.sh
14 |    env_file:
15 |      - .env
16 |    volumes:
17 |      - ./flag_djang0_p1ckle:/flag_djang0_p1ckle
18 | 


--------------------------------------------------------------------------------
/2018/picklecode/flag_djang0_p1ckle:
--------------------------------------------------------------------------------
1 | flag{d5c2d79de511721699d1e20ec3e5a355}
2 | 


--------------------------------------------------------------------------------
/2018/picklecode/nginx/default.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |         listen 80;
 3 |         root /usr/share/nginx/html;
 4 | 
 5 |         index index.html;
 6 | 
 7 |         server_name localhost;
 8 | 
 9 |         location / {
10 |                 proxy_set_header   Host $host;
11 |                 proxy_set_header   X-Forwarded-Proto    $scheme;
12 |                 proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
13 |                 proxy_pass      http://web:8000;
14 |                 proxy_redirect     off;
15 |         }
16 | 
17 |         location ~ /\. {
18 |                 deny all;
19 |         }
20 | 
21 |         access_log  /dev/stdout;
22 | }


--------------------------------------------------------------------------------
/2018/picklecode/web/.gitignore:
--------------------------------------------------------------------------------
1 | /env/
2 | /venv/
3 | /db.sqlite3
4 | __pycache__
5 | *.pyc


--------------------------------------------------------------------------------
/2018/picklecode/web/challenge/__init__.py:
--------------------------------------------------------------------------------
1 | default_app_config = 'challenge.apps.ChallengeConfig'
2 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/challenge/apps.py:
--------------------------------------------------------------------------------
 1 | from django.apps import AppConfig
 2 | from django.db import connection
 3 | 
 4 | 
 5 | class ChallengeConfig(AppConfig):
 6 |     name = 'challenge'
 7 | 
 8 |     def ready(self):
 9 |         connection.creation.create_test_db(keepdb=True)
10 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/challenge/migrations/__init__.py:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/picklecode/web/challenge/migrations/__init__.py


--------------------------------------------------------------------------------
/2018/picklecode/web/challenge/templates/registration/login.html:
--------------------------------------------------------------------------------
 1 | <!doctype html>
 2 | <html lang="en">
 3 |   <head>
 4 |     <!-- Required meta tags -->
 5 |     <meta charset="utf-8">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
 7 | 
 8 |     <!-- Bootstrap CSS -->
 9 |     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
10 | 
11 |     <title>Login</title>
12 |   </head>
13 |   <body>
14 | 
15 |     <div class="container">
16 |       <div class="row">
17 |         <div class="col">
18 |           <h1>登录或注册</h1>
19 |         </div>
20 |       </div>
21 |       <div class="row">
22 |         <div class="col">
23 |           {% if form.errors %}
24 |           <div class="alert alert-danger" role="alert">
25 |             账号密码错误
26 |           </div>
27 |           {% endif %}
28 |           <form method="post">
29 |             <div class="form-group">
30 |               <label for="exampleInputEmail1">Username</label>
31 |               <input type="text" class="form-control" id="exampleInputEmail1" aria-describedby="emailHelp" placeholder="Enter Username" name="username">
32 |             </div>
33 |             <div class="form-group">
34 |               <label for="exampleInputPassword1">Password</label>
35 |               <input type="password" class="form-control" id="exampleInputPassword1" placeholder="Password" name="password">
36 |             </div>
37 |             <button type="submit" class="btn btn-primary">Submit</button>
38 |             {% csrf_token %}
39 |           </form>
40 |         </div>
41 |       </div>
42 |     </div>
43 | 
44 |     <!-- Optional JavaScript -->
45 |     <!-- jQuery first, then Popper.js, then Bootstrap JS -->
46 |     <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN" crossorigin="anonymous"></script>
47 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous"></script>
48 |     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js" integrity="sha384-JZR6Spejh4U02d8jOt6vLEHfe/JQGiRRSQQxSfFWpi1MquVdAyjUar5+76PVCmYl" crossorigin="anonymous"></script>
49 |   </body>
50 | </html>


--------------------------------------------------------------------------------
/2018/picklecode/web/challenge/urls.py:
--------------------------------------------------------------------------------
 1 | from django.urls import path
 2 | from django.contrib.auth.views import logout_then_login
 3 | from . import views
 4 | 
 5 | urlpatterns = [
 6 |     path('', views.index, name='main'),
 7 |     path('login/', views.RegistrationLoginView.as_view(), name='login'),
 8 |     path('logout/', logout_then_login, name='logout')
 9 | ]
10 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/challenge/views.py:
--------------------------------------------------------------------------------
 1 | from django.http.response import HttpResponse, HttpResponseRedirect
 2 | from django.template import engines
 3 | from django.contrib.auth import login as auth_login, get_user_model, authenticate
 4 | from django.contrib.auth.views import LoginView, logout_then_login
 5 | from django.contrib.auth.decorators import login_required
 6 | from django.views import generic
 7 | 
 8 | User = get_user_model()
 9 | 
10 | 
11 | @login_required
12 | def index(request):
13 |     django_engine = engines['django']
14 |     template = django_engine.from_string('My name is ' + request.user.username)
15 |     return HttpResponse(template.render(None, request))
16 | 
17 | 
18 | class RegistrationLoginView(LoginView):
19 |     def post(self, request, *args, **kwargs):
20 |         """
21 |         Handle POST requests: instantiate a form instance with the passed
22 |         POST variables and then check if it's valid.
23 |         """
24 |         form = self.get_form()
25 |         if form.is_valid():
26 |             return self.form_valid(form)
27 | 
28 |         if 'username' not in form.cleaned_data or 'password' not in form.cleaned_data:
29 |             return self.form_invalid(form)
30 | 
31 |         if User.objects.filter(username=form.cleaned_data['username']).exists():
32 |             return self.form_invalid(form)
33 | 
34 |         user = User.objects.create_user(form.cleaned_data['username'], None, form.cleaned_data['password'])
35 |         auth_login(request, user)
36 |         return HttpResponseRedirect(self.get_success_url())
37 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/core/__init__.py:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/picklecode/web/core/__init__.py


--------------------------------------------------------------------------------
/2018/picklecode/web/core/serializer.py:
--------------------------------------------------------------------------------
 1 | import pickle
 2 | import io
 3 | import builtins
 4 | 
 5 | __all__ = ('PickleSerializer', )
 6 | 
 7 | 
 8 | class RestrictedUnpickler(pickle.Unpickler):
 9 |     blacklist = {'eval', 'exec', 'execfile', 'compile', 'open', 'input', '__import__', 'exit'}
10 | 
11 |     def find_class(self, module, name):
12 |         # Only allow safe classes from builtins.
13 |         if module == "builtins" and name not in self.blacklist:
14 |             return getattr(builtins, name)
15 |         # Forbid everything else.
16 |         raise pickle.UnpicklingError("global '%s.%s' is forbidden" %
17 |                                      (module, name))
18 | 
19 | 
20 | class PickleSerializer():
21 |     def dumps(self, obj):
22 |         return pickle.dumps(obj)
23 | 
24 |     def loads(self, data):
25 |         try:
26 |             if isinstance(data, str):
27 |                 raise TypeError("Can't load pickle from unicode string")
28 |             file = io.BytesIO(data)
29 |             return RestrictedUnpickler(file,
30 |                               encoding='ASCII', errors='strict').load()
31 |         except Exception as e:
32 |             return {}
33 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/core/settings.py:
--------------------------------------------------------------------------------
  1 | """
  2 | Django settings for core project.
  3 | 
  4 | Generated by 'django-admin startproject' using Django 2.1.3.
  5 | 
  6 | For more information on this file, see
  7 | https://docs.djangoproject.com/en/2.1/topics/settings/
  8 | 
  9 | For the full list of settings and their values, see
 10 | https://docs.djangoproject.com/en/2.1/ref/settings/
 11 | """
 12 | 
 13 | import os
 14 | 
 15 | # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
 16 | BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 17 | 
 18 | 
 19 | # Quick-start development settings - unsuitable for production
 20 | # See https://docs.djangoproject.com/en/2.1/howto/deployment/checklist/
 21 | 
 22 | # SECURITY WARNING: keep the secret key used in production secret!
 23 | SECRET_KEY = os.environ['SECRET_KEY']
 24 | 
 25 | # SECURITY WARNING: don't run with debug turned on in production!
 26 | DEBUG = os.environ.get('DEBUG', 'false') in ('true', 'TRUE', 'True', '1')
 27 | 
 28 | ALLOWED_HOSTS = ['*']
 29 | 
 30 | 
 31 | # Application definition
 32 | 
 33 | INSTALLED_APPS = [
 34 |     'django.contrib.admin',
 35 |     'django.contrib.auth',
 36 |     'django.contrib.contenttypes',
 37 |     'django.contrib.sessions',
 38 |     'django.contrib.messages',
 39 |     'django.contrib.staticfiles',
 40 |     'challenge'
 41 | ]
 42 | 
 43 | MIDDLEWARE = [
 44 |     'django.middleware.security.SecurityMiddleware',
 45 |     'django.contrib.sessions.middleware.SessionMiddleware',
 46 |     'django.middleware.common.CommonMiddleware',
 47 |     'django.middleware.csrf.CsrfViewMiddleware',
 48 |     'django.contrib.auth.middleware.AuthenticationMiddleware',
 49 |     'django.contrib.messages.middleware.MessageMiddleware',
 50 |     'django.middleware.clickjacking.XFrameOptionsMiddleware',
 51 | ]
 52 | 
 53 | ROOT_URLCONF = 'core.urls'
 54 | SESSION_ENGINE = 'django.contrib.sessions.backends.signed_cookies'
 55 | SESSION_SERIALIZER = 'core.serializer.PickleSerializer'
 56 | 
 57 | TEMPLATES = [
 58 |     {
 59 |         'BACKEND': 'django.template.backends.django.DjangoTemplates',
 60 |         'DIRS': [],
 61 |         'APP_DIRS': True,
 62 |         'OPTIONS': {
 63 |             'context_processors': [
 64 |                 'django.template.context_processors.debug',
 65 |                 'django.template.context_processors.request',
 66 |                 'django.contrib.auth.context_processors.auth',
 67 |                 'django.contrib.messages.context_processors.messages',
 68 |             ],
 69 |         },
 70 |     },
 71 | ]
 72 | 
 73 | WSGI_APPLICATION = 'core.wsgi.application'
 74 | 
 75 | 
 76 | # Database
 77 | # https://docs.djangoproject.com/en/2.1/ref/settings/#databases
 78 | 
 79 | DATABASES = {
 80 |     'default': {
 81 |         'ENGINE': 'django.db.backends.sqlite3',
 82 |         'NAME': ':memory:',
 83 |     }
 84 | }
 85 | 
 86 | 
 87 | # Password validation
 88 | # https://docs.djangoproject.com/en/2.1/ref/settings/#auth-password-validators
 89 | 
 90 | AUTH_PASSWORD_VALIDATORS = [
 91 |     {
 92 |         'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
 93 |     },
 94 |     {
 95 |         'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
 96 |     },
 97 |     {
 98 |         'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
 99 |     },
100 |     {
101 |         'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
102 |     },
103 | ]
104 | 
105 | 
106 | # Internationalization
107 | # https://docs.djangoproject.com/en/2.1/topics/i18n/
108 | 
109 | LANGUAGE_CODE = 'en-us'
110 | 
111 | TIME_ZONE = 'UTC'
112 | 
113 | USE_I18N = True
114 | 
115 | USE_L10N = True
116 | 
117 | USE_TZ = True
118 | 
119 | 
120 | # Static files (CSS, JavaScript, Images)
121 | # https://docs.djangoproject.com/en/2.1/howto/static-files/
122 | 
123 | STATIC_URL = '/static/'
124 | 
125 | LOGIN_REDIRECT_URL = 'main'
126 | LOGIN_URL = 'login'
127 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/core/urls.py:
--------------------------------------------------------------------------------
 1 | """core URL Configuration
 2 | 
 3 | The `urlpatterns` list routes URLs to views. For more information please see:
 4 |     https://docs.djangoproject.com/en/2.1/topics/http/urls/
 5 | Examples:
 6 | Function views
 7 |     1. Add an import:  from my_app import views
 8 |     2. Add a URL to urlpatterns:  path('', views.home, name='home')
 9 | Class-based views
10 |     1. Add an import:  from other_app.views import Home
11 |     2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
12 | Including another URLconf
13 |     1. Import the include() function: from django.urls import include, path
14 |     2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
15 | """
16 | from django.contrib import admin
17 | from django.urls import path, include
18 | 
19 | urlpatterns = [
20 |     path('admin/', admin.site.urls),
21 |     path('', include('challenge.urls'))
22 | ]
23 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/core/wsgi.py:
--------------------------------------------------------------------------------
 1 | """
 2 | WSGI config for core project.
 3 | 
 4 | It exposes the WSGI callable as a module-level variable named ``application``.
 5 | 
 6 | For more information on this file, see
 7 | https://docs.djangoproject.com/en/2.1/howto/deployment/wsgi/
 8 | """
 9 | 
10 | import os
11 | 
12 | from django.core.wsgi import get_wsgi_application
13 | 
14 | os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'core.settings')
15 | from dotenv import load_dotenv
16 | load_dotenv('../../.env')
17 | 
18 | application = get_wsgi_application()
19 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/manage.py:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env python
 2 | import os
 3 | import sys
 4 | 
 5 | if __name__ == '__main__':
 6 |     os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'core.settings')
 7 |     from dotenv import load_dotenv
 8 |     load_dotenv('../.env')
 9 | 
10 |     try:
11 |         from django.core.management import execute_from_command_line
12 |     except ImportError as exc:
13 |         raise ImportError(
14 |             "Couldn't import Django. Are you sure it's installed and "
15 |             "available on your PYTHONPATH environment variable? Did you "
16 |             "forget to activate a virtual environment?"
17 |         ) from exc
18 |     execute_from_command_line(sys.argv)
19 | 


--------------------------------------------------------------------------------
/2018/picklecode/web/requirements.txt:
--------------------------------------------------------------------------------
1 | django
2 | python-dotenv
3 | gevent
4 | gunicorn


--------------------------------------------------------------------------------
/2018/picklecode/web/server.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 | 
3 | set -ex
4 | 
5 | BASE_DIR=$(pwd)
6 | 
7 | exec gunicorn --chdir=${BASE_DIR} -w 2 -k gevent -b 0.0.0.0:8000 -u www-data -g www-data core.wsgi:application
8 | 


--------------------------------------------------------------------------------
/2018/thejs/.dockerignore:
--------------------------------------------------------------------------------
1 | web/node_modules/


--------------------------------------------------------------------------------
/2018/thejs/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM node:11-alpine
 2 | 
 3 | LABEL maintainer="phithon <root@leavesongs.com>"
 4 | 
 5 | ENV BASE_DIR=/var/www
 6 | 
 7 | RUN set -ex \
 8 |     && yarn global add pm2 \
 9 |     && mkdir -p ${BASE_DIR}/web \
10 |     && chown root:root -R ${BASE_DIR} \
11 |     && chmod 0755 -R ${BASE_DIR}
12 | 
13 | COPY web/ ${BASE_DIR}/web
14 | COPY process.yaml ${BASE_DIR}
15 | 
16 | RUN set -ex \
17 |     && cd ${BASE_DIR}/web \
18 |     && yarn install --production --network-timeout 30000
19 | 
20 | WORKDIR ${BASE_DIR}
21 | USER node
22 | CMD [ "pm2-docker", "process.yaml" ]
23 | 


--------------------------------------------------------------------------------
/2018/thejs/README.md:
--------------------------------------------------------------------------------
1 | # thejs
2 | 
3 | Unofficial writeup:
4 | 
5 | - https://blog.l0ca1.xyz/Code-Breaking


--------------------------------------------------------------------------------
/2018/thejs/docker-compose.yml:
--------------------------------------------------------------------------------
1 | version: '3'
2 | services:
3 |  web:
4 |    build: .
5 |    ports:
6 |     - "8086:3000"
7 |    volumes:
8 |     - ./flag_thepr0t0js:/flag_thepr0t0js
9 | 


--------------------------------------------------------------------------------
/2018/thejs/flag_thepr0t0js:
--------------------------------------------------------------------------------
1 | flag{9444cc50d919461219718fb4f747c48f}


--------------------------------------------------------------------------------
/2018/thejs/process.yaml:
--------------------------------------------------------------------------------
1 | apps:
2 |   - name: thejs
3 |     script: server.js
4 |     cwd: ./web
5 |     instances: 1
6 |     exec_mode: cluster
7 |     watch: false
8 |     cron_restart: "*/3 * * * *"
9 | 


--------------------------------------------------------------------------------
/2018/thejs/web/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "dependencies": {
 3 |     "body-parser": "^1.18.3",
 4 |     "express": "^4.16.4",
 5 |     "express-session": "^1.15.6",
 6 |     "lodash": "4.17.4",
 7 |     "randomatic": "^3.1.1"
 8 |   },
 9 |   "scripts": {
10 |     "debug": "nodemon server.js"
11 |   },
12 |   "devDependencies": {
13 |     "nodemon": "^1.18.6"
14 |   }
15 | }
16 | 


--------------------------------------------------------------------------------
/2018/thejs/web/server.js:
--------------------------------------------------------------------------------
 1 | const fs = require('fs')
 2 | const express = require('express')
 3 | const bodyParser = require('body-parser')
 4 | const lodash = require('lodash')
 5 | const session = require('express-session')
 6 | const randomize = require('randomatic')
 7 | 
 8 | const app = express()
 9 | app.use(bodyParser.urlencoded({extended: true})).use(bodyParser.json())
10 | app.use('/static', express.static('static'))
11 | app.use(session({
12 |     name: 'thejs.session',
13 |     secret: randomize('aA0', 16),
14 |     resave: false,
15 |     saveUninitialized: false
16 | }))
17 | app.engine('ejs', function (filePath, options, callback) { // define the template engine
18 |     fs.readFile(filePath, (err, content) => {
19 |         if (err) return callback(new Error(err))
20 |         let compiled = lodash.template(content)
21 |         let rendered = compiled({...options})
22 | 
23 |         return callback(null, rendered)
24 |     })
25 | })
26 | app.set('views', './views')
27 | app.set('view engine', 'ejs')
28 | 
29 | app.all('/', (req, res) => {
30 |     let data = req.session.data || {language: [], category: []}
31 |     if (req.method == 'POST') {
32 |         data = lodash.merge(data, req.body)
33 |         req.session.data = data
34 |     }
35 |     
36 |     res.render('index', {
37 |         language: data.language, 
38 |         category: data.category
39 |     })
40 | })
41 | 
42 | app.listen(3000, () => console.log(`Example app listening on port 3000!`))
43 | 


--------------------------------------------------------------------------------
/2018/thejs/web/static/app.css:
--------------------------------------------------------------------------------
  1 | body{
  2 |     background-color:#6e757b
  3 |   }
  4 |   .bg-gray{
  5 |     background-color:rgb(52, 58, 75);
  6 |   }
  7 |   .badge-outer{
  8 |     margin-top:-8px;
  9 |     margin-right:0px;
 10 |     margin-bottom:13px;
 11 |     margin-left:0px;
 12 |   }
 13 |   .list-group-item.list-group-item-action{
 14 |     margin-top:0px;
 15 |     margin-right:0px;
 16 |     margin-bottom:8px;
 17 |     margin-left:0px;
 18 |   }
 19 |   .main{
 20 |     margin-top:74px;
 21 |     margin-right:0px;
 22 |     margin-bottom:0px;
 23 |     margin-left:0px;
 24 |   }
 25 |   .log h5{
 26 |     margin-top:15px;
 27 |     margin-bottom:10px;
 28 |   }
 29 |   .form-control{
 30 |     margin:25px 0 0 0;
 31 |   }
 32 |   .c5696{
 33 |     min-height:75px;
 34 |   }
 35 |   .c5818{
 36 |     min-height:75px;
 37 |   }
 38 |   .c5841{
 39 |     min-height:75px;
 40 |   }
 41 |   .container.c5841{
 42 |     margin:20px 0 0 0;
 43 |     min-height:50px;
 44 |   }
 45 |   :root{
 46 |     --input-padding-x: 1.5rem;
 47 |     --input-padding-y: 0.75rem;
 48 |   }
 49 |   .card-signin{
 50 |     border-top-width:0px;
 51 |     border-right-width:0px;
 52 |     border-bottom-width:0px;
 53 |     border-left-width:0px;
 54 |     border-top-style:initial;
 55 |     border-right-style:initial;
 56 |     border-bottom-style:initial;
 57 |     border-left-style:initial;
 58 |     border-top-color:initial;
 59 |     border-right-color:initial;
 60 |     border-bottom-color:initial;
 61 |     border-left-color:initial;
 62 |     border-image-source:initial;
 63 |     border-image-slice:initial;
 64 |     border-image-width:initial;
 65 |     border-image-outset:initial;
 66 |     border-image-repeat:initial;
 67 |     border-top-left-radius:1rem;
 68 |     border-top-right-radius:1rem;
 69 |     border-bottom-right-radius:1rem;
 70 |     border-bottom-left-radius:1rem;
 71 |     box-shadow:rgba(0, 0, 0, 0.1) 0px 0.5rem 1rem 0px;
 72 |   }
 73 |   .card-signin .card-title{
 74 |     margin-bottom:2rem;
 75 |     font-weight:300;
 76 |     font-size:1.5rem;
 77 |   }
 78 |   .card-signin .card-body{
 79 |     padding-top:2rem;
 80 |     padding-right:2rem;
 81 |     padding-bottom:2rem;
 82 |     padding-left:2rem;
 83 |   }
 84 |   .form-signin{
 85 |     width:100%;
 86 |   }
 87 |   .form-signin .btn{
 88 |     font-size:80%;
 89 |     border-top-left-radius:5rem;
 90 |     border-top-right-radius:5rem;
 91 |     border-bottom-right-radius:5rem;
 92 |     border-bottom-left-radius:5rem;
 93 |     letter-spacing:0.1rem;
 94 |     font-weight:bold;
 95 |     padding-top:1rem;
 96 |     padding-right:1rem;
 97 |     padding-bottom:1rem;
 98 |     padding-left:1rem;
 99 |     transition-duration:0.2s;
100 |     transition-timing-function:ease;
101 |     transition-delay:0s;
102 |     transition-property:all;
103 |   }
104 |   .form-label-group{
105 |     position:relative;
106 |     margin-bottom:1rem;
107 |   }
108 |   .form-label-group > label{
109 |     position:absolute;
110 |     top:0px;
111 |     left:0px;
112 |     display:block;
113 |     width:100%;
114 |     margin-bottom:0px;
115 |     line-height:1.5;
116 |     color:rgb(73, 80, 87);
117 |     border-top-width:1px;
118 |     border-right-width:1px;
119 |     border-bottom-width:1px;
120 |     border-left-width:1px;
121 |     border-top-style:solid;
122 |     border-right-style:solid;
123 |     border-bottom-style:solid;
124 |     border-left-style:solid;
125 |     border-top-color:transparent;
126 |     border-right-color:transparent;
127 |     border-bottom-color:transparent;
128 |     border-left-color:transparent;
129 |     border-image-source:initial;
130 |     border-image-slice:initial;
131 |     border-image-width:initial;
132 |     border-image-outset:initial;
133 |     border-image-repeat:initial;
134 |     border-top-left-radius:0.25rem;
135 |     border-top-right-radius:0.25rem;
136 |     border-bottom-right-radius:0.25rem;
137 |     border-bottom-left-radius:0.25rem;
138 |     transition-duration:0.1s;
139 |     transition-timing-function:ease-in-out;
140 |     transition-delay:0s;
141 |     transition-property:all;
142 |   }
143 |   .form-label-group input::-webkit-input-placeholder{
144 |     color:transparent;
145 |   }
146 |   .form-label-group input::placeholder{
147 |     color:transparent;
148 |   }
149 |   .form-label-group input:not(:placeholder-shown){
150 |     padding-top:calc(var(--input-padding-y) + var(--input-padding-y) * (2 / 3));
151 |     padding-bottom:calc(var(--input-padding-y) / 3);
152 |   }
153 |   .form-label-group input:not(:placeholder-shown) ~ label{
154 |     padding-top:calc(var(--input-padding-y) / 3);
155 |     padding-bottom:calc(var(--input-padding-y) / 3);
156 |     font-size:12px;
157 |     color:rgb(119, 119, 119);
158 |   }
159 |   .btn-google{
160 |     color:white;
161 |     background-color:rgb(234, 67, 53);
162 |   }
163 |   .btn-facebook{
164 |     color:white;
165 |     background-color:rgb(59, 89, 152);
166 |   }
167 |   .btn.btn-primary.mb-2{
168 |     float:right;
169 |     position:static;
170 |   }
171 |   .selector {
172 |       margin-top: 35px;
173 |   }
174 |   .p0 {
175 |       padding: 0;
176 |   }


--------------------------------------------------------------------------------
/2018/thejs/web/static/i.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/phith0n/code-breaking/6e119299fc7fda20389457528333437310501cf6/2018/thejs/web/static/i.png


--------------------------------------------------------------------------------
/2018/thejs/web/views/index.ejs:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 6 |     <meta http-equiv="X-UA-Compatible" content="ie=edge">
 7 |     <title>TheJS Survey</title>
 8 | 
 9 |     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css" integrity="sha256-eSi1q2PG6J7g7ib17yAaWMcrr5GrtohYChqibrV7PBE=" crossorigin="anonymous">
10 |     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/select2@4.0.6-rc.1/dist/css/select2.min.css" integrity="sha256-MeSf8Rmg3b5qLFlijnpxk6l+IJkiR91//YGPCrCmogU=" crossorigin="anonymous">
11 |     <link rel="stylesheet" href="/static/app.css">
12 | </head>
13 | <body>
14 |       <section role="main" class="main">
15 |         <div class="container">
16 |           <div class="align-items-center p-3 my-3 text-white-50 bg-gray rounded shadow-sm">
17 |             <div class="row">
18 |               <div class="col-xl-1 col-lg-1 col-3 col-md-2">
19 |                 <img src="/static/i.png" alt="" width="48" height="48"/>
20 |               </div>
21 |               <div class="col-xl-9 col-lg-9 col-6 col-md-7">
22 |                 <div>
23 |                   <h6 class="mb-0 text-white lh-100">TheJS Puzzle
24 |                   </h6>
25 |                   <small class="text-light">codebreaking thejs<a href="" data-highlightable="1" class="link"></a></small>
26 |                 </div>
27 |               </div>
28 |               <div class="col-xl-2 col-lg-2 col-3 col-md-3">
29 |               </div>
30 |             </div>
31 |           </div>
32 |           <div class="my-3 p-3 bg-white rounded shadow-sm log">
33 |             <form method="post">
34 |                 <div class="log text-muted pt-3">
35 |                     <h3 data-type="header">Select Your Favorite Languages</h3>
36 |                 </div>
37 |                 <div class="selector">
38 |                     <select class="form-control" name="language[]" multiple="multiple">
39 |                         <option value="php" <%- language.indexOf('php') >= 0 ? 'selected' : '' %> >PHP</option>
40 |                         <option value="python" <%- language.indexOf('python') >= 0 ? 'selected' : '' %> >Python</option>
41 |                         <option value="go" <%- language.indexOf('go') >= 0 ? 'selected' : '' %> >GO</option>
42 |                         <option value="javascript" <%- language.indexOf('javascript') >= 0 ? 'selected' : '' %> >Javascript</option>
43 |                         <option value="java" <%- language.indexOf('java') >= 0 ? 'selected' : '' %> >JAVA</option>
44 |                         <option value="ruby" <%- language.indexOf('ruby') >= 0 ? 'selected' : '' %> >Ruby</option>
45 |                     </select>
46 |                 </div>
47 | 
48 |                 <div class="log text-muted pt-3">
49 |                     <h3 data-type="header">Puzzle Categories</h3>
50 |                 </div>
51 |                 <div class="selector">
52 |                     <select class="form-control" name="category[]" multiple="multiple">
53 |                         <option value="web" <%- category.indexOf('web') >= 0 ? 'selected' : '' %> >Web</option>
54 |                         <option value="pwn" <%- category.indexOf('pwn') >= 0 ? 'selected' : '' %> >PWN</option>
55 |                         <option value="crypto" <%- category.indexOf('crypto') >= 0 ? 'selected' : '' %> >Crypto</option>
56 |                         <option value="reverse" <%- category.indexOf('reverse') >= 0 ? 'selected' : '' %> >Reverse</option>
57 |                         <option value="misc" <%- category.indexOf('misc') >= 0 ? 'selected' : '' %> >Misc</option>
58 |                     </select>
59 |                 </div>
60 |                 
61 |                 <div class="container c5841 p0">
62 |                   <button type="submit" class="btn btn-primary mb-2">Add</button>
63 |                 </div>
64 |             </form>
65 |           </div>
66 |         </div>
67 |       </section>
68 | 
69 |     <script src="https://cdn.jsdelivr.net/npm/jquery@3.3.1/dist/jquery.min.js" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" crossorigin="anonymous"></script>
70 |     <script src="https://cdn.jsdelivr.net/npm/select2@4.0.6-rc.1/dist/js/select2.min.js" integrity="sha256-190Fv8aJAduyyIOnvWVpjCmzkX1h8OEtGWbcoU1QVsA=" crossorigin="anonymous"></script>
71 |     <script>
72 |     $(document).ready(function() {
73 |         $('.selector select').select2();
74 |     });
75 |     </script>
76 | </body>
77 | </html>


--------------------------------------------------------------------------------
/2020/bashinj/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM httpd:2.4.43
 2 | 
 3 | LABEL maintainer="phith0n <root@leavesongs.com>"
 4 | 
 5 | RUN set -ex \
 6 |     && apt-get update \
 7 |     && apt-get install -y --no-install-recommends curl ca-certificates
 8 | 
 9 | ADD src/ /usr/local/apache2/htdocs/
10 | ADD serve-cgi-bin.conf /usr/local/apache2/conf/extra/
11 | RUN set -ex \
12 |     && sed -i 's|#LoadModule cgid_module modules/mod_cgid.so|LoadModule cgid_module modules/mod_cgid.so|' /usr/local/apache2/conf/httpd.conf \
13 |     && echo "Include conf/extra/serve-cgi-bin.conf" >> /usr/local/apache2/conf/httpd.conf \
14 |     && chown -R daemon:daemon /usr/local/apache2/htdocs \
15 |     && chmod +x /usr/local/apache2/htdocs/index.cgi


--------------------------------------------------------------------------------
/2020/bashinj/README.md:
--------------------------------------------------------------------------------
1 | # Code-Breaking 2020 Bashinj
2 | 
3 | Run the container:
4 | 
5 | ```
6 | docker run -d --name bashinj -p 8080:80 tuwen/code-breaking:2020-bashinj
7 | ```
8 | 


--------------------------------------------------------------------------------
/2020/bashinj/serve-cgi-bin.conf:
--------------------------------------------------------------------------------
1 | <Directory "/usr/local/apache2/htdocs">
2 |     <FilesMatch "\.(cgi|sh)$">
3 |         AddHandler cgi-script .cgi
4 |     </FilesMatch>
5 |     
6 |     Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
7 |     AllowOverride All
8 |     Require all granted
9 | </Directory>


--------------------------------------------------------------------------------
/2020/bashinj/src/_dep/web.cgi:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | WEBASH_VERSION='0.1'
 3 | 
 4 | # Some notes:
 5 | # - The aim is to use native bash as much as possible
 6 | # - printf is more secure than echo because you can't tell echo to stop processing parameters
 7 | 
 8 | # Make bash intolerant of errors
 9 | # set -ef -o pipefail
10 | 
11 | url_decode() {
12 |     local data="${*//+/ }"
13 |     printf '%b' "${data//%/\\x}"
14 | }
15 | 
16 | url_encode() {
17 |     # Modified from https://gist.github.com/cdown/1163649
18 |     old_lc_collate="$LC_COLLATE"
19 |     LC_COLLATE="C"
20 |     
21 |     local length="${#1}"
22 |     for (( pos = 0; pos < length; pos++ )); do
23 |         local chr="${1:pos:1}"
24 |         case "$chr" in
25 |             ' ')
26 |                 printf '+'
27 |                 ;;
28 |             [a-zA-Z0-9.~_-])
29 |                 printf "%s" "$chr"
30 |                 ;;
31 |             *)
32 |                 printf '%%%02X' "'$chr"
33 |                 ;;
34 |         esac
35 |     done
36 |     
37 |     LC_COLLATE="$old_lc_collate"
38 | }
39 | 
40 | html() {
41 |     local str="$1"
42 |     str="${str//</&lt;}"
43 |     str="${str//>/&gt;}"
44 |     str="${str//\"/&quot;}"
45 |     printf "%s" "$str"
46 | }
47 | 
48 | http_status_code="200 OK"
49 | http_status() {
50 |     http_status_code="$1"
51 | }
52 | 
53 | declare -A http_headers
54 | http_header() {
55 |     http_headers["$1"]="$2"
56 | }
57 | 
58 | echo_headers() {
59 |     http_header "Content-Type" "text/html;charset=utf-8"
60 |     http_header "X-Server" "webash/$WEBASH_VERSION"
61 |     
62 |     # Output headers
63 |     printf "Status: %s\r\n" "$http_status_code"
64 |     for name in "${!http_headers[@]}"; do 
65 |         printf "%s: %s\r\n" "$name" "${http_headers[$name]}"; 
66 |     done
67 |     
68 |     printf "\r\n"
69 | }
70 | 
71 | http_error() {
72 |     printf "Status: 500 Internal Server Error\r\n\r\nInternal Server Error"
73 |     exit 1
74 | }
75 | 
76 | # Parse the query into $_GET
77 | IFS='&;' read -a query <<< "$QUERY_STRING"
78 | declare -A _GET
79 | for name_value_str in "${query[@]}"; do
80 |     IFS='=' read -a name_value <<< "$name_value_str"
81 |     name="$(url_decode "${name_value[0]}")"
82 |     value="$(url_decode "${name_value[1]}")"
83 |     _GET["$name"]="$value"
84 | done
85 | 
86 | # Parse the POST into $_POST
87 | IFS='&;' read -a query
88 | declare -A _POST
89 | for name_value_str in "${query[@]}"; do
90 |     IFS='=' read -a name_value <<< "$name_value_str"
91 |     name="$(url_decode "${name_value[0]}")"
92 |     value="$(url_decode "${name_value[1]}")"
93 |     _POST["$name"]="$value"
94 | done
95 | 


--------------------------------------------------------------------------------
/2020/bashinj/src/index.cgi:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | source ./_dep/web.cgi
 4 | echo_headers
 5 | 
 6 | name=${_GET["name"]}
 7 | 
 8 | [[ $name == "" ]] && name='Bob'
 9 | 
10 | curl -v http://httpbin.org/get?name=$name
11 | 


--------------------------------------------------------------------------------
/2025/.dockerignore:
--------------------------------------------------------------------------------
1 | target/
2 | .idea/
3 | Dockerfile
4 | poc.py
5 | poc.xml


--------------------------------------------------------------------------------
/2025/.gitignore:
--------------------------------------------------------------------------------
1 | /.idea
2 | /target


--------------------------------------------------------------------------------
/2025/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM maven:3.9-eclipse-temurin-8 AS builder
 2 | 
 3 | WORKDIR /app
 4 | 
 5 | COPY src /app/src
 6 | COPY pom.xml /app/pom.xml
 7 | 
 8 | RUN mvn clean package assembly:single -DskipTests
 9 | 
10 | FROM eclipse-temurin:8-jre
11 | 
12 | COPY --from=builder --chown=www-data:www-data /app/target/PostgresqlJdbcAttack-0.0.1-SNAPSHOT.jar /app/PostgresqlJdbcAttack-0.0.1-SNAPSHOT.jar
13 | COPY --chown=www-data:www-data run.sh /app/run.sh
14 | 
15 | RUN set -ex \
16 |     && chown -R www-data:www-data /app \
17 |     && chmod +x /app/run.sh
18 | 
19 | WORKDIR /app
20 | EXPOSE 8080
21 | USER www-data
22 | 
23 | CMD ["bash", "/app/run.sh"]
24 | 


--------------------------------------------------------------------------------
/2025/README.md:
--------------------------------------------------------------------------------
 1 | # Code-Breaking 2025 PostgresqlJdbcAttack
 2 | 
 3 | Run the game:
 4 | 
 5 | ```
 6 | docker compose up -d
 7 | ```
 8 | 
 9 | Your goal: achieve the remote code execution.
10 | 


--------------------------------------------------------------------------------
/2025/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | services:
 2 |   web:
 3 |     image: vulhub/ctf:2025-jdbc
 4 |     ports:
 5 |       - "8080:8080"
 6 |     networks:
 7 |       - ctf
 8 | 
 9 | networks:
10 |   ctf:
11 |     driver: bridge
12 |     ipam:
13 |       config:
14 |         - subnet: 172.18.0.0/16


--------------------------------------------------------------------------------
/2025/iptables.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | if [ "$1" = "enable" ]; then
 4 |     iptables -F DOCKER-USER
 5 |     iptables -I DOCKER-USER 1 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
 6 |     iptables -I DOCKER-USER 2 -s 172.18.0.0/16 -p udp --dport 53 -j ACCEPT
 7 |     iptables -I DOCKER-USER 3 -s 172.18.0.0/16 -p tcp --dport 53 -j ACCEPT
 8 |     iptables -A DOCKER-USER -s 172.18.0.0/16 -j REJECT
 9 | elif [ "$1" = "disable" ]; then
10 |     iptables -F DOCKER-USER
11 | else
12 |     echo "Usage: $0 enable|disable"
13 | fi


--------------------------------------------------------------------------------
/2025/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0"
 3 |     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
 4 |     <modelVersion>4.0.0</modelVersion>
 5 |     <parent>
 6 |         <groupId>org.springframework.boot</groupId>
 7 |         <artifactId>spring-boot-starter-parent</artifactId>
 8 |         <version>2.7.13</version>
 9 |         <relativePath/>
10 |         <!-- lookup parent from repository -->
11 |     </parent>
12 |     <groupId>com.ar3h</groupId>
13 |     <artifactId>PostgresqlJdbcAttack</artifactId>
14 |     <version>0.0.1-SNAPSHOT</version>
15 |     <name>PostgresqlJdbcAttack</name>
16 |     <description>PostgresqlJdbcAttack</description>
17 |     <properties>
18 |         <java.version>8</java.version>
19 |         <maven.test.skip>true</maven.test.skip>
20 |     </properties>
21 |     <dependencies>
22 |         <dependency>
23 |             <groupId>org.springframework.boot</groupId>
24 |             <artifactId>spring-boot-starter-web</artifactId>
25 |         </dependency>
26 | 
27 |         <dependency>
28 |             <groupId>org.postgresql</groupId>
29 |             <artifactId>postgresql</artifactId>
30 |             <version>42.3.1</version>
31 |         </dependency>
32 |     </dependencies>
33 | 
34 |     <build>
35 |         <plugins>
36 |             <plugin>
37 |                 <groupId>org.apache.maven.plugins</groupId>
38 |                 <artifactId>maven-assembly-plugin</artifactId>
39 |                 <configuration>
40 |                     <finalName>${project.artifactId}-${project.version}</finalName>
41 |                     <!-- get all project dependencies -->
42 |                     <descriptorRefs>
43 |                         <descriptorRef>jar-with-dependencies</descriptorRef>
44 |                     </descriptorRefs>
45 |                     <!-- MainClass in mainfest make a executable jar -->
46 |                     <archive>
47 |                         <manifest>
48 |                             <mainClass>com.ar3h.postgresqljdbcattack.PostgresqlJdbcAttackApplication</mainClass>
49 |                         </manifest>
50 |                     </archive>
51 |                     <appendAssemblyId>false</appendAssemblyId>
52 |                 </configuration>
53 |             </plugin>
54 |         </plugins>
55 |     </build>
56 | 
57 | </project>
58 | 


--------------------------------------------------------------------------------
/2025/run.sh:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 | 
3 | if [ -z "$JAVA_OPTS" ]; then
4 |     JAVA_OPTS="-Xms512m -Xmx2g -XX:+UseG1GC"
5 | fi
6 | 
7 | java ${JAVA_OPTS:-} -jar /app/PostgresqlJdbcAttack-0.0.1-SNAPSHOT.jar
8 | 


--------------------------------------------------------------------------------
/2025/src/main/java/com/ar3h/postgresqljdbcattack/PostgresqlJdbcAttackApplication.java:
--------------------------------------------------------------------------------
 1 | package com.ar3h.postgresqljdbcattack;
 2 | 
 3 | import com.ar3h.postgresqljdbcattack.security.ForbiddenNetworkAccessSecurityManager;
 4 | import org.springframework.boot.SpringApplication;
 5 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 6 | 
 7 | @SpringBootApplication
 8 | public class PostgresqlJdbcAttackApplication {
 9 | 
10 |     public static void main(String[] args) {
11 |         SpringApplication.run(PostgresqlJdbcAttackApplication.class, args);
12 |     }
13 | 
14 | }
15 | 


--------------------------------------------------------------------------------
/2025/src/main/java/com/ar3h/postgresqljdbcattack/config/FilterConfig.java:
--------------------------------------------------------------------------------
 1 | package com.ar3h.postgresqljdbcattack.config;
 2 | 
 3 | import com.ar3h.postgresqljdbcattack.filter.SecurityFilter;
 4 | import org.springframework.boot.web.servlet.FilterRegistrationBean;
 5 | import org.springframework.context.annotation.Bean;
 6 | import org.springframework.context.annotation.Configuration;
 7 | 
 8 | @Configuration
 9 | public class FilterConfig {
10 | 
11 |     @Bean
12 |     public FilterRegistrationBean<SecurityFilter> timingFilterRegistration() {
13 |         FilterRegistrationBean<SecurityFilter> registration = new FilterRegistrationBean<>();
14 |         registration.setFilter(new SecurityFilter());
15 |         registration.addUrlPatterns("/*"); // 设置过滤器拦截的URL模式  
16 |         return registration;
17 |     }
18 | }


--------------------------------------------------------------------------------
/2025/src/main/java/com/ar3h/postgresqljdbcattack/controller/IndexController.java:
--------------------------------------------------------------------------------
 1 | package com.ar3h.postgresqljdbcattack.controller;
 2 | 
 3 | import com.ar3h.postgresqljdbcattack.security.ForbiddenNetworkAccessSecurityManager;
 4 | import org.springframework.stereotype.Controller;
 5 | import org.springframework.web.bind.annotation.RequestMapping;
 6 | import org.springframework.web.bind.annotation.ResponseBody;
 7 | 
 8 | import java.io.PrintWriter;
 9 | import java.io.StringWriter;
10 | import java.sql.DriverManager;
11 | 
12 | /**
13 |  * @Author Ar3h
14 |  * @Date 2025/4/3 19:31
15 |  */
16 | @Controller
17 | public class IndexController {
18 | 
19 |     @ResponseBody
20 |     @RequestMapping("/jdbc")
21 |     public String jdbc(String url) {
22 |         try {
23 |             System.setSecurityManager(new ForbiddenNetworkAccessSecurityManager());
24 | 
25 |             DriverManager.getConnection(url);
26 | 
27 |         } catch (Exception e) {
28 |             StringWriter sw = new StringWriter();
29 |             e.printStackTrace(new PrintWriter(sw));
30 |             return sw.toString();
31 |         }
32 |         return "done.";
33 |     }
34 | 
35 | }
36 | 


--------------------------------------------------------------------------------
/2025/src/main/java/com/ar3h/postgresqljdbcattack/filter/SecurityFilter.java:
--------------------------------------------------------------------------------
 1 | package com.ar3h.postgresqljdbcattack.filter;
 2 | 
 3 | import org.springframework.core.annotation.Order;
 4 | import org.springframework.web.filter.OncePerRequestFilter;
 5 | 
 6 | import javax.servlet.FilterChain;
 7 | import javax.servlet.ServletException;
 8 | import javax.servlet.http.HttpServletRequest;
 9 | import javax.servlet.http.HttpServletResponse;
10 | import java.io.IOException;
11 | import java.lang.annotation.Annotation;
12 | 
13 | /**
14 |  * @Author Ar3h
15 |  * @Date 2025/4/3 19:37
16 |  */
17 | public class SecurityFilter extends OncePerRequestFilter implements Order {
18 |     @Override
19 |     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
20 |         String url = request.getParameter("url");
21 |         if (url != null) {
22 |             if (url.toLowerCase().contains("jdbc:postgresql") && url.toLowerCase().contains("socketFactory".toLowerCase())) {
23 |                 response.setStatus(HttpServletResponse.SC_FORBIDDEN);
24 |                 response.getWriter().write("url is not security");
25 |                 return;
26 |             }
27 |         }
28 |         filterChain.doFilter(request, response);
29 |     }
30 | 
31 |     @Override
32 |     public int value() {
33 |         return 0;
34 |     }
35 | 
36 |     @Override
37 |     public Class<? extends Annotation> annotationType() {
38 |         return null;
39 |     }
40 | }
41 | 


--------------------------------------------------------------------------------
/2025/src/main/java/com/ar3h/postgresqljdbcattack/security/ForbiddenNetworkAccessSecurityManager.java:
--------------------------------------------------------------------------------
 1 | package com.ar3h.postgresqljdbcattack.security;
 2 | 
 3 | import java.security.Permission;
 4 | 
 5 | public class ForbiddenNetworkAccessSecurityManager extends SecurityManager {
 6 |     @Override
 7 |     public void checkPermission(Permission perm) {
 8 | 
 9 |     }
10 | 
11 |     @Override
12 |     public void checkConnect(String host, int port) {
13 |         System.out.println("checkConnect...");
14 |         throw new SecurityException("Network connect operation is forbidden by Security Manager: " + host + ":" + port);
15 |     }
16 | }


--------------------------------------------------------------------------------
/2025/src/main/resources/application.properties:
--------------------------------------------------------------------------------
1 | spring.application.name=PostgresqlJdbcAttack


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Code-Breaking Puzzles dockerfiles && writeups
 2 | 
 3 | code-breaking puzzles: https://code-breaking.com/
 4 | 
 5 | 这里是code-breaking puzzles游戏的所有环境与相关writeup。
 6 | 
 7 | ## Code-breaking Puzzles 2018
 8 | 
 9 | 2018年所有题目：
10 | 
11 | - [easy / php / function](2018/function)
12 | - [easy / php / pcrewaf](2018/pcrewaf)
13 | - [easy / php / phpmagic](2018/phpmagic)
14 | - [easy / php / phplimit](2018/phplimit)
15 | - [easy / node.js / nodechr](2018/nodechr)
16 | - [medium / java / javacon](2018/javacon)
17 | - [medium / php / lumenserial](2018/lumenserial)
18 | - [hard / python / picklecode](2018/picklecode)
19 | - [hard / node.js / thejs](2018/thejs)
20 | 
21 | 2018年题目运行要求：
22 | 
23 | - Docker CE 18.0+
24 | - Docker-Compose
25 | 
26 | 运行方法：
27 | 
28 | ```bash
29 | # 进入某个题目目录
30 | cd /path/to/puzzle
31 | 
32 | # 运行环境
33 | docker-compose up -d
34 | 
35 | # 环境运行后，在docker-compose.yml中查看端口，访问即可
36 | ```
37 | 
38 | ## Code-breaking Puzzles 2020
39 | 
40 | 2020年题目（不再举办统一比赛，题目陆续发出）：
41 | 
42 | - [easy / bash / bashinj](2020/bashinj)
43 | 
44 | 2020年题目运行方法请直接在具体题目页面查看。
45 | 


--------------------------------------------------------------------------------