Skip to content

Instantly share code, notes, and snippets.

View Dobby233Liu's full-sized avatar

Liu Wenyuan Dobby233Liu

View GitHub Profile
@thesamesam
thesamesam / xz-backdoor.md
Last active July 21, 2024 05:59
xz-utils backdoor situation (CVE-2024-3094)

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

@csm10495
csm10495 / locked_cookie_test.py
Last active June 1, 2024 03:55
POC that fetches cookies from a locked cookies file on Windows with Chromium based browsers
@mttaggart
mttaggart / electron-versions.csv
Last active November 18, 2023 03:15
CVE-2023-4863 Electron App Tracker | THIS LIST IS NOW DEPRECATED. PLEASE VISIT https://github.com/mttaggart/electron-app-tracker FOR THE LATEST DATA
app_name repo electron_version vulnerable
1Clipboard https://github.com/wiziple/1clipboard
1Password None 25.8.1 FALSE
3CX Desktop App 19.0.8 TRUE
5EClient None
Abstract None
Account Surfer None
Advanced REST Client https://github.com/advanced-rest-client/arc-electron ^17.0.0 TRUE
Aedron Shrine None
Aeon https://github.com/leinelissen/aeon 23.2.0 TRUE
@Dobby233Liu
Dobby233Liu / owo.user.js
Last active July 10, 2024 03:03
OwOiki: OwOifies most English-language Wikimedia Foundation wikis
// ==UserScript==
// @name OwOiki
// @version 0.2.6
// @icon data:image/png;base64,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
Dim Wsh, Fs, WMIServ
Set Wsh = CreateObject("WScript.Shell")
Set Fs = CreateObject("Scripting.FileSystemObject")
Set WMIServ = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
MainDir = Fs.GetFile(WScript.ScriptFullName).ParentFolder.Path
Function HasArg(TargetArg)
HasArg = False
For Each Arg in WScript.Arguments
from struct import pack, unpack
import sys
#.bss
left9 = [0] * 0x400 #u16
right9 = [0] * 0x400 #u16
left12 = [0] * 0x10000 #u16
right12 = [0] * 0x10000 #u16
stack = [0] * 0x100 #u32
#.sbss
@huytd
huytd / wordle.md
Last active May 16, 2024 20:39
Wordle in less than 50 lines of Bash

image

How to use:

./wordle.sh

Or try the unlimit mode:

@agnostic-apollo
agnostic-apollo / Android-Phantom,Cached-And-Empty-Processes.md
Last active June 19, 2024 23:49
Android Phantom, Cached And Empty Processes
@InvoxiPlayGames
InvoxiPlayGames / lang_en.json
Last active September 24, 2021 15:19
DELTARUNE Chapter 2 English Language JSON file, made by referencing data.win, lang_jp.json and lang_en_ch1.json. Some strings may be missing or inaccurate.
This file has been truncated, but you can view the full file.
{
"date":"1632407807322",
"DEVICE_CHOICE_slash_Create_0_gml_28_0":"NO",
"DEVICE_CHOICE_slash_Create_0_gml_29_0":"YES",
"DEVICE_CHOICE_slash_Create_0_gml_64_0":"GRAINS",
"DEVICE_CHOICE_slash_Create_0_gml_65_0":"MEAT",
"DEVICE_CHOICE_slash_Create_0_gml_66_0":"DAIRY",
"DEVICE_CHOICE_slash_Create_0_gml_67_0":"SWEETS",
"DEVICE_CHOICE_slash_Create_0_gml_68_0":"FRUIT",
"DEVICE_CHOICE_slash_Create_0_gml_69_0":"VEGETABLE",
@windwakr
windwakr / gm4dec.py
Last active July 24, 2023 12:57
Game Maker 4.1/4.2/4.3 decompiler
#Game Maker 4.X decompiler
#for python 2.7 :^)
#Only tested on ~20 files
#
#As far as I can tell, there are no tools out there that actually support GM4(even if they claim to).
#Unlike later versions, image data is stored unencrypted. So we need to partially parse the GMD.
import struct
import io
import os
import sys