Kiryl KL-7

## rails_rce.rb
#!/usr/bin/env ruby
#
# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#
# ## Advisory
#
#   https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
#
# ## Caveats
#

## activity_snapshot.sh
#!/bin/sh
# computer activity data collection for http://jehiah.cz/one-two/
# by Jehiah Czebotar

FILE="activity_log/`date +%Y%m%d`.log"

function log_activity()
{
    local UTC=`date "+%s,%Z"`
    local IDLE=$((`/usr/sbin/ioreg -c IOHIDSystem | sed -e '/HIDIdleTime/!{ d' -e 't' -e '}' -e 's/.* = //g' -e 'q'` / 1000000000 ))

## issues_with_modules.md

      
              1 file
            
          
              14 forks
            
          
              23 comments
            
          
              118 stars
            
          
                ryanb
                / issues_with_modules.md
            
            
              Created
              November 29, 2012 22:38
            
              
                Points on how modules can make code difficult to read.
              
          
    My issues with Modules

In researching topics for RailsCasts I often read code in Rails and other gems. This is a great exercise to do. Not only will you pick up some coding tips, but it can help you better understand what makes code readable.
A common practice to organize code in gems is to divide it into modules. When this is done extensively I find it becomes very difficult to read. Before I explain further, a quick detour on instance_eval.
You can find instance_eval used in many DSLs: from routes to state machines. Here's an example from Thinking Sphinx.
class Article &lt; ActiveRecord::Base

  
## changes.md

      
              3 files
            
          
              15 forks
            
          
              44 comments
            
          
              108 stars
            
          
                funny-falcon
                / changes.md
            
            
              Last active
              March 23, 2024 05:53
            
              
                Performace patch for ruby-1.9.3-p327
              
          
    Changes:


this version includes backport of Greg Price's patch for speedup startup http://bugs.ruby-lang.org/issues/7158 .
ruby-core prefers his way to do thing, so that I abandon cached-lp and sorted-lf patches of mine.


this version integrates 'array as queue' patch, which improves performance when push/shift pattern is heavily used on Array.
This patch is accepted into trunk for Ruby 2.0 and last possible bug is found by Yui Naruse.
It is used in production* for a couple of months without issues even with this bug.


## oauth-v2-rfc6749.markdown

      
              1 file
            
          
              1 fork
            
          
              0 comments
            
          
              28 stars
            
          
                jcoglan
                / oauth-v2-rfc6749.markdown
            
            
              Created
              July 5, 2012 15:23
            
          
    The OAuth 2.0 Authorization Framework

This document is intended to be a simplified version of the OAuth 2.0
specification. In particular it has been written with implementors in mind, and
as such attempts to trim the spec down to just what you need to implement an
OAuth provider or client. It is necessarily not complete, but attempts to
introduce spec requirements in the same order in which the protocol proceeds
in practise, with everything you need to know about each protocol endpoint
brought together in one place rather than scattered across a large document.

  
## a.md

      
              3 files
            
          
              19 forks
            
          
              24 comments
            
          
              94 stars
            
          
                rkh
                / a.md
            
            
              Created
              June 29, 2012 07:26
            
          
    This allows you to use the following video streaming services outside of the US from your Mac without having to use a proxy or VPN, so no big bandwidth issues:

Hulu / HuluPlus
CBS
ABC
MTV
theWB
CW TV
Crackle
NBC


## measure.rb
#!/bin/env ruby

# lazy hack from Robert Klemme

module Memory
  # sizes are guessed, I was too lazy to look
  # them up and then they are also platform
  # dependent
  REF_SIZE = 4 # ?
  OBJ_OVERHEAD = 4 # ?

## ruby-cldr-export.rb
require 'rubygems'
require 'ruby-cldr'
require 'cldr'
require 'cldr/data'
require 'cldr/download'
require 'yaml'

# NOTE: nb = no (norwegian)
locales = ["he", "en", "fr", "it", "de", "es", "ja", "ko", "ru", "tr", "pt", "fil", "hi", "ms", "id", "nl", "da", "sv", "pl", "hu", "fi", "nb", "zh", "zh-Hant", "ar", "fa", "ur", "th", "uk", "ca", "el", "af", "cs", "eu"]
components = ["calendars", "currencies", "delimiters", "languages", "numbers", "Plurals", "territories", "timezones", "units"]

## postsql.sql
 -- PostgreSQL 9.2 beta (for the new JSON datatype)
 --   You can actually use an earlier version and a TEXT type too
 -- PL/V8 http://code.google.com/p/plv8js/wiki/PLV8

 -- Inspired by
 -- http://people.planetpostgresql.org/andrew/index.php?/archives/249-Using-PLV8-to-index-JSON.html
 -- http://ssql-pgaustin.herokuapp.com/#1

  -- JSON Types need to be mapped into corresponding PG types
  --

## gitsshm
#!/bin/bash

if [ -z $GITHUB_KEYS_DIR ]; then
  GITHUB_KEYS_DIR="$HOME/github-keys"
fi

if [ -z $GITHUB_KEY_FILE_NAME ]; then
  GITHUB_KEY_FILE_NAME="id_rsa"
fi
	#!/usr/bin/env ruby
	#
	# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
	#
	# ## Advisory
	#
	# https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
	#
	# ## Caveats
	#
	#!/bin/sh
	# computer activity data collection for http://jehiah.cz/one-two/
	# by Jehiah Czebotar

	FILE="activity_log/`date +%Y%m%d`.log"

	function log_activity()
	{
	local UTC=`date "+%s,%Z"`
	local IDLE=$((`/usr/sbin/ioreg -c IOHIDSystem \| sed -e '/HIDIdleTime/!{ d' -e 't' -e '}' -e 's/.* = //g' -e 'q'` / 1000000000 ))
	#!/bin/env ruby

	# lazy hack from Robert Klemme

	module Memory
	# sizes are guessed, I was too lazy to look
	# them up and then they are also platform
	# dependent
	REF_SIZE = 4 # ?
	OBJ_OVERHEAD = 4 # ?
	require 'rubygems'
	require 'ruby-cldr'
	require 'cldr'
	require 'cldr/data'
	require 'cldr/download'
	require 'yaml'

	# NOTE: nb = no (norwegian)
	locales = ["he", "en", "fr", "it", "de", "es", "ja", "ko", "ru", "tr", "pt", "fil", "hi", "ms", "id", "nl", "da", "sv", "pl", "hu", "fi", "nb", "zh", "zh-Hant", "ar", "fa", "ur", "th", "uk", "ca", "el", "af", "cs", "eu"]
	components = ["calendars", "currencies", "delimiters", "languages", "numbers", "Plurals", "territories", "timezones", "units"]
	-- PostgreSQL 9.2 beta (for the new JSON datatype)
	-- You can actually use an earlier version and a TEXT type too
	-- PL/V8 http://code.google.com/p/plv8js/wiki/PLV8

	-- Inspired by
	-- http://people.planetpostgresql.org/andrew/index.php?/archives/249-Using-PLV8-to-index-JSON.html
	-- http://ssql-pgaustin.herokuapp.com/#1

	-- JSON Types need to be mapped into corresponding PG types
	--
	#!/bin/bash

	if [ -z $GITHUB_KEYS_DIR ]; then
	GITHUB_KEYS_DIR="$HOME/github-keys"
	fi

	if [ -z $GITHUB_KEY_FILE_NAME ]; then
	GITHUB_KEY_FILE_NAME="id_rsa"
	fi