Prabesh Sapkota Prabesh01
This guide shows how to enable dev mode for the Discord desktop application running on Windows (as of February 2022).
This can be used to view beta experiments to try features currently in development that are included but hidden by default in Discord release builds.
This is a gist used in the following blog posts:
Read proper write-up here: https://publish.whoisbinit.me/subdomain-takeover-on-api-techprep-fb-com-through-aws-elastic-beanstalk
I have included my script in another file (main.sh), which I used in discovering this vulnerability.
I didn't do any form of manual work in finding this vulnerability, and my workflow was fully automated with Bash scripting.
I have shortened my actual script, and only included the part which helped me in finding this vulnerability in the main.sh file.
| <?php | |
| /* | |
| Get Exact GPS Location of Webpage Visitors with HTML5 Geolocation API and PHP! | |
| Author: Binit Ghimire | |
| GitHub Profile: https://github.com/TheBinitGhimire | |
| Author URL: https://WHOISbinit.me/ | |
| _________________ | |
| || How to Use? || | |
| ‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾ |
| let cache; webpackChunkdiscord_app.push([["wp_isdev_patch"], {}, r => cache=r.c]); | |
| var UserStore = Object.values(cache).find(m => m?.exports?.default?.getUser).exports.default; | |
| var actions = Object.values(UserStore._dispatcher._actionHandlers._dependencyGraph.nodes); | |
| var user = UserStore.getCurrentUser(); | |
| actions.find(n => n.name === "ExperimentStore").actionHandler.CONNECTION_OPEN({ | |
| type: "CONNECTION_OPEN", user: {flags: user.flags |= 1}, experiments: [], | |
| }); | |
| actions.find(n => n.name === "DeveloperExperimentStore").actionHandler.CONNECTION_OPEN(); | |
| webpackChunkdiscord_app.pop(); user.flags &= ~1; "done"; |
| // Starter Code: https://gist.github.com/eslachance/3349734a98d30011bb202f47342601d3#file-index_v12-js | |
| const Discord = require("discord.js"); | |
| const speech = require('@google-cloud/speech'); | |
| const fs = require('fs'); | |
| /* | |
| DISCORD.JS VERSION 12 CODE | |
| */ | |
| const client = new Discord.Client(); |
At October 11, 2019, I published a Javascript library to to run the resumable upload for Google Drive. When this is used, the large file can be uploaded. You can also use this js library.
This is a sample script for uploading files to Google Drive using Javascript. The files are uploaded by Drive API v3. gapi.client.drive.files.create() can create an empty file on Google Drive. But it cannot directly upload files including contents. I think that this might not be able to upload files and metadata with the multipart/related, although this might be resolved by the future update. So now, as one of workarounds, I use using XMLHttpRequest.
- This sample uses gapi.
- Before you use this, please enable Drive API at API console and carr