Skip to content

Instantly share code, notes, and snippets.

@duraki
duraki / zyrfi.txt
Created March 24, 2024 21:47
Zyscan Inclusion Tester
MATCH_PATTRN_RFI_VALID_WORLD_DOMINATION_PROJECT
@duraki
duraki / gist:424af289d0121cc518b635429f094d3b
Created July 31, 2023 21:32 — forked from zliuva/gist:1084476
A minimal Mach-o x64 executable for OS X
; A minimal Mach-o x64 executable for OS X (also see below Mountain Lion version)
;
; $ nasm -f bin -o tiny_hello tiny_hello.s
; $ chmod +x tiny_hello
; $ ./tiny_hello
; Hello World!
; $
; c.f.
; http://osxbook.com/blog/2009/03/15/crafting-a-tiny-mach-o-executable/ ( the original tiny mach-o executable )
@duraki
duraki / macOS Internals.md
Created July 31, 2023 07:42 — forked from kconner/macOS Internals.md
macOS Internals

macOS Internals

Understand your Mac and iPhone more deeply by tracing the evolution of Mac OS X from prelease to Swift. John Siracusa delivers the details.

Starting Points

How to use this gist

You've got two main options:

Go the road less travelled, find programs that are not on hackerone or bugcrowd:
https://www.bugcrowd.com/bug-bounty-list/
google: "Responsible Disclosure" or "Vulnerability Disclosure" or "responsible disclosure website list"
google: responsible disclosure "bounty"
Responsible Disclosure seems to give best results.
intext:”Responsible Disclosure Policy”
"responsible disclosure" "private program"
"responsible disclosure" "private" "program"
Google Dork:
@duraki
duraki / hide-all-app.scpt
Created October 3, 2022 19:36 — forked from Teraflopst/hide-all-app.scpt
AppleScript: Hide all applications and show the desktop on Mac
tell application "Finder"
set visible of every process whose visible is true and name is not "Finder" to false
set the collapsed of windows to true
end tell

Setup

  • Create a developer account with Apple
  • Download and install X-Code from the Apple App Store
  • Open and run X-Code app and install whatever extras it requires
  • Open the preferences pane (cmd+,)
    • click the + in the lower right corner
    • choose Apple ID
    • enter your apple ID and password
@duraki
duraki / shell_bind_tcp.asm
Created December 9, 2017 18:54 — forked from geyslan/shell_bind_tcp.asm
Shell Bind TCP in Assembly (Linux/x86)
; This is a snippet of the original file in https://github.com/geyslan/SLAE/blob/master/1st.assignment/shell_bind_tcp.asm
global _start
section .text
_start:
; syscalls (/usr/include/asm/unistd_32.h)
; socketcall numbers (/usr/include/linux/net.h)
@duraki
duraki / sqlmap_which_tamper_to_use.txt
Created May 8, 2021 09:35
Best sqlmap tampers to use depending on the DBMS
## MySQL
space2randomblank
unionalltounion
unmagicquotes
versionedkeywords
versionedmorekeywords
xforwardedforbetween
bluecoat
charencode
@duraki
duraki / E34 Wipes Programming.txt
Created June 17, 2022 19:55
E34 Wipes Programming
First, a little theory. The brushes and, accordingly, the switch have 5 main modes of operation of the brushes:
3 - The fastest mode.
2 - Continuous mode (With "nuances". What? Read below!).
1 - Intermittent mode.
0 - Not working (off).
1. If the turn signal switch is pressed in until it is in the most extreme position, the marker on one side (parking marker) will light up.
2. The rear sofa is made so that it can be used as a seat in nature (there is even a carrying handle and the bottom of the sofa is made of plastic).
3. The sun protective blind can turn to the window when the sun is lateral (3D blind).
4. By clicking on the reset daily mileage, you can see the mileage even without a key.
5. In the rear doors in the locks themselves there are latches for children that will not allow a child to open the doors (turn with a key or a screwdriver).
6. By lifting the driver's handle and holding it for 15 seconds, the lock cylinder will warm up.
7.Lifting the driver's handle turns on the interior light.
8. Recirculation of the cabin works even with the engine off (if the goal is additional help, you can sit in the car driving warm air through the cabin through the stove).
9. When you have to carry something dirty in the trunk, you can turn the ca