evilpacket

var csv = require('csv');
var request = require('request');
var Hapi = require('hapi');
var server = new Hapi.Server();
server.connection({ port: 4000, labels: 'a' });

var url = "https://data.sparkfun.com/output/XXXXXXXXX.csv";


server.route({

evilpacket

127.0.0.1:6379> HGETALL checker:DEADC0DE:length
1) "3"
2) "3"
3) "6"
4) "3"
5) "9"
6) "1"
7) "5"
8) "2"

evilpacket

root@docker:~# docker diff e23e5325a33f
D /bin
D /boot
D /home
D /lib
D /lib64
D /media
D /mnt
D /opt
D /root

evilpacket

07:38:52-adam_baldwin~/tmp$ nvm use 0.12.4
Now using node v0.12.4
07:38:56-adam_baldwin~/tmp$ npm i nsp -g
/Users/adam_baldwin/.nvm/versions/node/v0.12.4/bin/nsp -> /Users/adam_baldwin/.nvm/versions/node/v0.12.4/lib/node_modules/nsp/bin/nspCLI.js
nsp@1.0.3 /Users/adam_baldwin/.nvm/versions/node/v0.12.4/lib/node_modules/nsp
├── strscanner@0.0.8
├── node-print@0.0.4
├── nsp-api@1.0.3
├── text-table@0.2.0
├── async@0.9.2

evilpacket

Count by module / version

1006 YUI@3.3.0
 850 YUI@3.4.1
 823 jquery@1.8.3
 797 jquery@1.7.1
 796 jquery@1.7.2
 750 YUI@3.0.0
 244 jquery@1.8.1
 240 jquery@1.8.2

evilpacket

local floor,insert = math.floor, table.insert
local function basen(n,b)
    n = floor(n)
    if not b or b == 10 then return tostring(n) end
    local digits = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
    local t = {}
    local sign = ""
    if n < 0 then
        sign = "-"
    n = -n

evilpacket

var genstr = function (len, chr) {
    var result = "";
    for (i=0; i<=len; i++) {
        result = result + chr;
    }

    return result;
}

r = /^([a-z0-9_\.\-\+])+\@(([a-z0-9\-])+\.)+([a-z0-9]{2,4})+$/

evilpacket

#!/usr/bin/env ruby
#
# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#
# ## Advisory
#
#   https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
#
# ## Caveats
#

evilpacket

So on FF 21.0 I set the following header X-Content-Security-Policy I get the following error message in the console.

```
The X-Content-Security-Policy and X-Content-Security-Report-Only headers will be deprecated in the future. Please use the Content-Security-Policy and Content-Security-Report-Only headers with CSP spec compliant syntax instead.
```

If I set the Content-Security-Policy header it does not honor the policy.

Additionally report only does not appear to work at all in FF 21.0

evilpacket

>> servo.1373062175128 Board <- Serialport ready /dev/cu.usbmodem1411

string_decoder.js:109
  charStr += buffer.toString(this.encoding, 0, end);
                    ^
RangeError: toString() radix argument must be between 2 and 36
    at Number.toString (native)
    at StringDecoder.write (string_decoder.js:109:21)
    at ReadStream.onData (readline.js:833:39)
    at ReadStream.EventEmitter.emit (events.js:95:17)