Skip to content

Instantly share code, notes, and snippets.

@bnd9
bnd9 / php-oom-uaf-exploit.py
Last active October 21, 2026 18:34
php CVE-2026-109619 + CVE-2026-109618
#!/usr/bin/env python3
"""
php-oom-uaf-exploit.py
======================
Weaponized exploit chain for php-src based on:
* GHSA-6wmf-4rv5-p3rp -- OOM longjmp() out of multipart request parsing
leaves request memory (initialized or not) reachable during request
shutdown. Triggered here with header-flooding / empty-file-control
@mashiox
mashiox / bash_history.txt
Created October 21, 2026 18:01
mashio.net PHP2SHELL
# Preamble
git clone https://github.com/Ademking/php2shell-nuclei-templates.git
cd php2shell-nuclei-templates
# Active session-fixation check
nuclei -t templates/php2shell/CVE-2026-109618.yaml \
-u http://127.0.0.1:8001
nuclei -t templates/php2shell/CVE-2026-109618.yaml \
-u http://127.0.0.1:8001/webshell-lab.php
@Clarence212
Clarence212 / DiscordQuest.md
Last active October 21, 2026 18:02
DiscordQuestBypass

Quest

Disclaimer This project is provided for educational and research purposes only. It demonstrates how time based Discord quest progress is reported from the client. Using this code on live services may violate platform Terms of Service and may result in penalties.


What It Does

@gfsaaser24
gfsaaser24 / Grok-Bot-Harness-Explainer.md
Last active October 21, 2026 17:32
How the Grok Bot harness works: architecture, prompts, state, tools and service dependencies

How the Grok Bot harness works - @gabefletcher

The Grok Bot host builds model requests, runs tools and saves the agent's state. Hosted services also handle identity, scheduling, sync and other features.

A message starts in the desktop app. The desktop sends it to the box host and shows the response. It also manages account connections and can run tools on the user's computer. The host builds the model's context, calls the provider, runs requested tools and saves the results. It then decides whether another model call is needed. The visible chat, model conversation and learned memory use separate stores. Changing the model provider leaves the other hosted service calls in place.

The original architecture sections cover public host 17e335e and desktop 0.52. The later comparison adds five-host source analysis, desktop .57.1 findings and isolated runtime measurements. Host and desktop have separate version number

@djhallaaaa
djhallaaaa / SKILL.md
Last active October 21, 2026 16:51
Skill author: @djhallaaaa. Claude Code skill that organizes your rekordbox or Serato DJ library using AI. Learns your existing playlists and sorts unorganized tracks by genre, BPM, and vibe. Drop this file in your Claude setup and say "organize my DJ library."
name dj-library-organizer
description Organize a DJ library (rekordbox or Serato) by sorting tracks into playlists or crates. Use this skill whenever someone asks to organize, sort, or categorize their rekordbox library, Serato library, DJ collection, or music playlists/crates — or mentions they have tracks that need sorting into genres, vibes, or folders. Also trigger when someone mentions rekordbox XML, Serato crates, DJ library management, playlist/crate organization for DJing, or wants to clean up their DJ music collection. Works with any genre set — the skill learns from the user's existing playlists/crates rather than assuming specific genres.
author djhallaaaa

DJ library organizer

You are an interactive DJ library organizer. You help DJs sort their tracks into playlists or crates by learning from their existing organization patterns. You support both rekordbox and Serato DJ.

@dunaevskiy
dunaevskiy / OntoUMLDrawIO.xml
Last active October 21, 2026 16:45
OntoUML Palette - draw.io
<mxlibrary>[{"xml":"jVLRboMwDPyavEMYVV8HXVGlTpNKfyCAS6IagkJaYF8/Q8K6aaq0B8T5zufIl7AobcbMiE6+6wqQRW8sSo3W1qFmTAGR8UBVLNoxzgP6GN8/UcNFDTphoLX/MXBnuAu8gWNOh+xA/w2SPykMoXpG+cfp/Hr8yzt/byf0fqNvbQXz+IDkQSoLeSfKWR1oTeKkbWjPXUgQRQGYiPJaL7ZUozYktbql/uSiEFeK8eiyLaEsZ163di8ahRMJZyF1Izybq8/5oJBTLVDVLRUlRQE0Iumt0Vf4MbDYxi9xsFr9Cj7COxgL49NUF8pHmoFuwJqJWgZVWek6Ni74QIKqpXfFnhO9q+tv5+OKCPhbWsvHa1i0X4/lCw==","w":60,"h":50,"aspect":"fixed","title":"Rigid Sortal Group"},{"xml":"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
@adrianhajdin
adrianhajdin / App.scss
Last active October 21, 2026 16:43
Build and Deploy the Ultimate Web Development Portfolio
.app {
background-color: var(--primary-color);
font-family: var(--font-base);
}
.app__whitebg {
background-color: var(--white-color);
}
.app__primarybg {
@adrianhajdin
adrianhajdin / constants.index.ts
Created October 27, 2023 09:18
Build and Deploy a Full Stack Social Media App | React JS, Appwrite, Tailwind CSS, React Query
export const sidebarLinks = [
{
imgURL: "/assets/icons/home.svg",
route: "/",
label: "Home",
},
{
imgURL: "/assets/icons/wallpaper.svg",
route: "/explore",
label: "Explore",