Skip to content

Instantly share code, notes, and snippets.

View hunterxxx's full-sized avatar
🏠
Working from home

Hunter hunterxxx

🏠
Working from home
View GitHub Profile
@hunterxxx
hunterxxx / mx.js
Created September 18, 2025 23:58
Mendix Security Inspection
// injector.js
(function () {
try {
// Avoid double injection
if (window.__mendixInspectorInjected) {
// if inspector already exists and exported a run function, call it to reopen UI
if (window.__mendixInspector && typeof window.__mendixInspector.run === 'function') {
try { window.__mendixInspector.run(); } catch (e) { console.warn('re-run failed', e); }
}
return;
@hunterxxx
hunterxxx / mendix.js
Last active September 18, 2025 20:54
mendix DB readonly value checker
// Script to test the security/access rules of your Mendix application. It shows all the data that the user has access to.
// If the user is allowed to modify the data, the background is green. White for read-only.
function addCellText(p_document, p_row, p_text, p_head, p_readonly) {
var l_cell = p_row.insertCell();
l_cell.appendChild(p_document.createTextNode(p_text));
l_cell.style.border = 'solid 1px #000';
l_cell.style.padding = '10px';
if (p_head)
l_cell.style.backgroundColor = '#ddd';
if (!p_readonly)
@hunterxxx
hunterxxx / jiggle.py
Created December 20, 2023 07:35
Jiggle Jiggle
import time
import sys
import datetime
class DummyPyAutoGUI:
def __init__(self):
self.FAILSAFE = False
def moveTo(self, x, y):
pass
@hunterxxx
hunterxxx / Paupercrypt.java
Created August 1, 2022 22:02
Weak Encryption
package nl.picobello.itconsulting.crypto;
import java.io.ByteArrayOutputStream;
import java.security.Key;
import java.security.MessageDigest;
import javax.crypto.Cipher;
import javax.crypto.CipherOutputStream;
import javax.crypto.spec.SecretKeySpec;
/* loaded from: classes3.dex */
package nl.picobello.itconsulting.travelportal;
import android.graphics.Bitmap;
import android.graphics.BitmapFactory;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.InputStream;
import nl.picobello.itconsulting.crypto.Paupercrypt;
/* loaded from: classes4.dex */
@hunterxxx
hunterxxx / MainActivity.java
Created August 1, 2022 21:36
Click 25 times shown flag
package nl.picobello.itconsulting.travelportal;
import android.content.Intent;
import android.graphics.BitmapFactory;
import android.os.Bundle;
import android.view.View;
import android.widget.Toast;
import androidx.appcompat.app.AppCompatActivity;
import java.io.IOException;
import nl.picobello.itconsulting.travelportal.databinding.ActivityMainBinding;
@hunterxxx
hunterxxx / Crack.java
Created August 1, 2022 21:29
Brute Force AES ECB encryption
package com.mycompany.mavenproject1;
import java.util.ArrayList;
import java.io.ByteArrayOutputStream;
import java.security.Key;
import java.security.MessageDigest;
import javax.crypto.Cipher;
import javax.crypto.CipherOutputStream;
import javax.crypto.spec.SecretKeySpec;
from Crypto.Util.number import inverse
from codecs import decode
from math import lcm
n = 5261933844650100908430030083398098838688018147149529533465444719385566864605781576487305356717074882505882701585297765789323726258356035692769897420620858774763694117634408028918270394852404169072671551096321238430993811080749636806153881798472848720411673994908247486124703888115308603904735959457057925225503197625820670522050494196703154086316062123787934777520599894745147260327060174336101658295022275013051816321617046927321006322752178354002696596328204277122466231388232487691224076847557856202947748540263791767128195927179588238799470987669558119422552470505956858217654904628177286026365989987106877656917
e = 65537
c = 176955087574615470063741472647197409875117482285309340581271852382710990213049325727125711804231234813146490233229473679126800639397642380073858980601348297248196895714845780751708931869367483971257602632592317987276609144131149239628356913355893753937582033295526684103570648143766629320982809943886
/**
* Nextcloud Android client application
*
* @author Mario Danic
* Copyright (C) 2017 Mario Danic
* Copyright (C) 2020 Chris Narkiewicz <hello@ezaquarii.com>
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as published by
* the Free Software Foundation, either version 3 of the License, or