| // ==UserScript== | |
| // @name Microsoft Remote Desktop Web Access for all | |
| // @namespace memmie.lenglet.name | |
| // @author mems <memmie@lenglet.name> | |
| // @homepageURL https://gist.github.com/mems/e7277c1118e1d876dd7333bb8c2bb49b | |
| // @description Allow to use RD Web Access on browser that don't support RD ActiveX | |
| // @match *://*/RDWeb/Pages/* | |
| // @updateURL https://gist.github.com/mems/e7277c1118e1d876dd7333bb8c2bb49b/raw/msrdwa-for-all.user.js | |
| // @version 1.0.0 | |
| // ==/UserScript== |
| <?php | |
| if(isset($_GET['videofile'])){ | |
| // PHP encode transfer automatically if you use flush() and output_buffering is activated (don't need to use special header nor chunk metadata) | |
| // http://php.net/manual/en/outcontrol.configuration.php#ini.output-buffering | |
| header('Transfer-Encoding: chunked'); | |
| header('Content-Encoding: none'); | |
| // No cache | |
| header('Cache-Control: no-cache, no-store, must-revalidate'); |
Email file name is the timestamp of received email (in microseconds). Example: 1466698612265640, start with From - Thu Jun 23 18:16:52 2016 (Thu Jun 23 2016 18:16:52 GMT+0200 (CEST))
Use NodeJS:
// Note: this script not work properly if an email contains "\n\nFrom - "
const fs = require('fs');
const path = require('path');
First exec this in WebDev console for each page, copy in clipboard the iframes src of each videos + title + keywords
copy(JSON.stringify(Array.from(document.querySelectorAll("article")).map(article => [article.querySelector("iframe").src, /<a[^>]*>([^<]+)/.exec(article.querySelector("textarea").value)[1], article.querySelector(".cat").textContent])))
Go to https://videos.sproutvideo.com/embed/189bdbb01e1ce7c790/98b77e706be88310, open WebDev console and exec:
var videos = [
For /var/log/system.log full of errors like these ones:
kernel[0]: Sandbox: com.apple.Addres(XXXXX) deny(1) network-outbound /private/var/run/mDNSResponder
com.apple.AddressBook.InternetAccountsBridge[XXXXX]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1
com.apple.AddressBook.InternetAccountsBridge[XXXXX]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted
How to fix it?
| <!DOCTYPE html PUBLIC> | |
| <html> | |
| <head> | |
| <title></title> | |
| </head> | |
| <body> | |
| <script> | |
| // Polyfill | |
| window.performance = (window.performance || { | |
| offset: Date.now(), |
Share it on Facebook. When the user click on the shared link and come back to the Facebook tab, he should see a fake Facebook login page (in French).
This attack use window.open vector. Since all shared link on Facebook use target="_blank", the opener property is shared with the target page (attacker page) and allow this page to control the facebook tab location
To solve that, Facebook should use a redirect page where the property window.opener is set to null:
<head>
Show all fullres images (without watermark, + inaccessible ones) of a https://www.fashionanthology.com/ gallery in one page and without require any account
How to use it:
| <?xml version="1.0" encoding="UTF-8"?> | |
| <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> | |
| <plist version="1.0"> | |
| <dict> | |
| <key>DisplayProductID</key> | |
| <integer>1854</integer> | |
| <key>DisplayProductName</key> | |
| <string>OSCAR LCD panel</string> | |
| <key>DisplayVendorID</key> | |
| <integer>1970170734</integer> |
http://www.apple.com/live/
which redirect to something like http://www.apple.com/live/2015-june-event//live/2015-june-event/scripts/2015-june-event.built.jsp.events-delivery.apple.com.edgesuite.net
You find something like http://p.events-delivery.apple.com.edgesuite.net/15pijbnaefvpoijbaefvpihb06/js_files/event/url.json (details: host + path + url.json)http://p.events-delivery.apple.com.edgesuite.net/15pijbnaefvpoijbaefvpihb06/m3u8/hls_mvp.m3u8Now you can watch it in VLC or any other videoplayer that support M3U and MP4(H264+AAC)!