nikcub

#!/bin/bash
#
# shell script will clear all google analytics cookies from chrome cookie store
#
SQ3=`which sqlite3`
$SQ3 ~/Library/Application\ Support/Google/Chrome/Default/Cookies "delete from cookies where name like '__u%'"

nikcub

// get the map element
var el = $('.map')[0];

// amount in pixels we want to move each keypress/hold
var move = 200;

function fakeMouseEvent(type, x, y) {
    var evt = document.createEvent("MouseEvents");
    evt.initMouseEvent(type, true, true, window,
                       0, 0, 0, x, y, false, false, false, false, 0, null);

nikcub

Comicsansify;")

nikcub

// to build:
// lessc <filename> > site.css
// lessc <filename> > site.min.css --compress

// the swatch
@color1:  #55626b;
@color2:  #6c9380;
@color3:  #c1ca55;
@color4:  #f07d6b;
@color5:  #ad5472;

nikcub

#!/bin/sh

/usr/bin/osascript > /dev/null <<ASCPT
  set stdinText to "$(cat | sed -e 's/\\/\\\\/g' -e 's/\"/\\\"/g')"
  set recName to "Nik Cubrilovic"
  set recAddr to "nikcub@gmail.com"
  set theSubject to "Email from standard input"
 
  tell application "Mail"
 

nikcub

#!/bin/sh

/usr/bin/osascript > /dev/null <<ASCPT
  set stdinText to "$(cat | sed -e 's/\\/\\\\/g' -e 's/\"/\\\"/g')"
  set recipientName to "John Doe"
  set recipientAddress to "nobody@nowhere.com"
  set theSubject to "Email from standard input"
  set theContent to "This email was created and sent using AppleScript!"
 
  tell application "Mail"

nikcub

Keybase proof

I hereby claim:

• I am nikcub on github.
• I am nikcub (https://keybase.io/nikcub) on keybase.
• I have a public key whose fingerprint is E207 612C E504 10EF B789 6E34 2E4C E6CA 3D38 5CC5

To claim this, I am signing this object:

nikcub

Tor HTTP Upgrade Protocol Draft Proposal

Version 0.1

6th December 2014

This is very much a draft - there are many security, privacy and performance considerations

1. Background

nikcub

$ids = array_map('trim', $_POST['ids']);
$ids = array_map('intval', $ids);
$ids = implode(',', array_values($ids));
$db->query("SELECT * from table where id IN(" . $ids . ")");

nikcub

<!--
Exploit for Disqus for Wordpress admin stored CSRF+XSS up to v2.7.5

Blog post explainer: https://www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin/

12th August 2014

Nik Cubrilovic - www.nikcub.com

Most of these params are unfiltered/injectable. Not framable on newer Wordpress.