skooch

Object.defineProperty(window, 'localStorage', {
  configurable: true,
  enumerable: true,
  value: new Proxy(localStorage, {
    set: function (ls, prop, value) {
      console.log(`direct assignment: ${prop} = ${value}`);
      debugger;
      ls[prop] = value;
      return true;
    },

skooch

#!/usr/bin/env bash

while true; do
        echo "ss23 rly, completely, sux"
        sleep 1
done

skooch

#!/usr/bin/env bash

while true; do
        echo "ss23 rly sux"
        sleep 1
done

skooch

/* 

* Draw bouncing ball pattern on screen 

* Increase/decrease ball pattern number by up/down key 

* Read sound data from boot disk and play back as BGM 

* Copyright (C) 1996 Sony Computer Entertainment Inc. 

skooch

1 Were no strangers to love
2 You know the rules and so do I
3 A full commitments
4 What Im thinking of
5 You wouldn't get this
6 From any other guy
7 I just wanna tell you
8 How Im feeling
9 Gotta make you understand
10 Never gonna give you up

skooch

Afrikaans: Geen
Arabic: لا
Azerbaijani: Yox
Belarusian: няма
Bulgarian: Не
Bengali: না
Bosnian: ne
Catalan: No
Cebuano: Dili
Czech: Ne

skooch

The exploit was posted at Hacker News comments thread, so it's time to
disclose the full story.
 
Nikolay Ermishkin from the Mail.Ru Security Team discovered several
vulnerabilities in ImageMagick.
We've reported these issues to developers of ImageMagick and they made a
fix for RCE in sources and released new version (6.9.3-9 released
2016-04-30 http://legacy.imagemagick.org/script/changelog.php), but this
fix seems to be incomplete. We are still working with developers.
 

skooch

#!/bin/sh

# connect to bitlbee, create an account with register $password

# Then invoke this with something like /exec -o /full/path/to/script.sh

id=27031
conf_server=conf.hipchat.com
chat_server=chat.hipchat.com

skooch

Keybase proof

I hereby claim:

• I am skooch on github.
• I am skoooch (https://keybase.io/skoooch) on keybase.
• I have a public key ASDCJzkSv4TlRYUarK67CnZuzTJ3QgYKa2WLGj52GZGfPAo

To claim this, I am signing this object: