Skip to content

Instantly share code, notes, and snippets.

Andrea Brancaleoni thypon

Block or report user

Report or block thypon

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
View Vulnfinder
<!DOCTYPE html>
<html xmlns="" xml:lang="zh-CN" lang="zh-CN">
<script src="escape.js" type="text/javascript" charset="utf-8"></script>
<script type="text/javascript" language="javascript" charset="utf-8">
if (escapeHTML(document.url) != document.url) {
document.href = "XSS"
thypon / exceptional.rkt
Last active Dec 17, 2015
Racket Exception Implementation
View exceptional.rkt
#lang racket
(define *handlers* (list))
(define (push-handler proc)
(set! *handlers* (cons proc *handlers*)))
(define (pop-handler)
(let ((h (car *handlers*)))
(set! *handlers* ( cdr *handlers*))
thypon / gist:8476260
Created Jan 17, 2014
I Need Dynamics
View gist:8476260
import lombok.NonNull;
import java.lang.reflect.Method;
public class Dynamics {
public static <T> T send(
@NonNull final Class<?> clazz,
@NonNull final String method,
final Object... args) {
class Shrodinger {
static int DEAD = 0;
static int ALIVE = 1;
int status;
class Main {
stativ void main() {
Shrodinger cat = new Shrodinger();
View shmap.rb
require 'socket'
def command(cmd)
s = '', 9447
data = s.recv(20000)
s.puts cmd
data = s.gets
s.close # close socket when done
thypon / DHCPLogger.go
Created Dec 14, 2014
Logs Users that connects via DHCP
View DHCPLogger.go
package main
import (
View gist:86add332b6d85b9abb39
class Proc
def self.compose(f, g)
lambda { |*args| f[g[*args]] }
def *(g)
Proc.compose(self, g.to_proc)
def |(g)
thypon / Extract Deps
Created Apr 24, 2015
Extract Deps in Ruby
View Extract Deps
#!/usr/bin/env ruby
require 'rubygems'
require 'gems'
require 'json'
class Package <, :language, :version, :hash, :source, :homepage, :depends)
class Dependencies <, :make, :runtime)
thypon / dontfork.c
Last active Aug 29, 2015
Daemonize tracer
View dontfork.c
// dontfork.c, a little ptrace utility that traces all child process
// and exits only when the latest spawned child is dead
#include <assert.h>
#include <stdio.h>
#include <sys/ptrace.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <string.h>
#include <linux/ptrace.h>
#include <sys/prctl.h>
thypon /
Created Aug 24, 2015
check security for all linked libraries
recursivechecksec() {
sudo LD_TRACE_LOADED_OBJECTS=1 LD_VERBOSE=1 /lib/ $1 | grep "=>" | sed 's|\s*||' | sed 's|(.*)||g' | awk '{print $3}' | sort | uniq | xargs -n1 ls -la | awk '{print $11}' | xargs -n1 echo /usr/lib/ | sed 's|\s*||g' | xargs -n1 checksec --file
You can’t perform that action at this time.