Skip to content

Instantly share code, notes, and snippets.

@wdouglascampbell
wdouglascampbell / create-bootable-usb-for-windows-11-arm.txt
Created January 18, 2025 19:06
Create Bootable USB for Windows 11 ARM
Download Official Windows 11 ARM ISO
====================================
1. Navigate to https://www.microsoft.com/en-us/software-download/windows11arm64
2. Select "Windows 11 (multi-edition ISO for Arm64) from the "Download"
dropdown list.
3. Click Download Now.
4. Select the product language, e.g. English (United States), from the
"Choose One" dropdown list.
5. Click Confirm.
6. Click Download Now.
@mcxiaoke
mcxiaoke / clash.yaml
Created June 1, 2024 03:26
clash各种协议的配置模板
# DNS 配置可自行修改
port: 7890
allow-lan: true
mode: rule
log-level: info
unified-delay: true
global-client-fingerprint: chrome
dns:
enable: true
listen: :53
@klezVirus
klezVirus / GenericWriteRBCD.ps1
Last active December 20, 2025 05:38
Exploit the GenericWrite DACL on a computer object (from a user or computer account)
function Invoke-GenericWriteRBCD
{
<# Based on Gist by dirkjan - Packed to be used from a C2 #>
[CmdletBinding()]
param
(
[Parameter(Mandatory=$True, HelpMessage="The name for the newly created computer")]
[string]$Computer,
@aamiaa
aamiaa / CompleteDiscordQuest.md
Last active December 20, 2025 05:40
Complete Recent Discord Quest

Complete Recent Discord Quest

Note

This does not works in browser for quests which require you to play a game! Use the desktop app to complete those.

How to use this script:

  1. Accept a quest under Discover -> Quests
  2. Press Ctrl+Shift+I to open DevTools
  3. Go to the Console tab
  4. Paste the following code and hit enter:
@coolaj86
coolaj86 / Create a Bootable MacOS Recovery USB with Linux.md
Last active December 20, 2025 05:34
How to create Apple's Bootable MacOS Rescue Image from Linux

See bootableinstaller.com

How to create a Bootable MacOS Recovery USB from Linux

If your Mac is out-of-order or you otherwise cannot download macOS from the App Store, you can still create a bootable OS X recovery USB, and you can use that to create an Installer USB.

The downloads used in this process are legal and freely avaliable - including disk images directly from Apple's IT support pages, and open source utilities for extracting and converting pkg, dmg, and HFS+.

@ammuench
ammuench / 8BitDoUltimateWifi_Linux.MD
Last active December 20, 2025 05:33
8BitDo Ultimate 2.4GHz wifi working in linux
@aliakseiz
aliakseiz / joplin-server-api.yaml
Created November 15, 2024 13:01
Joplin Server v3.0.1 API in OpenAPI 3.0 format
openapi: 3.0.0
info:
title: Joplin server API
description: This is a specification for API routes found in the server.
version: 1.0.0
servers:
- url: http://localhost:3000
description: Local development server
@jakub-g
jakub-g / async-defer-module.md
Last active December 20, 2025 05:25
async scripts, defer scripts, module scripts: explainer, comparison, and gotchas

<script> async, defer, async defer, module, nomodule, src, inline - the cheat sheet

With the addition of ES modules, there's now no fewer than 24 ways to load your JS code: (inline|not inline) x (defer|no defer) x (async|no async) x (type=text/javascript | type=module | nomodule) -- and each of them is subtly different.

This document is a comparison of various ways the <script> tags in HTML are processed depending on the attributes set.

If you ever wondered when to use inline <script async type="module"> and when <script nomodule defer src="...">, you're in the good place!

Note that this article is about <script>s inserted in the HTML; the behavior of <script>s inserted at runtime is slightly different - see Deep dive into the murky waters of script loading by Jake Archibald (2013)

@hackermondev
hackermondev / writeup.md
Last active December 20, 2025 05:17
How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

@xrman
xrman / gist:4468f545b169969466bceb694d742dad
Created March 12, 2019 21:47
FastStone Capture Full Serial Key
Registration Code
Name : www.xyraclius.com
Serial : OOCRYIMDMDPWRETFPSUZ