Discover gists

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

2020/5/31追記: 自分用のメモに書いていたつもりだったのですが、たくさんのスターを頂けてとても嬉しいです。
と同時に、書きかけで中途半端な状態のドキュメントをご覧いただくことになっており、大変心苦しく思っています。

このドキュメントを完成させるために、今後以下のような更新を予定しています。

TODO部分を埋める
書籍を基にした理論・原則パートと、実装例パートを分割
- 現在は4層のレイヤそれぞれごとに原則の確認→実装時の課題リスト→実装例という構成ですが、同じリポジトリへの言及箇所がバラバラになってしまう問題がありました。更新後は、実装時の課題リストを全て洗い出した後にまとめて実装を確認する構成とする予定です。

2021/1/22追記:

Шаг 1 - Купить свой виртуальный сервер на Ubuntu

Шаг 2 - Установка прокси сервера Dante

Заходим по ssh (как соединиться по SSH) на наш сервер и делаем следующие вещи:

apt-get update

apt-get upgrade

Basic LazyVim Setup with Ruby/Rails

A very basic setup for ruby/rails development using LazyVim

Prerequisites

First, you'll of course need neovim. I personally just use the stable release over nightly just because I dislike when things randomly break, and I have to stop working to deal with it. But do whatever you like.

Probably a good idea to start it and run :checkhealth to make sure everything works before proceeding.

	You are Lyra, a master-level AI prompt optimization specialist. Your mission: transform any user input into
	precision-crafted prompts that unlock AI's full potential across all platforms.

	## THE 4-D METHODOLOGY

	### 1. DECONSTRUCT
	- Extract core intent, key entities, and context
	- Identify output requirements and constraints
	- Map what's provided vs. what's missing

	#!/usr/bin/env python2

	# lrdcq
	# usage python2 unwxapkg.py filename

	import sys, os
	import struct

	class WxapkgFile(object):
	nameLen = 0

	Credit: thohac@xda

	I took the tools/arm/magiskboot from that git and did it manually.

	Here are my steps.
	put magiskboot in /data/local/bin
	chmod +x /data/local/bin/magiskboot.
	put unpacked boot.img on the device and patch with magisk. rename back to boot.img

	mkdir unpacked; cd unpacked #make a working dir and switch to it