Skip to content

Instantly share code, notes, and snippets.

@LaurieWired
LaurieWired / heisenbug.cpp
Created December 22, 2025 19:45
Heisenbug Demo
#include <iostream>
#include <vector>
#include <string>
#include <iomanip>
// example sbox, typical in ciphers
const uint8_t S_BOX[16] = {
0x63, 0x7C, 0x77, 0x7B, 0xF2, 0x6B, 0x6F, 0xC5,
0x30, 0x01, 0x67, 0x2B, 0xFE, 0xD7, 0xAB, 0x76
};
@mojavelinux
mojavelinux / ApplicationInitializer.java
Created October 21, 2010 04:53
A bridge between the ServletContext life cycle events and CDI observers (with example observer ApplicationInitializer)
// uncomment line if you want the instance to be retained in application scope
// @ApplicationScoped
public class ApplicationInitializer
{
public void onStartup(@Observes @Initialized ServletContext ctx)
{
System.out.println("Initialized web application at context path " + ctx.getContextPath());
}
}
@WHW0x455
WHW0x455 / public.md
Last active December 23, 2025 07:13

2023 predator sample

Thanks to Google for sharing the sample.

VersionDispatcher

The int uname(struct utsname *); function retrieves the current device information, containing info such as iPhone13,2\x00 to identify the device model.

VersionDispatcher::OffsetsVersionByDeviceInit

@mondain
mondain / public-stun-list.txt
Last active December 23, 2025 07:09
Public STUN server list
23.21.150.121:3478
iphone-stun.strato-iphone.de:3478
numb.viagenie.ca:3478
s1.taraba.net:3478
s2.taraba.net:3478
stun.12connect.com:3478
stun.12voip.com:3478
stun.1und1.de:3478
stun.2talk.co.nz:3478
stun.2talk.com:3478
@lexrus
lexrus / AI_007_prompt.en.txt
Last active December 23, 2025 07:07
AI 通宵干活 prompt
__This is the requirements section, please replace it yourself__
Above are the requirements, below are the decision-making requirements:
- I'm going to sleep now, all product and technical decisions are under your control, I'll come to review the results tomorrow morning
- I'll sleep for about 8 hours, so don't rush to produce results, take your time with all the details, don't save tokens, getting it right is most important
- When you encounter uncertainties, first check the documentation in context7, if still uncertain, search online
- Execute all subtasks in phases, run unit tests after each phase is completed, to avoid having to start over after completing everything only to find it doesn't work
- Don't get hung up on the UI part, try to use mainstream conventional approaches, I'll polish the details tomorrow, you just focus on getting the functionality working
@Hashino
Hashino / arch-guide.md
Last active December 23, 2025 07:06
archlinux: a (more friendly) how-to in troubleshooting for newcomers.

archlinux: a (more friendly) how-to in troubleshooting for newcomers.

This article is an updated version of a reddit post with a similar title written by u/zendeavor.

Have you tried asking for Arch related help and found that the community was "unfriendly" and "unhelpful"? Only telling you to "RTFM: Read the Friendly Manual"? Then this article may be helpful to you.

@aws-scripting-guy
aws-scripting-guy / get_account_id_lambda.py
Created March 6, 2016 23:49
Get AWS account id inside Lambda function programmatically - python
def lambda_handler(event, context):
# Get Account Id from lambda function arn
print "lambda arn: " + context.invoked_function_arn
# Get Account ID from lambda function arn in the context
ACCOUNT_ID = context.invoked_function_arn.split(":")[4]
print "Account ID=" + ACCOUNT_ID
@andytlr
andytlr / spotify-genres.md
Created January 22, 2016 02:26
Spotify Genres

Spotify has heaps of genres but there not surfaced in the UI. Here's 1383 (perhaps all) of them.

Search for genre:"Genre Name"

  1. A Cappella
  2. Abstract
  3. Abstract Beats
  4. Abstract Hip Hop
  5. Abstract Idm
  6. Abstractro
@hackermondev
hackermondev / writeup.md
Last active December 23, 2025 06:56
How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)