Skip to content

Instantly share code, notes, and snippets.

View ChALkeR's full-sized avatar
🙃

Nikita Skovoroda ChALkeR

🙃
View GitHub Profile
@ChALkeR
ChALkeR / grep.2015-09-21.require.module.module.txt
Created January 13, 2016 21:20
./search.code.sh "require\(['"'"'"]module['"'"'"]\)\.Module"
caboose-0.1.65.tgz/index.coffee:25: require('module').Module._cache = {}
caboose-0.1.65.tgz/index.coffee:26: require('module').Module._initPaths()
stacker-0.1.0.tgz/lib/runner.coffee:8:require('module').Module._initPaths() # Hack
accessors.io-2.0.1.tgz/accessors.js:51:require('module').Module._initPaths();
acs-1.0.27.tgz/lib/nettle.js:19:var Module = require('module').Module;
acsjin-1.1.6.tgz/lib/nettle.js:21:var Module = require('module').Module;
app-module-path-1.0.4.tgz/lib/index.js:1:var Module = require('module').Module;
blitzLib-0.1.0.tgz/Lib/coffee-script-debug.js:14364: process.binding("natives").module && (c = require("module").Module, d.paths = c._nodeModulePaths(path.dirname(b.filename)));
bpmn-0.2.2.tgz/lib/handler.js:80: var Module = require('module').Module;
choir-0.0.8.tgz/lib/magic/run_magic.js:4:var Module = require('module').Module;
@ChALkeR
ChALkeR / buffer.mongoose.v1.js
Created January 15, 2016 14:00
Mongoose+Buffer unitialized Buffer sensitive information leak, v1
var mongoose = require('mongoose');
mongoose.connect('mongodb://localhost/bufftest');
// data: Buffer is not uncommon, taken straight from the docs: http://mongoosejs.com/docs/schematypes.html
mongoose.model('Item', new mongoose.Schema({id: String, data: Buffer}));
var Item = mongoose.model('Item');
var sample = new Item();
sample.id = 'item1';
sample.data = 1000;
sample.save(function () {
Item.findOne(function (err, result) {
@ChALkeR
ChALkeR / buffer.mongoose.v2.js
Last active January 15, 2016 20:16
Mongoose+Buffer unitialized Buffer sensitive information leak, v2
// This is a comment
var mongoose = require('mongoose');
mongoose.connect('mongodb://localhost/bufftest');
// data: Buffer is not uncommon, taken straight from the docs: http://mongoosejs.com/docs/schematypes.html
mongoose.model('Item', new mongoose.Schema({id: String, data: Buffer}));
var Item = mongoose.model('Item');
var toAdd = 20000;
var secretToken = 'ThisIsMyPassword';
// This is a comment
@ChALkeR
ChALkeR / list.modules.binding.gyp.txt
Last active January 28, 2016 11:11
lzgrep binding.gyp data-2016-01-28/files.txt.lzo | grep -v '/node_modules' | sed s/'\.tgz\/.*//' | uniq
3drotate-0.0.3
51degrees-1.8.1
abp-filter-parser-cpp-1.1.5
abstract-socket-1.1.0
ac-nodehelper-1.0.1
ac_search-0.0.2
activetick-1.1.4
activetick-addon-0.0.16
activex-0.0.2
addon-emitter-0.0.2
@ChALkeR
ChALkeR / stats.2016-01-29.top150.txt
Created January 29, 2016 09:56
npm packages downloads/month, top 150, 2016-01-29
24282565, "glob"
23942478, "async"
23024682, "minimatch"
21176143, "readable-stream"
21173316, "minimist"
19916652, "inherits"
19713150, "lodash"
19616243, "source-map"
17833149, "qs"
16446960, "graceful-fs"
@ChALkeR
ChALkeR / grep.2016-01-28.process.EventEmitter.sort.txt
Last active February 4, 2016 07:06
Grep for 'process\.EvenEmitter' over 2016-01-28 npm modules, sorted by downloads count per month.
504263 array-difference-0.0.1.tgz/mike.js:53:var EventEmitter = exports.EventEmitter = process.EventEmitter;
504263 array-difference-0.0.1.tgz/mike.js:51:(function(process){if (!process.EventEmitter) process.EventEmitter = function () {};
477317 policyfile-0.0.5.tgz/tests/unit.test.js:118: Object.keys(process.EventEmitter.prototype).forEach(function proxy(key){
477317 policyfile-0.0.5.tgz/lib/server.js:253:Object.keys(process.EventEmitter.prototype).forEach(function proxy (key){
145224 jackpot-0.0.6.tgz/test/jackpot.test.js:20: expect(new ConnectionPool).to.be.instanceof(process.EventEmitter);
133798 node-forge-0.6.38.tgz/tests/ws.js:86: var emitter = new process.EventEmitter(),
30580 nedb-1.7.2.tgz/browser-version/out/nedb.js:5:var EventEmitter = exports.EventEmitter = process.EventEmitter;
30580 nedb-1.7.2.tgz/browser-version/out/nedb.js:3:var process=require("__browserify_process");if (!process.EventEmitter) process.EventEmitter = function () {};
27460 outcome-0.0.18.tgz/outcome.js:396:var EventEm
@ChALkeR
ChALkeR / grep.2016-01-28.GLOBAL_.sort.txt
Created February 4, 2016 18:04
Grep for «GLOBAL[\.\[]» in 2016-01-28 dataset of npm modules, sorted by downloads per month
1002629 mout-0.11.1.tgz/src/lang/isFinite.js:9: is = GLOBAL.isFinite( parseFloat(val) );
1002629 mout-0.11.1.tgz/src/lang/isFinite.js:12: is = GLOBAL.isFinite( val );
1002629 mout-0.11.1.tgz/lang/isFinite.js:13: is = GLOBAL.isFinite( val );
1002629 mout-0.11.1.tgz/lang/isFinite.js:10: is = GLOBAL.isFinite( parseFloat(val) );
886083 whet.extend-0.9.9.tgz/test/test_helper.coffee:6:GLOBAL.expect = chai.expect # to work with 'undefined' - should cant it
886083 whet.extend-0.9.9.tgz/test/test_helper.coffee:5:GLOBAL.should = chai.should()
886083 whet.extend-0.9.9.tgz/test/test_helper.coffee:11:GLOBAL.lib_path = '../lib/'
218526 sumeru-0.10.4.tgz/sumeru/src/newPkg.js:266: GLOBAL[rootName] = global[rootName]; // 在node端仍然绑定到全局空间一个名为sumeru的对像
218526 sumeru-0.10.4.tgz/sumeru/server/run.js:35:GLOBAL.SUMERU_DEFAULT_CONTROLLER;
218526 sumeru-0.10.4.tgz/sumeru/server/run.js:34:GLOBAL.App = {},GLOBAL.Model = {};
@ChALkeR
ChALkeR / dependatants.graceful-fs.old.sort.txt
Last active March 31, 2016 19:20
Direct dependants of old graceful-fs, as of 2016-01-28
1262254 less-2.5.3.tgz/package.json: "graceful-fs": "^3.0.5",
590817 decompress-zip-0.2.0.tgz/package.json: "graceful-fs": "^3.0.0",
500135 traverse-directory-0.3.0.tgz/package.json: "graceful-fs": "~2.0.0",
412785 bower-json-0.6.0.tgz/package.json: "graceful-fs": "^3.0.0",
297528 fobject-0.0.3.tgz/package.json: "graceful-fs": "^3.0.2",
146152 sander-0.4.0.tgz/package.json: "graceful-fs": "^3.0.4"
57832 jspm-npm-0.27.3.tgz/package.json: "graceful-fs": "^3.0.8",
56506 gulp-cssmin-0.1.7.tgz/package.json: "graceful-fs": "~2.0.0",
48285 jspm-github-0.14.2.tgz/package.json: "graceful-fs": "^3.0.6",
47920 graceful-chokidar-0.1.0.tgz/package.json: "graceful-fs": "~3.0.2"
@ChALkeR
ChALkeR / grep.2016-01-28.rejectUnauthorized.sorted.txt
Created February 19, 2016 07:16
Grep for rejectUnauthorized in current versions of npm modules (2016-01-28)
11440560 request-2.69.0.tgz/request.js:661: poolKey += options.rejectUnauthorized
11440560 request-2.69.0.tgz/request.js:657: if (typeof options.rejectUnauthorized !== 'undefined') {
11440560 request-2.69.0.tgz/request.js:619: options.rejectUnauthorized = self.rejectUnauthorized
11440560 request-2.69.0.tgz/request.js:618: if (typeof self.rejectUnauthorized !== 'undefined') {
11440560 request-2.69.0.tgz/request.js:269: self.rejectUnauthorized = false
11440560 request-2.69.0.tgz/lib/tunnel.js:84: rejectUnauthorized : request.rejectUnauthorized,
3442171 ws-1.0.1.tgz/lib/WebSocket.js:655: if (options.isDefinedAndNonNull('rejectUnauthorized')) requestOptions.rejectUnauthorized = options.value.rejectUnauthorized;
3442171 ws-1.0.1.tgz/lib/WebSocket.js:647: || options.isDefinedAndNonNull('rejectUnauthorized')) {
3442171 ws-1.0.1.tgz/lib/WebSocket.js:562: rejectUnauthorized: null,
2419380 socket.io-client-1.4.5.tgz/socket.io.js:790: this.rejectUnauthorized = opts.rejectUnauthorized;
@ChALkeR
ChALkeR / grep.2016-01-28.NODE_TLS_REJECT_UNAUTHORIZED.sorted.txt
Created February 19, 2016 07:17
Grep for NODE_TLS_REJECT_UNAUTHORIZED in current versions of npm modules (2016-01-28) Raw
440968 ember-cli-1.13.15.tgz/tests/unit/tasks/server/express-server-test.js:175: process.env.NODE_TLS_REJECT_UNAUTHORIZED = '1';
440968 ember-cli-1.13.15.tgz/tests/unit/tasks/server/express-server-test.js:172: process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
238334 nodemailer-direct-transport-2.0.1.tgz/test/direct-transport-test.js:6:process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
114952 gulp-connect-2.3.1.tgz/test/test.js:69: process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0"
69321 simple-get-1.4.3.tgz/test/basic.js:10:process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0'
68366 nodejs-etcd-0.1.1.tgz/examples/basics.js:1:process.env['NODE_TLS_REJECT_UNAUTHORIZED'] = '0';
30323 traceview-2.4.2.tgz/test/probes/https.test.js:34: process.env.NODE_TLS_REJECT_UNAUTHORIZED = originalFlag
30323 traceview-2.4.2.tgz/test/probes/https.test.js:27: process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0"
30323 traceview-2.4.2.tgz/test/probes/https.test.js:26: originalFlag = process.env.NODE_TLS_REJECT_UNAU