KazWolfe

#!/system/bin/bash

# Shell vulnerability for Crestron TSW-xx70 devices. Requires existing admin permissions!
# This vulnerability was reported to Crestron and assigned CVE-2025-47421.
# It was disclosed in May 2025, and is being publically released here, in March 2026.
#
# Steps to Reproduce:
# 1. Upload this file to /logs over SCP. Ensure that the execute bit is set.
# 2. Run the following command locally:
#

KazWolfe

/**
* LocalStorage polyfill backed by IndexedDB with sessionStorage as the only cache
*
* This polyfill provides a localStorage-compatible API that stores data in IndexedDB.
* It uses sessionStorage as the only cache for synchronous operations.
* All changes are synchronized back to IndexedDB for persistence.
*/
export class IndexedDBLocalStorage {
    /**
     * Create a new IndexedDBLocalStorage using either a database name or an existing database

KazWolfe

#include <iostream>
#include <Windows.h>

int main() {
    SYSTEM_POWER_STATUS sps;

    if (!GetSystemPowerStatus(&sps)) return 1;

    std::cout << "== BATTERY STATUS ==" << std::endl;
    std::cout << "Battery Present    : " << (sps.BatteryFlag < 100) << std::endl;

KazWolfe

This Gist confirms the Linked Identity in my OpenPGP key, and links it to this GitHub account.

Token for proof:
[Verifying my OpenPGP key: openpgp4fpr:14c529ad4bace342f2e1aa5d258813f53a16ebb4]

KazWolfe

#!/bin/bash

# This script exists to solve a problem with GPG2's current smartcard system. Turns out there can only be
# one smart card (yubikey) attached to any public key at a time. This makes using your backup/spare keys
# very difficult. However, we can just automate the entire key registration procedure!
#
# Author: Kaz Wolfe (https://kazwolfe.io), 2017-10-23
# License: MIT

# INSTALL INSTRUCTIONS

KazWolfe

#!/usr/bin/env python

# Echoes the URL back, replacing / with spaces.
# Based off Nathan Hamiel's Reflect script (https://gist.github.com/huyng/814831)
# By Kaz Wolfe, 2017. No rights reserved.

from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler
from optparse import OptionParser

class RequestHandler(BaseHTTPRequestHandler):

KazWolfe

/* 
 * Recursively list directories/files through Java, akin to Linux's `ls -R` command.
 * (c) 2017, KazWolfe. Under MIT license.
 *
 * To use, save to `Recurse.java` and compile with `javac Recurse.java`.
 * Run with `java -cp . Recurse /path/to/operate/on`. Be sure you are passing in a folder.
 */

import java.io.File;
import java.lang.String;

KazWolfe

###########
# Pokemon GO Data Dump (in no order)
# By Kaz Wolfe (@KazWolfe on gaming.stackexhange.com)
# Dump version 3.3, pulled from 0.29.0
#
# Feel free to use this dump in anything, but please link back to it!
# This ensures that people can see and use the source of the data 
# (which updates regularly), and find out new things.
#
# Thanks Anonymous for some data: https://gist.github.com/anonymous/077d6dea82d58b8febde54ae9729b1bf

KazWolfe

// Inspired by the joke: 
// "A programmer was walking out the door for work when 
// his wife said, 'While you're out, buy some milk.' 
// The programmer never came home.

programmer.getToDoList().getLocationList().addItem(Location.ANYWHERE, () -> {programmer.moveTo(Location.SUPERMARKET);});
programmer.getToDoList().getLocationList().addItem(Location.SUPERMARKET, (neededAmount) -> {
    
    // Get the price and inventory from the Economy.
    double price = Economy.getStore(Store.SUPERMARKET).getInventory().getItemClass(ItemClass.MILK).getPrice();

KazWolfe

// Compile using `gcc noaccess.c -o noaccess`
//
// Move to /usr/bin, and set as a shell for any deserving users

#include<stdio.h>

int main() {
    printf("Shell access is denied. \nConnect using -N, or keep this window open to use your tunnel.\n");

    while(1==1);