Skip to content

Instantly share code, notes, and snippets.

View RajChowdhury240's full-sized avatar
πŸ’»
just another learner

Raj Chowdhury RajChowdhury240

πŸ’»
just another learner
  • Confidential
  • $ aws sts get-caller-identity
  • 17:09 (UTC +10:00)
View GitHub Profile
@RajChowdhury240
RajChowdhury240 / d.txt
Last active August 10, 2026 11:48
test.txt
https://rishabkumar.com/notes/terraform-associate/
https://www.cloudcertprep.io/aws/clf-c02/
https://www.cloudcertprep.io/aws/aif-c01
https://trustoncloud.com/blog/exploit-two-of-the-most-common-vulnerabilities-in-amazon-cognito-with-cloudgoat/
  1. AppleScript command injection in web open-in endpoint β€” Medium/High

File: src/kimi_cli/web/api/open_in.py:76-96 (_open_terminal, _open_iterm) Type: OS/AppleScript command injection (CWE-78 / CWE-94)

  def _open_terminal(path: Path) -> None:
      script = f'tell application "Terminal" to do script "cd " & quoted form of "{path}"'
      _run_command(["osascript", "-e", script])
https://mybucketlist-latam.netlify.app/