Skip to content

Instantly share code, notes, and snippets.

@Static-Flow
Static-Flow / data_table.sql
Last active May 7, 2023 16:37
SQL security idea: Is this a safe implementation that could allow exposing this database publicly and providing access to users provided they were only given data_role permissions?
CREATE TABLE IF NOT EXISTS data
(
pkey bigserial PRIMARY KEY,
value text NOT NULL,
count integer NOT NULL,
first_blood text NOT NULL
);
CREATE UNIQUE INDEX IF NOT EXISTS value_idx ON data USING btree(value);
0-hubs-2-iosdm.v.aaplimg.com
0-hubs-3-iosdm.v.aaplimg.com
0-hubs-iosdm.v.aaplimg.com
1-courier.push.apple.com
1-hubs-2-iosdm.v.aaplimg.com
1-hubs-3-iosdm.v.aaplimg.com
1-hubs-iosdm.v.aaplimg.com
10-courier.push.apple.com
11-courier.push.apple.com
12-courier.push.apple.com
retailedge.intel.com
itcenterconnect.intel.com
sipfed.intel.com
intelav.intel.com
intelewc.intel.com
sip.intel.com
click.intel.com
ipip.intel.com
boss.filegridnetwork.com
@Static-Flow
Static-Flow / main.go
Created September 1, 2023 13:59
simple solution to solve wanting a variable N number of receivers to an io.Writer in Golang
package main
import (
"bufio"
"fmt"
"io"
"log"
"os/exec"
"sync"
"time"
@Static-Flow
Static-Flow / missing-charset.bcheck
Created December 24, 2024 19:12
This Burp Suite BCheck passively alerts if a site does not define a charset via the Content-Type header or a Meta tag.
metadata:
language: v2-beta
name: "no content type check"
description: "Checks is a response has a text/html content type and no charset set"
tags: "passive"
given response then
if {to_lower(latest.response.headers)} matches "content-type: text/html\r\n" then
if not ({latest.response.body} matches "<meta charset=\".+?\">") then