Hrishikesh Barman geekodour

`vs` Questions

http://stackoverflow.com/questions/804115 (rebase vs merge).
https://www.atlassian.com/git/tutorials/merging-vs-rebasing (rebase vs merge)
https://www.atlassian.com/git/tutorials/undoing-changes/ (reset vs checkout vs revert)
http://stackoverflow.com/questions/2221658 (HEAD^ vs HEAD~) (See git rev-parse)
http://stackoverflow.com/questions/292357 (pull vs fetch)
http://stackoverflow.com/questions/39651 (stash vs branch)
http://stackoverflow.com/questions/8358035 (reset vs checkout vs revert)

Let's start meta:

Lamport - State the Problem Before Describing the Solution (1978). … 1-page memo. Read it.
Herlihy - Wait-free synchronization (1991) … Truly seminal. Lucid + enough good ideas for 4 papers easily.
Cook - How complex systems fail (1998) … 4 pages that anyone working on/with complex systems should read.

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

Hyperlinks (a.k.a. HTML-like anchors) in terminal emulators

[ Update 2025-03-24: Commenting is disabled permanently. Previous comments are archived at web.archive.org. ]

Most of the terminal emulators auto-detect when a URL appears onscreen and allow to conveniently open them (e.g. via Ctrl+click or Cmd+click, or the right click menu).

It was, however, not possible until now for arbitrary text to point to URLs, just as on webpages.

Vim without NERD tree or CtrlP

I used to use NERD tree for quite a while, then switched to CtrlP for something a little more lightweight. My setup now includes zero file browser or tree view, and instead uses native Vim fuzzy search and auto-directory switching.

Fuzzy Search

There is a super sweet feature in Vim whereby you can fuzzy find your files using **/*, e.g.:

:vs **/*<partial file name><Tab>

	#!/usr/bin/env python
	# Usage
	# spf-info.py [domain]

	import dns.resolver
	import socket
	from ipwhois import IPWhois
	from pprint import pprint
	import json

	;; Screenshot at https://twitter.com/swaroopch/status/903442255796633600
	;; Inspired by https://www.reddit.com/r/ethtrader/comments/6wxizf/single_best_feature_of_the_new_macbook/
	;; Code written for Spacemacs, will need adaptation to your Emacs setup
	;; Spacemacs users: You may need to enable `spacemacs-misc` layer to ensure `request` package is installed.

	(defun dotspacemacs/user-config ()
	"Configuration function for user code.
	This function is called at the very end of Spacemacs initialization after
	layers configuration.
	This is the place where most of your configurations should be done. Unless it is

	#!/bin/sh
	# PNG Gamma trick (by @marcan42 / [email protected])
	#
	# This script implements an improved version of the gamma trick used to make
	# thumbnail images on reddit/4chan look different from the full-size image.
	#
	# Sample output (SFW; images by @Miluda):
	# https://mrcn.st/t/homura_gamma_trick.png
	# https://www.reddit.com/r/test/comments/6edthw/ (click for fullsize)
	# https://twitter.com/marcan42/status/869855956842143744

	#include <iostream>
	#include <cstdint>
	#include <fstream>
	#include <streambuf>
	#include <cstring>
	#include <cstdlib>
	#include <stack>

	int main(int argc, char *argv[]) {
	std::string program;