Skip to content

Instantly share code, notes, and snippets.

View iam-py-test's full-sized avatar

iam-py-test

  • Anywhere with a Mars rover (i.e. Mars)
View GitHub Profile
@iam-py-test
iam-py-test / check.py
Last active November 19, 2022 22:08
Check for redirects with different referers
import os,sys
import requests
import hashlib
url = input("URL: ")
refs = open("refs.txt",encoding="UTF-8").read().split("\n") # safe to refs.txt
for ref in refs:
try:
r = requests.get(url,headers={"Referer":ref})
print("Referer {}: {} --> {} ({})".format(ref,url,r.url,hashlib.md5(r.content).hexdigest()))
@iam-py-test
iam-py-test / trustedsites.md
Created July 12, 2023 16:12
Worrying list of allowlisted sites in ADAWARE AD BLOCK (see https://infosec.exchange/@iampytest1/110701977366775746)
about-scheme
chrome-extension-scheme
chrome-scheme
edge-scheme
moz-extension-scheme
opera-scheme
vivaldi-scheme
wyciwyg-scheme
account.live.com
@iam-py-test
iam-py-test / ab.js
Last active November 5, 2023 16:54
newzjunky antiblocker
if ((Math.round(+new Date() / 1000)) < 1699627054) {
if (window.location.hostname === 'www.newzjunky.com') {
const antiblocker_elm = document.getElementById("WkpBMVBVUzNRaXVTzZYQUlDeWdODBOdBjVkswNDJZdXJBOTcUUpaYzyppdh");
const dGlqZDRQOaFpuTkorREFbEpKaHhGLxhUgrNnVNSmlNncwYTlYbWvRCeTBxctOQnpSMvZHVycgyppdhyppdh = "3.9.2"; // never used???
const chp_adblock_analytics_url = "https://www.newzjunky.com/wp-admin/admin-ajax.php";
let false_var_3 = false;
let QmMQUtzVENjREwwbXMdFoZGwUEXWWlvYEwadENHZpcmvTURsbdckRBVhhZmYkRlOWlSQUrVwyppdhyppdh = true;
let counter_var_1 = 0;
const iframe_chpadb_url = "https://www.newzjunky.com/chpadb/pro/instruction/modal/";
const homepage_url = "https://www.newzjunky.com";
"use strict";
var _slicedToArray = function() {
function sliceIterator(arr, i) {
var _arr = [];
var _n = true;
var _d = false;
var _e = undefined;
try {
for (var _i = arr[Symbol.iterator](), _s; !(_n = (_s = _i.next()).done); _n = true) {
_arr.push(_s.value);
@iam-py-test
iam-py-test / README.md
Created August 23, 2024 22:24
Malicious tampermonkey script

On 2024-8-32, the PasteBin user xata0 created a paste titled ❤️ MAKE $500 IN 15 MINUTES ❤ (https://pastebin.com/D2mmK6PL) with the following contents:

Guide:
 
https://drive.google.com/file/d/1Mzn6o3n5xIhN6nueBAl3YTzyb27ZgMrD/view?zI47OokP0m
 
Hadez gift cards method
 
You can use it to get any gift card completely for free
test
@iam-py-test
iam-py-test / 4dbee55e59fc95ea4356dbb197f2132c.js
Created February 22, 2026 02:12
JavaScript file from hxxpx[://]kettledroopingcontinuation[.]com/4d/be/e5/4dbee55e59fc95ea4356dbb197f2132c.js - suspected to be malicious
(function() {function b4wijp(Y,W){Y=Y-0x7a;var P=b4wijP();var p=P[Y];return p;}function b4wijP(){var Y8=['26RQaeSm','setItem','SameSite=Lax','Cannot\x20call\x20a\x20class\x20as\x20a\x20function','onpageshow','length','9KkIzyV','4047752ucuWaU','expires=','defineProperty','writable','toUTCString','string','replace','constructor','&uuid=','1074577HOhNoc','prototype','filter','path=/','20QWyVUd','parse','localStorage','getTime','resetItem','dom3ic8zudi28v8lr6fgphwffqoz0j6c','join','call','30ivygQs','location','title','getItem','search','36UmjdsP','redirectUrl','persisted','addEventListener','split','object','value','removeEventListener','popstate','now','toPrimitive','40ZrVcIA','3286673RiZFJQ','slice','backButtonData','symbol','storageSupport','expires','2408483dVfkaP','s9ifs0idfjlwfie32dekl','pushState','key','29913NrFzjj','@@toPrimitive\x20must\x20return\x20a\x20primitive\x20value.','toString','(((.+)+)+)+$','isLocalStorage','top','removeItem','48450ooUxID','host','632004cCrtPH','href','configurable','enumerabl
@iam-py-test
iam-py-test / input.cpp
Created March 1, 2026 05:35 — forked from nommiin/input.cpp
A basic shim for adding keyboard support to Minecraft Console Edition
#include "stdafx.h"
#include <Windows64\4JLibs\inc\4J_Input.h>
#include <Common\App_enums.h>
#include <Windows.h>
C_4JInput InputManager;
void C_4JInput::Initialise(int iInputStateC, unsigned char ucMapC, unsigned char ucActionC, unsigned char ucMenuActionC)