Skip to content

Instantly share code, notes, and snippets.

View jamiedevsandbox's full-sized avatar
πŸ’­
C and Linux is life

Jamie Sparks jamiedevsandbox

πŸ’­
C and Linux is life
View GitHub Profile
@jamiedevsandbox
jamiedevsandbox / tplink-json-stack-overflow
Created January 19, 2023 18:41
TPLink TDPServer JSON Stack Overflow
@jamiedevsandbox
jamiedevsandbox / rpi-sec-alrm
Created January 1, 2023 14:07
Raspberry PI interface with home alarm system
https://blog.cavelab.dev/2022/12/rpi-security-alarm/
@jamiedevsandbox
jamiedevsandbox / cve-2021-22555
Created December 8, 2022 15:12
CVE-2021-22555: Turning \x00\x00 into 10000$
https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html#achieving-a-better-use-after-free
@jamiedevsandbox
jamiedevsandbox / crypto-papers
Created March 1, 2022 22:20
cr.yp.to Copious amounts of cryptography papers and subdomains
https://cr.yp.to/papers.html
https://cr.yp.to/crypto.html
https://cr.yp.to/ecdh/curve25519-20060209.pdf
@jamiedevsandbox
jamiedevsandbox / malwaremustdie-mirai-ddos-botnet
Created October 15, 2021 02:56
MalwareMustDie whitehat security research group Mirai FBot DDoS botnet
https://en.wikipedia.org/wiki/MalwareMustDie
@jamiedevsandbox
jamiedevsandbox / cloudflare-ddos-largest
Created October 15, 2021 02:53
Cloudflare thwarts 17.2M rps DDoS attack
https://blog.cloudflare.com/cloudflare-thwarts-17-2m-rps-ddos-attack-the-largest-ever-reported/
@jamiedevsandbox
jamiedevsandbox / facebook-bgp-dns-outage
Created October 15, 2021 02:52
Facebook BGP DNS Outage
https://blog.cloudflare.com/october-2021-facebook-outage/
@jamiedevsandbox
jamiedevsandbox / fail2ban-remote-code-exec
Created October 15, 2021 02:51
Fail2ban remote code execution
https://research.securitum.com/fail2ban-remote-code-execution/
@ignis-sec
ignis-sec / lol.html
Created September 23, 2021 22:03
alert() without letters or numbers
<script>
/*
γ€±='',γ€³=γ€±,α˜“=γ€±+{},α˜’=γ€±+[][[]],γ€±+=[γ€±==γ€±],γ€³+=[!γ€±],α˜‘=+[],ᘐ=+!+[],α˜”=ᘐ+ᘐ,α˜•=α˜”+ᘐ,α˜–=α˜”+α˜•,α˜–+=α˜–+α˜–+α˜”,α˜—=α˜–+ᘐ,ᘘ=α˜“[α˜”+α˜•],α˜™=α˜“[ᘐ],ᘚ=γ€±[ᘐ],ᘲ=γ€±[α˜‘],ᘳ=ᘘ+α˜™+α˜’[ᘐ]+γ€³[α˜•]+ᘲ+ᘚ+α˜’[α˜‘]+ᘘ+ᘲ+α˜™+γ€±[ᘐ],ᘰ=[][ᘳ][ᘳ],ᘏ=''+ᘰ,ᘎ=γ€³[ᘐ]+γ€³[α˜”]+γ€±[α˜•]+ᘚ+ᘲ+ᘏ[α˜–]+ᘏ[α˜—],ᘰ`ᘳ${ᘎ}```
*/
γ€±=''
γ€³=γ€± //''
α˜“=γ€±+{} //'[object Object]' <- '' + [object Object]
α˜’=γ€±+[][[]] //'undefined' <- '' + undefined
@ignis-sec
ignis-sec / uaf_to_prevsize.c
Last active January 30, 2023 01:27
If this is turns out to be a new method, i nominate "House of Flames"
int main(){
unsigned long* a = malloc(0x508);
unsigned long* b = malloc(0x508);
memset(a,'A',0x508);
memset(b,'B',0x508);
printf("################ A: %lx\n",a);
printf("################ B: %lx\n",b);
printf("################ A->size: %llx\n",*(a-1));