Skip to content

Instantly share code, notes, and snippets.

View limkokhole's full-sized avatar
🌴
On vacation

林果皞 limkokhole

🌴
On vacation
View GitHub Profile
@wberdowski
wberdowski / Popcat no-click bot POC.js
Last active September 28, 2024 02:59 — forked from DaWe35/Popcat click bot.js
Ban-proof popcat bot
/*
1) Open https://popcat.click
2) Open console (F12 or CTRL+SHIFT+I)
3) Insert code & run
4) Monitor bot progress in the console
Note: popcat.click server registers only 800 pops every 30 seconds per IP address (that's why this bot is slow and runnig it in multiple tabs won't work).
If you'll send 800 or more clicks 10 times in a row, you'll get banned for 12 hours ("ban" cookie is set).
This bot addresses this issue and will NOT get you banned.
@kasuganosoras
kasuganosoras / fuckbaidu.js
Created June 22, 2020 14:56
去掉百度的反爬虫内容
// ==UserScript==
// @name Fuck Baidu Zhidao
// @namespace http://www.baidu.com/
// @version 0.1
// @description try to fuck over the baidu!
// @author Baidu
// @match https://zhidao.baidu.com/question/*.html
// @grant none
// ==/UserScript==
@hermanschaaf
hermanschaaf / adjust_video_speed.md
Last active June 26, 2024 14:25
Adjust Speed of a Video with ffmpeg

To increase speed of a video by a factor of 1.5x:

ffmpeg -i input.mp4 -filter_complex "[0:v]setpts=PTS/1.5[v];[0:a]atempo=1.5[a]" -map "[v]" -map "[a]" output.mp4

We can use this to adjust the speed of all the videos in a directory (Linux and macOS only):

mkdir -p output

Multiple vulnerabilities in jQuery Mobile

Summary

All current versions of jQuery Mobile (JQM) as of 2019-05-04 are vulnerable to DOM-based Cross-Site Scripting (XSS) via crafted URLs. In JQM versions up to and including 1.2.1, the only requirement is that the library is included in a web application. In versions > 1.2.1, the web application must also contain a server-side API that reflects back user input as part of an HTTP response of any type. Practically all non-trivial web applications contain at least one such API.

Additionally, all current versions of JQM contain a broken implementation of a URL parser, which can lead to security issues in affected applications.

@acaly
acaly / reciprocal_fib.py
Last active December 9, 2023 18:24
A fast (but hard-to-read) implementation of Reciprocal fibonacci constant calculator in python. This was a UofT CSC373 assignment.
import array
import sys
import cProfile
# input
OutputCount = int(sys.argv[1])
# object init
@tmonjalo
tmonjalo / list-fftabs.py
Created September 13, 2018 10:42
List all Firefox tabs with title and URL
#! /usr/bin/env python3
"""
List all Firefox tabs with title and URL
Supported input: json or jsonlz4 recovery files
Default output: title (URL)
Output format can be specified as argument
"""
@kaefer3000
kaefer3000 / mozlz4a.py
Created August 23, 2018 18:00 — forked from Tblue/mozlz4a.py
MozLz4a compression/decompression utility
#!/usr/bin/env python
#
# Decompressor/compressor for files in Mozilla's "mozLz4" format. Firefox uses this file format to
# compress e. g. bookmark backups (*.jsonlz4).
#
# This file format is in fact just plain LZ4 data with a custom header (magic number [8 bytes] and
# uncompressed file size [4 bytes, little endian]).
#
# This Python 3 script requires the LZ4 bindings for Python, see: https://pypi.python.org/pypi/lz4
#
@khallaghi
khallaghi / android-x86-marshmallow-custom-sdk.md
Last active March 18, 2024 09:50
Make a custom API and SDK under Android-x86-marshmallow

Building custom SDK

Logs of building custom SDK

first: modifying proper files to add new API

I want to modify the setWifiEnabled function in WifiManager class in framework. actually I want to add new function with same name but with different input variables to get password string too. default signature of function is:

public boolean setWifiEnabled(boolean enabled);
@riyaz
riyaz / installFromAAB.sh
Last active January 14, 2023 19:36 — forked from keyboardsurfer/installFromBundle
Install the app in device from aab
#!/bin/sh
# One step wrapper to install aab to connected device, it downloads bundletool if its missing and signs the app with android debug certifiate.
#
# Usage: installFromAAB install-aab <local-aab-path>
BASENAME="${1##*/}"
KEYSTORE=~/.android/debug.keystore
KS_ALIAS="androiddebugkey"
PASS="pass:android"
@keyboardsurfer
keyboardsurfer / installFromBundle
Last active August 8, 2020 15:33
Build & extract a set of apk from an aab for a specific device and install the results on it.
#!/bin/sh
# Build & extract a set of apk from an aab for a specific device and install the results on it.
#
# This needs https://github.com/google/bundletool to be available as `bundletool`.
# Also **exactly** one device needs to be connected to adb.
# Usage: installFromBundle bundle.aab
# optional `--extract-apks` to keep the set on your workstation as well.
basename=${1%%.*}
keystore="~/.android/debug.keystore"