Skip to content

Instantly share code, notes, and snippets.

View moscowchill's full-sized avatar

moscowchill

  • The Netherlands
View GitHub Profile
@moscowchill
moscowchill / cloudinit.txt
Created September 12, 2025 20:50
cloud init
#cloud-config
# Update package cache
package_update: true
package_upgrade: true
# Install base packages
packages:
- curl
- wget
@moscowchill
moscowchill / connpolicy_swallowed_err_test.go
Created February 9, 2026 07:39
PoC test: mTLS fail-open due to swallowed errors in Caddy connpolicy.go
package caddytls
import (
"crypto/ecdsa"
"crypto/elliptic"
"crypto/rand"
"crypto/tls"
"crypto/x509"
"crypto/x509/pkix"
"encoding/pem"
@moscowchill
moscowchill / host_case_bypass_test.go
Created February 9, 2026 08:05
PoC: Caddy MatchHost case-sensitive binary search bypass (>100 hosts)
package caddyhttp
import (
"context"
"fmt"
"net/http"
"testing"
"github.com/caddyserver/caddy/v2"
)
@moscowchill
moscowchill / vote_security_test.go
Created February 9, 2026 10:03
PoC: BSC double-sign evidence self-comparison bug (core/types/vote.go:110)
package types
import (
"bytes"
"testing"
"github.com/ethereum/go-ethereum/common"
)
// TestSelfComparisonBug_DifferentAddressesAccepted proves that