Riccardo Mazza r1cc4rd0m4zz4

agent-proxy — see the bloat in Claude Code's requests

A zero-dependency logging proxy that sits between Claude Code and the Anthropic API. It forwards every request untouched, streams the reply straight back (so the CLI is unaffected), and writes a readable Markdown document for each request — led by a ranked table of what is eating your context.

Run it

Slop

This collection is limited to only include the reports that were submitted as security vulnerabilities to the curl bug-bounty program on Hackerone.

Several other issues not included here are highly suspcious as well.

Reports

[Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet. #2199174

Test Time Scaling with MLX LM and R1-based LLMs

Install MLX LM:

pip install mlx-lm

And run:

Setup

On every machine in the cluster install openmpi and mlx-lm:

conda install conda-forge::openmpi
pip install -U mlx-lm

Next download the pipeline parallel run script. Download it to the same path on every machine:

PHP RESTRICT UPLOAD FILE TYPE

https://code-boxx.com/restrict-upload-file-type-php/

LICENSE

Copyright by Code Boxx

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

Awesome Penetration Testing

A collection of awesome penetration testing resources.

Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and vulnerabilities.

Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Please check the Contributing Guidelines for more details. This work is licensed under a Creative Commons Attribution 4.0 International License.

This project is supported by Netsparker Web Application Security Scanner

	# A one liner to leverage the GPU on a mac to transcribe audio files
	# Inspired by https://simonwillison.net/2024/Aug/13/mlx-whisper/
	llm_transcribe_recording () {
	local file_path="$1"
	python3 -c "
	import mlx_whisper
	result = mlx_whisper.transcribe('$file_path', path_or_hf_repo='mlx-community/distil-whisper-large-v3')
	print(result['text'])
	"
	}

	# /opt/homebrew/etc/Caddyfile

	http://localhost:8080 {
	# Define a matcher for authorized API access
	@apiAuth {
	header Authorization "Bearer {env.OLLAMA_API_KEY}"
	}

	# Proxy authorized requests
	reverse_proxy @apiAuth http://localhost:11434 {

	"""
	Convert SARIF to Generic SonarQube issues import format and export variables for Sonar Scanner CLI.

	Links:

	* https://community.sonarsource.com/t/import-sarif-results-as-security-hotspots/83223
	* docs.sonarqube.org/9.8/analyzing-source-code/importing-external-issues/generic-issue-import-format
	* https://gist.github.com/davidfischer-ch/cdfede27ac053a8332b2127becc07608

	Author: David Fischer <david@fisch3r.net>

	import poe, sys

	client = poe.Client("<POE_API_KEY_HERE>")
	title=sys.argv[1]
	path=sys.argv[2]
	more=""
	if len(sys.argv) > 3:
	more="\" and here is more information: "+sys.argv[3]

	message="""generate a bug bounty report for me (hackerone.com), the title of the bug is """+title+""" and the vulnerability path is \""""+path+more+"""