Riccardo Mazza r1cc4rd0m4zz4

Enable X11 forward to load images from remote server on MacOS Mojave

Steps

Install Xquartz to get X11 support on MacOS. You can google Xquartz and download it from its official site, or install using HomeBrew.
```
brew cask install xquartz
```
Launch Xquartz. Go to Preference -> Security, click the box Allow connections from clients. NOTE: You have to lauch Xquartz with Allow connections from clients enable everytime you want to ssh to remote server with X11 forwarding support.

Awesome Penetration Testing

A collection of awesome penetration testing resources.

Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and vulnerabilities.

Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Please check the Contributing Guidelines for more details. This work is licensed under a Creative Commons Attribution 4.0 International License.

This project is supported by Netsparker Web Application Security Scanner

PHP RESTRICT UPLOAD FILE TYPE

https://code-boxx.com/restrict-upload-file-type-php/

LICENSE

Copyright by Code Boxx

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

Setup

On every machine in the cluster install openmpi and mlx-lm:

conda install conda-forge::openmpi
pip install -U mlx-lm

Next download the pipeline parallel run script. Download it to the same path on every machine:

Test Time Scaling with MLX LM and R1-based LLMs

Install MLX LM:

pip install mlx-lm

And run:

Slop

This collection is limited to only include the reports that were submitted as security vulnerabilities to the curl bug-bounty program on Hackerone.

Several other issues not included here are highly suspcious as well.

Reports

[Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet. #2199174

	import poe, sys

	client = poe.Client("<POE_API_KEY_HERE>")
	title=sys.argv[1]
	path=sys.argv[2]
	more=""
	if len(sys.argv) > 3:
	more="\" and here is more information: "+sys.argv[3]

	message="""generate a bug bounty report for me (hackerone.com), the title of the bug is """+title+""" and the vulnerability path is \""""+path+more+"""

	"""
	Convert SARIF to Generic SonarQube issues import format and export variables for Sonar Scanner CLI.

	Links:

	* https://community.sonarsource.com/t/import-sarif-results-as-security-hotspots/83223
	* docs.sonarqube.org/9.8/analyzing-source-code/importing-external-issues/generic-issue-import-format
	* https://gist.github.com/davidfischer-ch/cdfede27ac053a8332b2127becc07608

	Author: David Fischer <david@fisch3r.net>

	# /opt/homebrew/etc/Caddyfile

	http://localhost:8080 {
	# Define a matcher for authorized API access
	@apiAuth {
	header Authorization "Bearer {env.OLLAMA_API_KEY}"
	}

	# Proxy authorized requests
	reverse_proxy @apiAuth http://localhost:11434 {

	# A one liner to leverage the GPU on a mac to transcribe audio files
	# Inspired by https://simonwillison.net/2024/Aug/13/mlx-whisper/
	llm_transcribe_recording () {
	local file_path="$1"
	python3 -c "
	import mlx_whisper
	result = mlx_whisper.transcribe('$file_path', path_or_hf_repo='mlx-community/distil-whisper-large-v3')
	print(result['text'])
	"
	}