Skip to content

Instantly share code, notes, and snippets.

View samuelkarani's full-sized avatar

Samuel Karani Mbaabu samuelkarani

38 followers · 64 following
  • University of California, Berkeley
  • Paris, France
View GitHub Profile
@samuelkarani
samuelkarani / bounding-rect-hook.tsx
Created August 5, 2023 10:24
export function useBoundingClientRect<T extends HTMLElement>() {
const [rect, setRect] = useState<DOMRect | null>(null);
const ref = useRef<T>(null);
const update = useCallback(() => {
if (ref.current) setRect(ref.current.getBoundingClientRect());
else setRect(null);
}, []);
useEffectOnce(() => {
@samuelkarani
samuelkarani / react-cache.ts
Last active May 25, 2023 10:15
Simple React "cache" api function. No clearing strategies e.g. LRU etc. Just simple interval clearing. Official version is currently available ONLY in react canaries and RSC environment i.e. “react-server” exports condition. Depends on object-hash package to create hash key from arguments and optional additional key.
import objectHash from "object-hash";
const cacheTimeout = 60 * 60 * 1000
let store: Record<string, unknown> = {};
export function cache<A extends unknown[], B = unknown>(
fn: (...args: A) => Promise<B>,
key?: string // optional key for guaranteed uniqueness
) {
@samuelkarani
samuelkarani / audit-file-filtering.js
Last active December 20, 2022 23:35
const formidable = require("formidable");
const path = require("path");
const smallest = 100;
const largest = 10 * 1000 * 1000;
const bannedExtensions = [".js", ".html", ".txt", ".exe", ".rtf", ".vbs", ".zip"];
const bannedMimeTypes = [
"text/plain",
"text/html",
"text/css",
@samuelkarani
samuelkarani / file-scan-api.js
Last active December 20, 2022 11:39
const nvt = require('node-virustotal'); // read more https://www.npmjs.com/package/node-virustotal
const fs = require('fs');
const crypto = require("crypto");
app.post('/upload', async (req, res) => {
const randomId = crypto.randomBytes(16).toString("hex");
const filePath = __dirname + "/uploads/" + randomId;
const writeStream = fs.createWriteStream(filePath);
writeStream.on('finish', () => {
try {
@samuelkarani
samuelkarani / scan-request-directly.js
Last active December 19, 2022 18:29
const fs = require('fs');
const NodeClam = require('clamscan');
// specify socket or TCP connection. read more at https://www.npmjs.com/package/clamscan#scanStream
const clamscan = new NodeClam().init({
clamdscan: {
socket: '/var/run/clamd.scan/clamd.sock',
host: '127.0.0.1',
port: 3310,
@samuelkarani
samuelkarani / convert-upload-to-file.js
Created December 19, 2022 16:43
const fs = require('fs');
const crypto = require("crypto");
app.post('/upload', async (req, res) => {
const randomId = crypto.randomBytes(16).toString("hex");
const filePath = __dirname + "/uploads/" + randomId;
const writeStream = fs.createWriteStream(filePath);
writeStream.on('finish', () => {
const { is_infected, viruses } = await scanFile(filePath);
if (!is_infected) {
@samuelkarani
samuelkarani / script.html
Created December 14, 2022 10:21
<script>
alert("I am a malicious file");
</script>
@samuelkarani
samuelkarani / eicar.txt
Created December 14, 2022 10:19
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
@samuelkarani
samuelkarani / csrf.html
Created December 14, 2022 09:50
<html>
<body>
<button onclick="aml()">test aml</button>
<button onclick="eurazeo()">test eurazio</button>
<script>
history.pushState("", "", "/");
</script>
<script>
function submitRequest(url) {
var xhr = new XMLHttpRequest();
@samuelkarani
samuelkarani / user-authorization.js
Last active December 16, 2022 11:13
const ROLES = {...}
// middleware
function checkRole(role) {
return (req, res, next) => {
if (req.user.role !== role) {
res.status(401)
return res.send('Not allowed')
}