Skip to content

Instantly share code, notes, and snippets.

View searchformyusername's full-sized avatar
:shipit:
Attention is All You Need

Kush Choudhary searchformyusername

:shipit:
Attention is All You Need
View GitHub Profile

HTTP Headers

  • Servers can send HTTP headers to provide the client with additional metadata around the response. Besides sending the content that the client requested, servers are then allowed to specify how a particular resource should be read, cached or secured.
  • They have been implemented by browsers in order to make it harder for attackers to take advantage of vulnerabilities.

HSTS

  • HTTP Strict Transport Security.
  • A simple Strict-Transport-Security: max-age=3600 will tell the browser that for the next hour (3600 seconds) it should not interact with the applications with insecure protocols.
  • To Check: https://hstspreload.org/?domain=facebook.com
  • Prevents: MITM, Eavesdropping attack
@searchformyusername
searchformyusername / ssh-termux.md
Last active December 27, 2021 13:03
Step by Step
  • install f-droid from here
    • connect device via usb
    • adb install apk_name
  • install termux from f-droid
  • pkg install openssh
  • sshd
  • pkill sshd : to kill the server
  • ifconfig : see ap0 ip-address or try some other if this don't work
  • whoami : ur username
  • passwd # if u want to create a password, uname -a gives complete username
@searchformyusername
searchformyusername / AdbCommands
Created December 27, 2021 04:53 — forked from Pulimet/AdbCommands
Adb useful commands list
adb help // List all comands
== Adb Server
adb kill-server
adb start-server
== Adb Reboot
adb reboot
adb reboot recovery
adb reboot-bootloader

What made me curious about Rust

Installation on Linux

  • curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
  • source $HOME/.cargo/env
  • export PATH="$HOME/.cargo/bin:$PATH"

Some points

@searchformyusername
searchformyusername / go_concurrency.md
Last active June 25, 2024 16:06
Go Routines and Channels Done Right.

Using Select to get output from multiple channels based on when they are ready:

package main

import (
	"fmt"
	"time"
)
@searchformyusername
searchformyusername / Burp certificate on Android
Created November 5, 2021 11:30 — forked from PaulSec/Burp certificate on Android
Add your Burp certificate on an Android device
To do so:
1. Export your Burp Certificate
Proxy > Options > CA Certificate > Export in DER format
2. Convert it to PEM
openssl x509 -inform der -in cacert.der -out burp.pem
3. Download it on the device
@searchformyusername
searchformyusername / typescript-crash.ts
Created October 4, 2021 06:25 — forked from bradtraversy/typescript-crash.ts
Basic intro to TypeScript (From YouTube Crash Course)
// Basic Types
let id: number = 5
let company: string = 'Traversy Media'
let isPublished: boolean = true
let x: any = 'Hello'
let ids: number[] = [1, 2, 3, 4, 5]
let arr: any[] = [1, true, 'Hello']
// Tuple
:DogeRocket: Bootstrap for Dogecoin Core - 29th January 2021

You can use the bootstrap to get started more quickly with Dogecoin Core, you don't have to wait as long to synchronise the entire chain.

Make sure you have already downloaded the latest Dogecoin Core, 1.14.2! Run the wallet once and then close it.

Download: https://dogecoin.gg/dogecoin-bootstrap-2021-01-29.torrent
Torrent Hash: 9aaaa5c4bd18686d49d6fce7758409349c62567b

The 5 levels of DevOps

  1. Values
  2. Principles
  3. Methods
  4. Practices
  5. Tools

core-values: CAMS

  • culture
  • automation
## Drozer
```
adb forward tcp:31415 tcp:31415
Drozer console connect
## docker
docker run -it fsecurelabs/drozer
drozer console connect --server <phone IP address>
```