- Debugger - Web
- TYPicalBoss - Web
- Babypwn - Pwn
- Heavens Flow - Pwn
- IPfilter - Web
Shi Saaristo shinmai
😫
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // ==UserScript== | |
| // @name Mastodon absolute timestamps | |
| // @namespace rip.aapo.userscripts | |
| // @version 0.1 | |
| // @description show absolute time on posts on Mastodon | |
| // @author @shinmai - https://shinmai.wtf | |
| // @match https://tech.lgbt/* | |
| // @grant none | |
| // @updateURL https://gist.github.com/shinmai/4e57cbb5f1c251f3bbe54adf5ed89481/raw/chronotoot.user.js | |
| // @downloadURL https://gist.github.com/shinmai/4e57cbb5f1c251f3bbe54adf5ed89481/raw/chronotoot.user.js |
shinmai
/ _nullcon-HackIM-CTF-Goa-2023-writeups.md
Last active
August 20, 2023 08:26
nullcon HackIM CTF Goa 2023 writeups
You'll need the following:
- an HTML page to place the player into
- music files to play (e.g. MP3 files with IDv3 tags for artist & track name)
- a .wsz WinAmp skin file (the WinAmp Skin Museum has a ton)
Assuming your html file is hosted at the address https://domain.tld/webamp/, your skin file is named skin.wsz, and your music files are named track01.mp3 and track02.mp3 and all are in the same folder as the HTML file, and the HTML element on your page you want the player centered on has the id main, the code to spawn a WebAmp player with the skin applied and the two tracks in the playlist is:
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // ==UserScript== | |
| // @name Hide "Discover More" tweets | |
| // @namespace rip.aapo.userscripts | |
| // @version 0.0.2 | |
| // @description install a mutation listener on Twitter pages that looks for added nodes, and removes any tweets that are below a "Discover more" heading | |
| // @author @shinmai - https://shinmai.wtf | |
| // @match https://twitter.com/* | |
| // @icon https://www.google.com/s2/favicons?sz=64&domain=twitter.com | |
| // @grant none | |
| // @updateURL https://gist.github.com/shinmai/6f56595a6f116bca91368ea31da6f384/raw/shaddap-algorithm.user.js |
shinmai
/ _WolvCTF-2023-writeups.md
Last active
March 20, 2023 08:57
- Charlotte's Web - (Beginner - 50pts)
- baby-re - (Beginner - 50pts)
- baby-pwn - (Beginner - 50pts)
- theyseemerolling - (Beginner - 50pts)
- cat - (Beginner - 50pts)
- elytra - (Beginner - 50pts)
- escaped - (Beginner - 50pts)
- yowhatsthepassword - (Beginner - 50pts)
shinmai
/ moreliketwitterblewamirite.user.js
Last active
January 11, 2024 08:40
Remove Twitter Blue adverts from anywhere I come across them on Twitter :)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // ==UserScript== | |
| // @name Blue Twitter? I hardly know her! | |
| // @namespace rip.aapo.userscripts | |
| // @version 0.0.8 | |
| // @description Let Elon figure out another way to make $8 | |
| // @author @shinmai - https://shinmai.wtf | |
| // @match https://twitter.com/* | |
| // @icon https://www.google.com/s2/favicons?sz=64&domain=twitter.com | |
| // @updateURL https://gist.github.com/shinmai/88c6af7f2219c8f81ec6517438dc0dcb/raw/moreliketwitterblewamirite.user.js | |
| // @downloadURL https://gist.github.com/shinmai/88c6af7f2219c8f81ec6517438dc0dcb/raw/moreliketwitterblewamirite.user.js |
shinmai
/ premiumize.me_vlc.user.js
Last active
March 7, 2023 12:10
Premiumize.me VLC protocol handler integration
shinmai
/ _challenge.md
Last active
February 26, 2023 16:24
An example of how Nord Security _COULD'VE_ done their VU Cyberthon 2023 challenge had they cared enough
A succesfull business person was once approached by a hooded figure, who handed them a piece of paper with a bunch of letter scribbled on it. The mysterious figure only said "remember where you've been to remind yourself of who you are".
Anyway they couldn't make heads or tails of any of it and tossed the note, think you could do better?
-----BEGIN CERTIFICATE-----
MIIExzCCA68CFHQ55xEtHWVwoFkX/v8neG1rYc8sMA0GCSqGSIb3DQEBCwUAMIIB
HjELMAkGA1UEBhMCRkkxUTBPBgNVBAgMSE1DRkhQbDVCV1VkSFhrRkxOajFmUmxs
SFhsNVlXVWRNTHp0U1BWNWVRVmxlWGw1VEtEOVZLa0ZaUjE1SFFWbFZMeVF3T2tk
I feel like all the Binary Ninja Python scripts I see are:
- written specifically for commercial license headless usage
- some super complicated automated pwn thing written by a PhD
So for the heck of it, here's (almost) how I solved PicoCTF's Bizz Fuzz task in Binary Ninja. This script is meant for use with the Personal license inside the GUI.
Load up the binary provided, let it finish analysing, and select the script below from File->Run Script...
The code isn't sophisticated or pretty, it was written trying to solve the task, not to be pretty and shared :P
shinmai
/ unfuck-tweet-actions.user.js
Last active
January 17, 2023 21:28
UserScript: No Tweet stats - Hide statistics button and viewcount from all tweets
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // ==UserScript== | |
| // @name No Tweet stats | |
| // @namespace rip.aapo.userscripts | |
| // @version 0.0.4 | |
| // @description Hide statistics button and viewcount from all tweets | |
| // @author @shinmai - https://shinmai.wtf | |
| // @match https://twitter.com/* | |
| // @icon https://www.google.com/s2/favicons?sz=64&domain=twitter.com | |
| // @grant none | |
| // @updateURL https://gist.github.com/shinmai/13b1fc385b8802ea1979e892e8aae12c/raw/unfuck-tweet-actions.user.js |