Skip to content

Instantly share code, notes, and snippets.

This file has been downloaded from the ShinyHunters Data Leak Site (DLS).
Our DLS is accessible at these locations:
- http://shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd.onion/
- http://shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion/
> These files were leaked on the ShinyHunters DLS because the victim did not pay a ransom or cooperate and comply with the ShinyHunters group.
src;refs;lnks;
http://web.archive.org/web/20260322033123/https://shinyhunte.rs/
http://web.archive.org/web/20260322033217/https://shinyhunte.rs/newpgp
@ravarcheon
ravarcheon / theHorse.js
Last active July 20, 2026 17:22
the horse that blocks your screen after a 2 minutes
// ==UserScript==
// @name the horse that stands in your way
// @namespace http://tampermonkey.net/
// @version 2026-03-01
// @description no more than 2 minutes of twitter. the first minute is a clear view, the second minute is where the horse slowly fades in. third minute and beyond there is nothing to see except horse
// @author You
// @match http://*.x.com/*
// @match https://*.x.com/*
// @match http://*.instagram.com/*
// @match https://*.instagram.com/*
@rebane2001
rebane2001 / 2d-movement-demo.html
Last active June 11, 2026 14:44
2d movement demo for CSS Clicker training (https://lyra.horse/slides/#2025-congress), based on Corncycle's coquest! game (https://cohost.org/Corncycle/post/362844-div-style-line-hei)
<!--
2d movement demo for CSS Clicker training
>>> https://lyra.horse/slides/#2025-congress
based on Corncycle's coquest! game
>>> https://cohost.org/Corncycle/post/362844-div-style-line-hei
-->
<div style="display:inline-flex;position:relative;overflow:visible;border:1px solid red">
<!-- game map -->
@rebane2001
rebane2001 / twitter-card-mod.js
Last active November 14, 2025 02:10
Twitter Card Mod (paste into console) // Note: Moved to https://github.com/rebane2001/TweetsAgainstHumanity/ (get the extension/userscript there)
twitterCardCount = 5;
function getNextTweets(count) {
const nextTweets = [...document.querySelectorAll("[data-testid='cellInnerDiv']:not(:has(>.HiddenTweet)) [data-testid='tweet']:not([data-twc-used])")].slice(0, count);
nextTweets.forEach(e => e.dataset.twcUsed = true);
return nextTweets;
}
function setStyle(styleText) {
let styleEl = document.querySelector(".twc-style");
@Endermanch
Endermanch / swag.py
Created August 20, 2025 15:28
Swag and unswag your IP address
def swag(ip: str) -> int:
parts = ip.strip().split('.')
if len(parts) != 4:
raise ValueError("Invalid IPv4 address: must have 4 octets")
total = 0
for i, p in enumerate(parts):
@rebane2001
rebane2001 / mlgCobalt.user.css
Created July 3, 2025 09:41
MLG userstyle for cobalt.tools (made as a joke, not recommended)
/* ==UserStyle==
@name MLG userstyle for cobalt.tools
@description made as a joke, not recommended
@namespace rebane2001
@author rebane2001
@version 1.0.0
@license MIT
@preprocessor default
==/UserStyle== */
@rebane2001
rebane2001 / glass-with-controls.html
Last active April 15, 2026 16:21
glass effect test css/svg thing (messy) - demo: https://codepen.io/rebane2001/details/OPVQXMv
<div style="position:absolute;top:-999px;left:-999px">
<svg
id="effectSvg"
width="200"
height="200"
viewBox="0 0 200 200"
xmlns="http://www.w3.org/2000/svg">
<filter id="displacementFilter4">
DISCORD NET INFO
Thanks: Delitefully and whois.ipip.net
## Core
| Domain | Description |
|------------------------|------------------------------------------|
| dis.gd | Marketing URL shortener |
| i.dis.gd | Internal URL shortener |
| discord.co | Admin panel, internal tools |
@hyperdefined
hyperdefined / cobalt.md
Last active March 23, 2025 20:21
cobalt instance dump I found online

How did you find these?

I used a service called Censys Search to find them. There's some queries you can do:

  • services.http.response.html_title: "cobalt"
    • This one can find web instances. Does lead to false positives, since any title can contain "cobalt."
  • services.http.response.body_hash="sha1:bf53b9ab96065ed263df9ebcd2b3b0c4d88242b5"
    • This one can find API instances. This is the hash of the response that all instances use.
  • You can probably also look for just port 9001/9000, but most of these ports are not default.

After I collected the list, I checked /api/serverInfo on the API instances to see if it has a url set. This can either be a subdomain or an IP. If it had a domain set, I tried to find the web instance by checking common subdomains (like co, cobalt, etc). If there were no connecting domains, I tried a look up the IP on SecurityTrails. Otherwise, it simply got listed as the IP.

@aamiaa
aamiaa / CompleteDiscordQuest.md
Last active July 24, 2026 05:33
Complete Recent Discord Quest

Caution

As of April 7th 2026, Discord has expressed their intent to crack down on automating quest completion.

Some users have received the following system message:

image

There isn't much I can do to make the script undetected, so use it at your own risk, as you most likely WILL get flagged by doing so.

Complete Recent Discord Quest