Skip to content

Instantly share code, notes, and snippets.

View the8woodcutter's full-sized avatar
🍉
takin it ez ...

the8woodcutter the8woodcutter

🍉
takin it ez ...
View GitHub Profile
@hackermondev
hackermondev / research.md
Last active April 7, 2025 03:36
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

@jacobq
jacobq / update-dynamic-dns.sh
Last active February 13, 2025 08:48
FreeDNS (afraid.org) dynamic DNS updater script: e.g put in /etc/cron.hourly/update-dynamic-dns.sh
#!/bin/sh
# FreeDNS updater script
# Adapted from https://freedns.afraid.org/scripts/update.sh.txt
# sudo apt install dnsutils wget
DOMAIN="foo.my-custom-domain.com"
API_KEY="put your API key (base64 string) here"
SHOULD_UPDATE=0
# -f is the only argument supported right now (forces update even if address appears correct)
@huntrar
huntrar / full-disk-encryption-arch-uefi.md
Last active April 6, 2025 14:08
Arch Linux Full-Disk Encryption Installation Guide [Encrypted Boot, UEFI, NVMe, Evil Maid]

Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.

Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.

Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.

Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.

@bitsurgeon
bitsurgeon / youtube.md
Last active March 23, 2025 16:36
Markdown cheatsheet for YouTube

Embed YouTube Video in Markdown File

  1. Markdown style
[![Watch the video](https://img.youtube.com/vi/nTQUwghvy5Q/default.jpg)](https://youtu.be/nTQUwghvy5Q)
  1. HTML style
<a href="http://www.youtube.com/watch?feature=player_embedded&v=nTQUwghvy5Q" target="_blank">
@pshlos46
pshlos46 / linux_hplt4132.md
Last active April 2, 2025 03:25
HP lt4132 4G modem linux support (EliteBook G5)

[How-To] HP lt4132 - 4G LTE modem - Linux support

This guide has been tested in Xubuntu 18.04.01 but it will probably apply in most linux distro's. Contents are heavily based on work by @toreanderson here.

So HP Elitebook G5 has as an LTE modem the HP lt4132 which is actually re-brand of Huawei ME906s-158.

If you see the output from usb-devices you'll see that the issue lies that the modem is in configuration 2 (Cfg#= 2). The Linux kernel selects configuration 2 by default, but that does not work with ModemManager. Configuration 3 ( MBIM mode) is a much better choice.

Changing to configuration 3 is easy enough. Note that it is essential to first deconfigure the device by selecting configuration

@noromanba
noromanba / weechat-security-settings.mkd
Created September 26, 2015 19:58
recommends settings for security in WeeChat

WeeChat security settings

recommends settings for security in WeeChat

disable leave msg

do not say when /part and /quit

/set irc.server_default.default_msg_part = ""
/set irc.server_default.default_msg_quit = ""
@wgallios
wgallios / .muttrc
Created November 11, 2014 06:42
Example Muttrc File
set imap_user = "[email protected]"
set imap_pass = ""
set smtp_url = "smtp://[email protected]:587"
set smtp_pass = ""
set from = "[email protected]"
set realname = "FirstName LastName"
set folder = "imaps://imap.gmail.com:993"
set spoolfile = "+INBOX"
@nicolasochem
nicolasochem / .tmux.conf
Last active October 21, 2024 17:49
The best tmux configuration in the universe - 2024 version
# Our .tmux.conf file
# Setting the prefix from C-b to C-s
set -g prefix C-s
# Free the original Ctrl-b prefix keybinding
unbind C-b
#setting the delay between prefix and command
set -sg escape-time 1
# Ensure that we can send Ctrl-S to other apps
bind C-s send-prefix
@schnell18
schnell18 / cgitrc-sample
Created April 10, 2014 14:59
cgitrc sample file with instruction to generate absolute link URL starting with /cgit.cgi/
# Make cgit generate link using absolute URL
virtual-root=/cgit.cgi/
# Enable caching of up to 1000 output entriess
cache-size=1000
# cache time to live
cache-dynamic-ttl=5
cache-repo-ttl=5
@durden
durden / sanitize.py
Last active April 26, 2023 11:13
Different ways to 'sanitize' a list of strings to ensure they don't contain any of the contents of another 'ignored' list
"""
Demonstration of ways to implement this API:
sanitize(unsanitized_input, ignored_words)
Related discussions:
- Modifying a list while looping over it:
- http://stackoverflow.com/questions/1207406/remove-items-from-a-list-while-iterating-in-python
- Remove all occurences of a value in a list:
- http://stackoverflow.com/questions/1157106/remove-all-occurences-of-a-value-from-a-python-list