Skip to content

Instantly share code, notes, and snippets.

<html>
<head>
<style>
* {
margin: 0;
padding: 0;
}
body {
background: #000;
}
from threading import active_count, Thread
from time import sleep, time
try:
from elasticsearch import Elasticsearch
except:
print('Requires elasticsearch: pip install elasticsearch')
exit(1)
try:
from threading import active_count, Thread
from time import sleep, time
try:
from queue import Empty, Queue
except:
print('Requires python3 (stop using python2)')
exit(1)
try:
@wybiral
wybiral / sri-profile.go
Created May 7, 2019 20:46
Experiment to get average time of SRI hash calculation from visiting browsers
package main
import (
"crypto/sha512"
"encoding/base64"
"fmt"
"log"
"math/rand"
"net/http"
"strings"
@wybiral
wybiral / hai-mark.go
Last active May 6, 2019 21:47
Remotely trigger another browser to crash (without JavaScript)
// Send infinite data-URL iframes (with /aim and /fire to remotely trigger)
package main
import (
"encoding/base64"
"math/rand"
"net/http"
"sync"
)
@wybiral
wybiral / noscript-tracking.go
Last active October 28, 2024 23:01
Tracking cursor position in real-time with remote monitoring (without JavaScript)
// Tracking cursor position in real-time without JavaScript
// Demo: https://twitter.com/davywtf/status/1124146339259002881
package main
import (
"fmt"
"net/http"
"strings"
)
@wybiral
wybiral / lolwtf.go
Last active May 6, 2019 21:45
noscript animation using streamed CSS
package main
import (
"encoding/hex"
"fmt"
"math/rand"
"net/http"
"time"
)
import json
import sys
for line in sys.stdin:
# remove newline
line = line.rstrip()
# parse JSON
item = json.loads(line)
# get title
title = item.get('title', '')
import serial, webbrowser
with serial.Serial('/dev/ttyUSB0', 115200) as s:
while True:
line = s.readline()
webbrowser.open_new('https://www.youtube.com/c/DavyBot')