zkxs

cloudflare

1.1.1.1
1.0.0.1
2606:4700:4700::1111
2606:4700:4700::1001

cloudflare DNS64

zkxs

Lunacid 2024 Lunar Calendar

When MOON_MULT is greater than 9.0, certain objects will appear. Here are those days summarized:

Month	Full Moon Days (inclusive)
January	24-26
February	22-25
March	23-25
April	21-24

zkxs

import java.io.FileOutputStream
import java.io.PrintWriter
import java.nio.file.Files
import java.time._
import java.time.format._
import scala.io.Source
import scala.util.matching.Regex

object Schedule {

zkxs

Example Neos Headless SteamCMD Setup

This is a simple set of scripts to install and run Neos headless via SteamCMD.

Basic instructions

1. OPTIONAL: create a new user for this setup. SteamCMD has been known in the past to nuke the entire home directory of the user running it.
2. Install SteamCMD
3. Toss update.sh, appupdate.txt, and run_server.sh into the same directory that SteamCMD is installed to. (steamcmd.sh should be there)
4. Fill in the blanks in appupdate.txt. The password for the Neos Headless Beta can be obtained from a channel in the Neos Discord, if you are in the relevant Patreon tier.

zkxs

Utensil Tier List

S Tier

• Knife

A Tier

• Chopsticks

zkxs

#!/bin/bash

process() {
    pushd . > /dev/null
    cd "$(dirname "$1")"
    echo "$PWD"
    git fetch --all
    popd > /dev/null
}

zkxs

BusinessX.ClassroomBoard
BusinessX.ClassroomController
BusinessX.ClassroomDatabaseController
BusinessX.ClassroomGrabbable
BusinessX.ClassroomHighlight
BusinessX.ClassroomHighlightManager
BusinessX.ClassroomLabel
BusinessX.ClassroomModelControls
BusinessX.ClassroomQuizController
BusinessX.HideShowControl

zkxs

Neos User Impersonation MITM Attack

Who am I?

I'm "runtime" in-game. U-runtime if you need my user id. zkxs#1039 on Discord. Feel free to reach out to me if you've got questions.

What have I found?

An exploit allowing a malicious actor to join sessions while impersonating another user via the use of a MITM (man-in-the-middle) attack.

How did I find it?

I am specifically searching for exploits with large security impacts due to the new issue bounty policy.

zkxs

#!/usr/bin/env bash

if ! uname | grep -iq darwin; then
    echo "This script is designed for Mac OSX use" >&2
    exit 1
fi

if ! [ -e "patch.js" ]; then
    echo "Place your javascript to inject in patch.js"  >&2
    exit 1

zkxs