zkxs

import scala.collection.immutable.{HashSet, SortedSet}
import scala.collection.mutable.MutableList
import java.io.{BufferedWriter, FileWriter}

object TwoWordPalindrome {
  
  val milliPerNano = 1000000d // 1 million milliseconds in a nanosecond
  val outFileName = "two-word-palindromes.txt" // name of file found palindromes will be written to
  val twoWordPalindromes = MutableList[(String, String)]() // list that results will be appended to
  

zkxs

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

// a linked-list node
struct node {
    char *word;
    struct node *next;
};

zkxs

-- Author:         Michael Ripley
-- Create Date:    01:46:02 10/08/2015
-- Module Name:    clock_divider - Behavioral
-- Description:    If clock period is 10ns and divisor is 10, Q's period will be
--                 100ns. Essentially this is a clock divider where you can
--                 specifiy an arbritrary divisor.


library IEEE;
use IEEE.STD_LOGIC_1164.ALL;

zkxs

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
"Scancode Map"=hex:00,00,00,00,00,00,00,00,02,00,00,00,64,00,3a,00,00,00,00,00

zkxs

import java.util.function.IntPredicate;
import java.util.stream.Collectors;
import java.util.Arrays;
import java.util.List;

/**
 * Here's the same program, but in Java this time to demonstrate the
 * boilerplate difference between Java and Scala.
 * 
 * My solution to the classic fizz-buzz problem.

zkxs

/*
 * Edit this file and copy it as userChrome.css into your
 * profile-directory/chrome/
 */

/*
 * This file can be used to customize the look of Mozilla's user interface
 * You should consider using !important on rules which you want to
 * override default settings.
 */

zkxs

zkxs

#!/usr/bin/env bash

if ! uname | grep -iq darwin; then
    echo "This script is designed for Mac OSX use" >&2
    exit 1
fi

if ! [ -e "patch.js" ]; then
    echo "Place your javascript to inject in patch.js"  >&2
    exit 1

zkxs

Neos User Impersonation MITM Attack

Who am I?

I'm "runtime" in-game. U-runtime if you need my user id. zkxs#1039 on Discord. Feel free to reach out to me if you've got questions.

What have I found?

An exploit allowing a malicious actor to join sessions while impersonating another user via the use of a MITM (man-in-the-middle) attack.

How did I find it?

I am specifically searching for exploits with large security impacts due to the new issue bounty policy.

zkxs

BusinessX.ClassroomBoard
BusinessX.ClassroomController
BusinessX.ClassroomDatabaseController
BusinessX.ClassroomGrabbable
BusinessX.ClassroomHighlight
BusinessX.ClassroomHighlightManager
BusinessX.ClassroomLabel
BusinessX.ClassroomModelControls
BusinessX.ClassroomQuizController
BusinessX.HideShowControl