Skip to content

Instantly share code, notes, and snippets.

@donma
donma / javascript.xor.encryption.js
Created January 20, 2021 01:47
javascript.xor.encryption.js
// string 轉 base64
function EncodeB64(str) {
return window.btoa(unescape(encodeURIComponent(str)));
}
// 還原base64 string
function DecodeB64(str) {
return decodeURIComponent(escape(window.atob(str)));
@ih2502mk
ih2502mk / list.md
Last active May 8, 2026 04:27
Quantopian Lectures Saved
@mikepenz
mikepenz / get-app-md5-signature-fingerprint.c
Created October 7, 2020 08:50
Retrieve the app signature fingerprint as md5 hash
#include <string.h>
#include <stdio.h>
#include <malloc.h>
#include <jni.h>
const char *getSignature(JNIEnv *env, jobject context) {
// Build.VERSION.SDK_INT
jclass versionClass = (*env)->FindClass(env, "android/os/Build$VERSION");
jfieldID sdkIntFieldID = (*env)->GetStaticFieldID(env, versionClass, "SDK_INT", "I");
int sdkInt = (*env)->GetStaticIntField(env, versionClass, sdkIntFieldID);
@dwisiswant0
dwisiswant0 / st8out.sh
Last active December 18, 2025 10:06
St8out - Extra one-liner for reconnaissance
#!/bin/bash
#####
#
# St8out - Extra one-liner for reconnaissance
#
# Usage: ./st8out.sh target.com
#
# Resources:
# - https://github.com/j3ssie/metabigor
@yassineaboukir
yassineaboukir / List of API endpoints & objects
Last active April 17, 2026 23:58
A list of 3203 common API endpoints and objects designed for fuzzing.
0
00
01
02
03
1
1.0
10
100
1000
@sundowndev
sundowndev / GoogleDorking.md
Last active May 8, 2026 12:29
Google dork cheatsheet

Google dork cheatsheet

Search filters

Filter Description Example
allintext Searches for occurrences of all the keywords given. allintext:"keyword"
intext Searches for the occurrences of keywords all at once or one at a time. intext:"keyword"
inurl Searches for a URL matching one of the keywords. inurl:"keyword"
allinurl Searches for a URL matching all the keywords in the query. allinurl:"keyword"
intitle Searches for occurrences of keywords in title all or one. intitle:"keyword"
@adamyordan
adamyordan / log-method-frida.js
Created April 22, 2019 09:27
Simple Frida script to log (console output) targeted methods when called
Java.perform(function() {
const targetClass = Java.use('com.example.TargetClass');
targetClass.targetMethod.implementation = function() {
const argumentsJson = JSON.stringify(arguments, null, 2);
const returnValue = targetClass.targetMethod.apply(this, arguments);
console.log('TARGETED_METHOD_CALLED');
console.log('ARGUMENTS:', argumentsJson);
console.log('RETURN_VALUE:', returnValue);
@NullArray
NullArray / extended-example.pac
Last active September 25, 2025 08:55
pac script example
// Simple PAC script example
function FindProxyForURL(url, host) {
if ( /*condition to pass the request through a local proxy server */ ) {
return 'PROXY 127.0.0.1:8080';
/* If you have Tor installed you can route this connection over Tor like so;*/
/* return 'PROXY 127.0.0.1:9050'; */
}
if ( /*condition to pass the request through a network proxy server */ ) {
@Gustavo-Kuze
Gustavo-Kuze / force-ctrl-c-v.md
Last active March 14, 2026 19:15
Enable copy and paste in a webpage from the browser console
javascript:(function(){
  allowCopyAndPaste = function(e){
  e.stopImmediatePropagation();
  return true;
  };
  document.addEventListener('copy', allowCopyAndPaste, true);
  document.addEventListener('paste', allowCopyAndPaste, true);
  document.addEventListener('onpaste', allowCopyAndPaste, true);
})(); 
@jhaddix
jhaddix / content_discovery_all.txt
Created May 26, 2018 11:51
a masterlist of content discovery URLs and files (used most commonly with gobuster)
This file has been truncated, but you can view the full file.
`
~/
~
ים
___
__
_