0xdade

# DO NOT USE. Implementation is untested proof of concept.
# Django CSRF Middleware based on https://words.filippo.io/csrf/

from functools import wraps
from django.conf import settings
from django.http import HttpRequest, HttpResponse
from asgiref.sync import iscoroutinefunction

SAFE_METHODS = ["GET", "HEAD", "OPTIONS"]

0xdade

"18f.gov","NS","ns-1069.awsdns-05.org."
"18f.gov","NS","ns-1840.awsdns-38.co.uk."
"18f.gov","NS","ns-308.awsdns-38.com."
"18f.gov","NS","ns-540.awsdns-03.net."
"211dupage.gov","A","141.193.213.20"
"211dupage.gov","A","141.193.213.21"
"211dupage.gov","NS","cbru.br.ns.els-gms.att.net."
"211dupage.gov","NS","cmtu.mt.ns.els-gms.att.net."
"211dupage.gov","TXT","_it60i1tta2es0lbw3bivs5q3arobu78"

0xdade

import re

def parse_mypy_errors(error_file):  # type: ignore[no-untyped-def]
    """Parse mypy errors and extract filename, line number, and error codes."""
    errors = []
    with open(error_file, 'r') as f:
        for line in f:
            match = re.match(r'(.*?):(\d+):\s*error:\s*(.*)\s+\[(.*)\]', line)
            if match:
                filename, lineno, message, error_code = match.groups()

0xdade

WARN Act

Worker Adjustment and Retraining Notification Act of 1988 requires that advance notice be given for closings and layoffs. This notice is given to various states, who then publish that information.

State	Link	Notes
Alabama	https://www.madeinalabama.com/warn-list/
Alaska	https://jobs.alaska.gov/RR/WARN_notices.htm
Arizona	https://www.azjobconnection.gov/search/warn_lookups/new
Arkansas

0xdade

import argparse
import os
import sys

from pypdf import PdfReader, PdfWriter # pip install pypdf

def main():
    parser = argparse.ArgumentParser(
        description='Simplify PDF by reading each page and writing out to a new file. Does not preserve metadata, permissions, bookmarks, etc.',
    )

0xdade

# First approach, just make a function manually for every tag
# Then feed them all back to the same core html_element function for rendering
import inspect
import sys

def html_element(*args, **kwargs):
    tag = inspect.stack()[1][3]
    attrs = [f"{kwarg}=\"{kwargs.get(kwarg)}\"" for kwarg in kwargs]
    children = "\n".join([f"{child}" for child in args])
    return f'<{tag}{" " if attrs else ""}{" ".join(attrs)}>{children}</{tag}>'

0xdade

User Experience:
    Workflow:
        (Optional) Click pre-authenticated upload url, if provided
        (Optional) Sign in, if required
        Drag and drop a file
        interface shows the file name (and maybe some additional metadata, not sure if we get any metadata at this point though)
        Set of checkboxes for the following (if they are not enforced to a specific value by the server operator):
            Save Encryption Key
            Burn After Reading
            Expiration Duration 

0xdade

name: Automatically limit
on: 
  schedule:
    - cron: "0 0 * * *"
jobs:
  limiter:
    runs-on: ubuntu-latest
    steps:
    - name: Remove existing limit
      run: |

0xdade

# A quick nginx config that does some shameless transparent proxying. 
# The sub_filter module is available on my ubuntu install out of the box, but may not always be available
# This demonstration of sub_filter is also extremely minimal. All requests that begin with `/` will load relatively anyways, this attempts to replace any fully qualified requests

server {
    listen 80;
    listen [::]:80;
    server_name exploit.party;
    return 301 https://$server_name$request_uri;
}

0xdade

Distributing the denial of secrets

Twitter made ddosecrets.com a forbidden place. I don't like being forbidden from going places or sharing links to said places.

It's dangerous to go alone, take these:

• Apache
• Nginx
• iptables