Luke Young bored-engineer

🔥

This is fine.

I find bugs and exploit them. Sometimes for money, mainly for free T-Shirts...

bored-engineer / worker.js

Last active April 12, 2026 23:12

A minimal Cloudflare worker that behaves like a Splunk HEC collector

	export default {
	async fetch(request, env, ctx) {
	// Parse the request body as text as it's multiple concatenated JSON documented, ex:
	// {"event":{...},"time":"123"}{"event":{...},"time":"456"}
	let body = await request.text();
	// Extract some request properties
	const requestIP = request.headers.get('CF-Connecting-IP');
	const userAgent = request.headers.get('User-Agent');
	// Convert to valid JSON by wrapping in an array and injecting commas
	let bodyJSON = JSON.parse(`[` + body.replace(/}{"/g, `},{"`) + `]`);

bored-engineer / 7235089324.json

Created March 20, 2026 07:34

Suspicious events by the user 'DarkSeek3r' potentially related to the compromise of aquasecurity/trivy

	{
	"id": "7235089324",
	"type": "ForkEvent",
	"actor": {
	"id": 266895321,
	"login": "DarkSeek3r",
	"display_login": "DarkSeek3r",
	"gravatar_id": "",
	"url": "https://api.github.com/users/DarkSeek3r",
	"avatar_url": "https://avatars.githubusercontent.com/u/266895321?"

bored-engineer / 7570712741.json

Created March 20, 2026 03:37

The GitHub ReleaseEvent for the compromised binaries (v0.69.4) of aquasecurity/trivy

	{
	"id": "7570712741",
	"type": "ReleaseEvent",
	"actor": {
	"id": 54269356,
	"login": "aqua-bot",
	"display_login": "aqua-bot",
	"gravatar_id": "",
	"url": "https://api.github.com/users/aqua-bot",
	"avatar_url": "https://avatars.githubusercontent.com/u/54269356?"

bored-engineer / hello

Created March 24, 2025 03:04

world3

bored-engineer / hello

Created March 24, 2025 03:04

world2

bored-engineer / hello

Created March 24, 2025 03:04

world

bored-engineer / Dockerfile

Last active May 4, 2024 17:41

Dockerfile for buliding a simple Golang application with correct caching logic for optimal build performance

	# It is faster to cross-compile if the application can be built without CGO
	FROM --platform=${BUILDPLATFORM} cgr.dev/chainguard/go:latest as builder

	# Building from / or a directory in GOPATH can cause problems
	WORKDIR /build

	# Fetch the Golang dependencies
	RUN --mount=type=cache,target=/go/pkg \
	--mount=type=bind,source=go.sum,target=go.sum \
	--mount=type=bind,source=go.mod,target=go.mod \

bored-engineer / decrypt_github_enterprise.rb

Last active March 25, 2026 03:28 — forked from wchen-r7/decrypt_github_enterprise.rb

	#!/usr/bin/ruby
	#
	# This tool is only used to "decrypt" the github enterprise source code.
	#
	# Run in the /data directory of the instance.

	require "zlib"

	KEY = "This obfuscation is intended to discourage GitHub Enterprise customers "+
	"from making modifications to the VM. We know this 'encryption' is easily broken. "

bored-engineer / exrex.go

Created May 19, 2020 00:30

A go program to expand a regular expression into every possible matching string

bored-engineer / controlmaster_pid.go

Created March 30, 2020 08:37

Get the PID of a SSH controlmaster process