Skip to content

Instantly share code, notes, and snippets.

View killvxk's full-sized avatar

killvxk

  • USSR
View GitHub Profile
@Hamid-K
Hamid-K / package_age_gate_hardener.py
Last active June 1, 2026 09:25
Package manager release-age gate scanner and hardener
#!/usr/bin/env python3
"""
Scan and harden package-manager release-age gates.
This script is intentionally self-contained: it uses only the Python standard
library and writes only user-level config files. It covers the package-manager
ecosystems inventoried by Perplexity Bumblebee plus additional common language
package managers.
Native age gates currently handled in harden mode:
@lcfr-eth
lcfr-eth / gro_frag.c
Created May 22, 2026 15:18
LPE via GRO managed-frag UAF
/*
* gro_frag.cLPE via GRO managed-frag UAF (io_uring SEND_ZC + veth)
*
* The bug: skb_gro_receive() copies frag descriptors from a ZC skb
* (SKBFL_MANAGED_FRAG_REFSno per-frag page refs) into a non-ZC
* GRO accumulator. When the accumulator is freed, skb_release_data()
* calls put_page() on each fragincluding the stolen ones that never
* had get_page() called. This gives us one extra put_page per merged
* ZC frag: a refcount underflow.
*
@grahamhelton
grahamhelton / statusline.py
Created April 24, 2026 17:17
check claude code price if you were using API pricing instead of a max subscription
#!/usr/bin/env python3
"""Claude Code status line: API-rate cost estimate (session / today)."""
import json
import sys
import glob
import os
import datetime as dt
# USD per 1M tokens: (input, output, cache_write_5m, cache_read)
# Source: platform.claude.com/docs/en/about-claude/pricing
@odzhan
odzhan / crt.c
Last active January 17, 2026 21:16
Writing Tiny Executables in C
/**
Compile with your C console project.
*/
#include <stdio.h>
#include <windows.h>
#define __UNKNOWN_APP 0
#define __CONSOLE_APP 1
#define __GUI_APP 2
#!/usr/bin/env python
# Impacket - Collection of Python classes for working with network protocols.
#
# Copyright Fortra, LLC and its affiliated companies
#
# All rights reserved.
#
# This software is provided under a slightly modified version
# of the Apache Software License. See the accompanying LICENSE file
# for more information.
@theevilbit
theevilbit / rc.trampoline.m
Created October 15, 2024 13:58
rc.trampoline research
#include <objc/runtime.h>
#include <Foundation/Foundation.h>
#include <IOKit/IOKitLib.h>
#include <spawn.h>
#include <unistd.h>
#include <stdio.h>
#include <stdlib.h>
#include <err.h>
#include <sys/wait.h>
#include <sys/stat.h>
@tin-z
tin-z / VR_roadmap.md
Last active May 27, 2026 17:06
Becoming a (pre-AI) Vulnerability Researcher roadmap: my personal experience
"""
31-round sha256 collision.
Not my research, just a PoC script I put together with numbers plugged in from the slide at
https://twitter.com/jedisct1/status/1772647350554464448 from FSE2024
SHA256 impl follows FIPS 180-4
https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf
"""
@OrionReed
OrionReed / dom3d.js
Last active June 18, 2026 07:41
3D DOM viewer, copy-paste this into your console to visualise the DOM topographically.
// 3D Dom viewer, copy-paste this into your console to visualise the DOM as a stack of solid blocks.
// You can also minify and save it as a bookmarklet (https://www.freecodecamp.org/news/what-are-bookmarklets/)
(() => {
const SHOW_SIDES = false; // color sides of DOM nodes?
const COLOR_SURFACE = true; // color tops of DOM nodes?
const COLOR_RANDOM = false; // randomise color?
const COLOR_HUE = 190; // hue in HSL (https://hslpicker.com)
const MAX_ROTATION = 180; // set to 360 to rotate all the way round
const THICKNESS = 20; // thickness of layers
const DISTANCE = 10000; // ¯\\_(ツ)_/¯