Skip to content

Instantly share code, notes, and snippets.

View ALiwoto's full-sized avatar
🚩
Trying to experience new things

ALi.w ALiwoto

🚩
Trying to experience new things
  • Earth. under the blue sky
  • 19:55 (UTC +03:30)
View GitHub Profile
@ALiwoto
ALiwoto / CWE-424.go
Created May 30, 2025 06:30
An example of CWE-424.
package main
import (
"encoding/json"
"fmt"
"log"
"net/http"
"strings"
)
@ALiwoto
ALiwoto / CVE-2025-48827.md
Last active May 30, 2025 06:24
CVE-2025-48827: vBulletin (replaceAdTemplate) Remote Code Execution Vulnerability. EDUCATIONAL PURPOSE ONLY.

CVE-2025-48827

vBulletin (replaceAdTemplate) Remote Code Execution Vulnerability.

EDUCATIONAL PURPOSE ONLY.

Taken from here

The original code was written in PHP, had to use Gemini 2.2 to convert it to PowerShell. Please check for any errors.

@tool
class_name ProceduralBridge
extends Node3D
##############################
## EXPORT VARIABLES
##############################
@export var physics_server: bool = false:
set(value):
@hackermondev
hackermondev / research.md
Last active June 25, 2025 07:25
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

#version 300 es
#ifdef GL_FRAGMENT_PRECISION_HIGH
precision highp float;
#else
precision mediump float;
#endif
out vec4 fragColor;
uniform vec2 resolution;
uniform vec3 orientation;
<script>
class CustomEventStream {
constructor(url, headers) {
this.url = url;
this.headers = headers;
this.reader = null;
this.decoder = new TextDecoder("utf-8");
}
async start(callback) {
@tavallaie
tavallaie / secure_erase.sh
Last active February 26, 2025 06:08
**Secure Data Erasure Script (Bash)** This Bash script securely erases data from a specified device with random data, ensuring irrecoverability. Use with caution.
#!/bin/bash
# Check if the script is run with superuser privileges
if [ "$EUID" -ne 0 ]; then
echo "Please run this script as root (sudo)."
exit 1
fi
# Prompt the user for the target devices
read -p "Enter the target devices (e.g., /dev/sdX /dev/sdY): " target_devices
@rlapz
rlapz / fturing.c
Last active April 4, 2023 19:43
liburing exercise
/* compile: cc fturing.c -o fturing -luring -DNDEBUG -O3 */
#include <endian.h>
#include <errno.h>
#include <error.h>
#include <liburing.h>
#include <libgen.h>
#include <netdb.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
@ALiwoto
ALiwoto / QueraQuestion17675.cs
Created December 2, 2022 13:15
QueraQuestion17675
using System;
namespace CW1
{
public class QueraQuestion17675
{
static int previousFib = 0;
static int lastFib = 1;
public static void Main(string[] args)
{