Skip to content

Instantly share code, notes, and snippets.

View n0099's full-sized avatar
🏳️‍⚧️
HRT 24-11-01

n0099 n0099

🏳️‍⚧️
HRT 24-11-01
View GitHub Profile
@avestura
avestura / delete-from-users-where-location-iran.md
Last active February 2, 2026 14:10
DELETE FROM users WHERE location = 'IRAN';

DELETE FROM users WHERE location = 'IRAN';

Hi! I am an Iranian Software Engineer, and in this torn paper note, I want to talk about some funny moments I had online related to the fact that I was spawned in this specific region of the world: Iran.

Microsoft deleted my app, ignored my mails

Back when I was a student, I got access to the Microsoft Imagine, and as a result, I got access to the Microsoft Store as a developer. This inspired me write one of my open-source projects called EyesGuard and publish it on Microsoft Store. However, one day, somebody told me that they can no longer find EyesGuard on the store.

@GeeLaw
GeeLaw / tile-animation.html
Last active November 18, 2025 00:21
Recreate Windows 8 "Start" screen in modern browsers.
<!DOCTYPE html>
<html><!--
Copyright (c) 2025 Ji Luo
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"),
to deal in the Software without restriction, including without limitation
the rights to use, copy, modify, merge, publish, distribute, sublicense,
and/or sell copies of the Software,
@kallsyms
kallsyms / server.py
Created March 29, 2025 23:16
Bismuth CVE-2025-31160
import socket
import struct
import threading
import time
GPUDPORT = 59123
APIVERSION = 1
class GPUDServer:
def __init__(self, port=GPUDPORT):
@faustinoaq
faustinoaq / myAngular.html
Last active January 17, 2026 17:44
Front-end libraries (React, Vue, Angular) and the basic principles of how they work, all in a single file using pure JavaScript (VanillaJS).
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>My Angular from Scratch</title>
<style>
.my-component {
font-family: Arial, sans-serif;
@hackermondev
hackermondev / zendesk.md
Last active February 5, 2026 09:19
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like support@company.com), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

@xproot
xproot / IAhijack.md
Last active November 18, 2024 11:40
Internet Archive hijack timeline

Please contribute to this by pointing out missing items of interest in the comments, dates are in UTC.

  • September 2024 -

28 September - The database for the Internet Archive is saved by the hijacker.

30 September - Troy Hunt, the founder of 'Have I been Pwned?' gets sent the database. [1]

  • Oct 6, 2024 -
@adrienne
adrienne / mullenweg-wpe.md
Last active January 19, 2026 09:58
The Mullenweg/WPE Thing
@smx-smx
smx-smx / XZ Backdoor Analysis
Last active January 23, 2026 19:13
[WIP] XZ Backdoor Analysis and symbol mapping
XZ Backdoor symbol deobfuscation. Updated as i make progress
@thesamesam
thesamesam / xz-backdoor.md
Last active January 9, 2026 08:45
xz-utils backdoor situation (CVE-2024-3094)

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

@tcaptan-cr
tcaptan-cr / IntersectionObserverScrollMarginExplainer.md
Last active June 8, 2025 22:24
Intersection Observer Scroll Margin Explainer

Intersection Observer Scroll Margin Explainer

Intersection Observer scrollMargin allows developers to observe targets inside nested scroll containers that are currently clipped away by the scroll containers. This is achieved by expanding the container's clipping rect by the scrollMargin when calculating the intersection.

Intersection Observer Scroll Margin Specification

Problem