Skip to content

Instantly share code, notes, and snippets.

@Static-Flow
Static-Flow / aostart.sh
Created September 15, 2025 06:19
deeper connect air atomos init
#!/bin/bash
RUNENV=""
RUNTIME=""
MODE=""
FIRST_INTF=""
SECOND_INTF=""
SYS_PARAM=""
DP_PARAM=""
CP_PARAM=""
@Static-Flow
Static-Flow / gist:7f0ea7562de8b188bc0753ee7e222dcf
Last active September 14, 2025 14:31
deeper connect air uboot commands
=> ?K 'help'
base - print or set address offset
bdinfo - print Board Info structure
blkcache - block cache diagnostics and control
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootefi - Boots an EFI payload from memor▒сfrom memory
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
@Static-Flow
Static-Flow / gist:2c0cbe318ab0db90d1de76ed887c1400
Created September 14, 2025 04:56
Deeper Connect Air UBoot
U-Boot SPL 2021.10-armbian (Dec 14 2023 - 22:48:52 -0800)
pmic id is 0x4b
VDD_DRAM is: 1240
data1=0,data2=3c3c55aa
data1=0,data2=3c3c55aa
data1=0,data2=3c3c55aa
data1=3c3c55aa,data2=3c3c55aa
data1=0,data2=3c3c55aa
data1=0,data2=3c3c55aa
data1=3c3c55aa,data2=3c3c55aa
@Static-Flow
Static-Flow / missing-charset.bcheck
Created December 24, 2024 19:12
This Burp Suite BCheck passively alerts if a site does not define a charset via the Content-Type header or a Meta tag.
metadata:
language: v2-beta
name: "no content type check"
description: "Checks is a response has a text/html content type and no charset set"
tags: "passive"
given response then
if {to_lower(latest.response.headers)} matches "content-type: text/html\r\n" then
if not ({latest.response.body} matches "<meta charset=\".+?\">") then
@Static-Flow
Static-Flow / main.go
Created September 1, 2023 13:59
simple solution to solve wanting a variable N number of receivers to an io.Writer in Golang
package main
import (
"bufio"
"fmt"
"io"
"log"
"os/exec"
"sync"
"time"
retailedge.intel.com
itcenterconnect.intel.com
sipfed.intel.com
intelav.intel.com
intelewc.intel.com
sip.intel.com
click.intel.com
ipip.intel.com
boss.filegridnetwork.com
0-hubs-2-iosdm.v.aaplimg.com
0-hubs-3-iosdm.v.aaplimg.com
0-hubs-iosdm.v.aaplimg.com
1-courier.push.apple.com
1-hubs-2-iosdm.v.aaplimg.com
1-hubs-3-iosdm.v.aaplimg.com
1-hubs-iosdm.v.aaplimg.com
10-courier.push.apple.com
11-courier.push.apple.com
12-courier.push.apple.com
@Static-Flow
Static-Flow / data_table.sql
Last active May 7, 2023 16:37
SQL security idea: Is this a safe implementation that could allow exposing this database publicly and providing access to users provided they were only given data_role permissions?
CREATE TABLE IF NOT EXISTS data
(
pkey bigserial PRIMARY KEY,
value text NOT NULL,
count integer NOT NULL,
first_blood text NOT NULL
);
CREATE UNIQUE INDEX IF NOT EXISTS value_idx ON data USING btree(value);
@Static-Flow
Static-Flow / find_suspicious_printf_calls.py
Last active March 24, 2023 09:05
Simple Ghidra script which searches for calls to printf which take a variable as input instead of a constant format string which could be a potential sink.
from ghidra.app.decompiler import DecompileOptions
from ghidra.app.decompiler import DecompInterface
from ghidra.util.task import ConsoleTaskMonitor
from ghidra.program.model.symbol import SymbolType
TARGET_FUNC = "printf"
target_addr = 0
symbol = currentProgram.symbolTable.getExternalSymbol(TARGET_FUNC)
if symbol and symbol.symbolType == SymbolType.FUNCTION:
@Static-Flow
Static-Flow / get_aws_cred_permissions.sh
Created March 20, 2023 16:05
This quick shell script uses the aws cli to pull the policy documents for a set of AWS credentials. It can also optionally scan the policy documents with https://github.com/salesforce/cloudsplaining
#!/bin/bash
explain='false'
profile='default'
if ! command -v aws &> /dev/null
then
echo "aws cli command could not be found, please install before using this"
exit
else
echo "aws cli command found, continuing"
fi