Do It by Code
Photo
Step back for a moment and you'll recall that it's not the browser that is downloading this malicious exe, instead it's PowerShell - or, more specifically, it's the
This class has a method, DownloadFile which does exactly that - downloads a file to a local path, except this method does not set the MOTW (Mark of The Web) flag for the downloaded file.
System.Net.WebClient class in .NET Framework.This class has a method, DownloadFile which does exactly that - downloads a file to a local path, except this method does not set the MOTW (Mark of The Web) flag for the downloaded file.
Forwarded from Programmer Humor
Forwarded from woto-scp
woto-scp is updated
1. login to your server
2. do
3. put this line inside of it:
4. save and close
5. try to run this command:
6. you get prompted for oauth. do what they are told in the console.
7. if all goes well, you should be able to download it.
8. now cd to your woto-scp folder, do
9. if you have
10. add these lines to the config, under the [woto-scp] section:
11. save and close. it should work now.
if it still ain't working, then it means your server's ip is blocked by youtube/google guys, rip (you can try to use a proxy or idk)
also make sure you have git pulled the latest commits as well (using
yt-dlp issue is now temporarily fixed; however, extra action is needed:1. login to your server
2. do
nano ~/yt-dlp.conf3. put this line inside of it:
--username oauth2 --password ''4. save and close
5. try to run this command:
yt-dlp https://www.youtube.com/watch?v=dQw4w9WgXcQ6. you get prompted for oauth. do what they are told in the console.
7. if all goes well, you should be able to download it.
8. now cd to your woto-scp folder, do
nano config.ini9. if you have
yt_cookies_file set, COMMENT IT10. add these lines to the config, under the [woto-scp] section:
yt_dlp_username = oauth2yt_dlp_password = 11. save and close. it should work now.
if it still ain't working, then it means your server's ip is blocked by youtube/google guys, rip (you can try to use a proxy or idk)
also make sure you have git pulled the latest commits as well (using
.gitpull command in telegram, or git pull origin master in your terminal.CVE-2024-46982: Next.js Cache Poisoning
High severity (8.7/10)
GitHub, NVD
By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a route that is meant to not be cached and send a Cache-Control: s-maxage=1, stale-while-revalidate header which some upstream CDNs may cache as well.
Weaknesses:
CWE-349
CWE-639
Affected versions:
>= 13.5.1, < 13.5.7
>= 14.0.0, < 14.2.10
Patched versions:
13.5.7
14.2.10
References:
vercel/next.js@7ed7f12
vercel/next.js@bd164d5
Netlas
High severity (8.7/10)
GitHub, NVD
By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a route that is meant to not be cached and send a Cache-Control: s-maxage=1, stale-while-revalidate header which some upstream CDNs may cache as well.
Weaknesses:
CWE-349
CWE-639
Affected versions:
>= 13.5.1, < 13.5.7
>= 14.0.0, < 14.2.10
Patched versions:
13.5.7
14.2.10
References:
vercel/next.js@7ed7f12
vercel/next.js@bd164d5
Netlas
https://github.com/twitter/the-algorithm/issues
GitHub getting flooded by bots.
DO NOT click on any links / urls from these bots, they are all malware or phishing sites.
GitHub getting flooded by bots.
DO NOT click on any links / urls from these bots, they are all malware or phishing sites.
Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.
Here's a cool ngrok alternative u can selfhost with pretty cool features.
https://zrok.io/
https://github.com/openziti/zrok
You can do tunneling, files and video sharing, and alot more.
#go #golang #opensource
Here's a cool ngrok alternative u can selfhost with pretty cool features.
https://zrok.io/
https://github.com/openziti/zrok
You can do tunneling, files and video sharing, and alot more.
#go #golang #opensource
the jail system call.
The jail() system call sets up a jail and locks the current process in
it.
The argument is a pointer to a structure describing the prison:
The jail() system call sets up a jail and locks the current process in
it.
The argument is a pointer to a structure describing the prison:
struct jail {
uint32_t version;
char *path;
char *hostname;
char *jailname;
unsigned int ip4s;
unsigned int ip6s;
struct in_addr *ip4;
struct in6_addr *ip6;
};RestorerRobot was updated.
Changes:
- Upgraded dependencies to their latest version.
An entirely free and automated bot for taking backups from certain databases in an interval.
(For now, only Postgresql and physical folders/files are supported. if I get in mood, I might add support for other types of databases as well.)
#go #golang #auomation #backup #bot
#opensource
Changes:
- Upgraded dependencies to their latest version.
An entirely free and automated bot for taking backups from certain databases in an interval.
(For now, only Postgresql and physical folders/files are supported. if I get in mood, I might add support for other types of databases as well.)
#go #golang #auomation #backup #bot
#opensource
Browse all public vulnerabilities
https://huntr.com/bounties/hacktivity
bug bounty platform:
https://huntr.com
huntr provides a single place for security researchers to submit vulnerabilities, to ensure the security and stability of AI/ML applications, including those powered by Open Source Software (OSS).
https://huntr.com/bounties/hacktivity
bug bounty platform:
https://huntr.com
huntr provides a single place for security researchers to submit vulnerabilities, to ensure the security and stability of AI/ML applications, including those powered by Open Source Software (OSS).
PostgreSQL 17 Released
Article, Comments
and here is the full release notes:
https://www.postgresql.org/docs/17/release-17.html
Article, Comments
and here is the full release notes:
https://www.postgresql.org/docs/17/release-17.html
PostgreSQL News
PostgreSQL 17 Released!
The [PostgreSQL Global Development Group](https://www.postgresql.org) today announced the release of [PostgreSQL 17](https://www.postgresql.org/docs/17/release-17.html), the latest version of the world's most advanced …
EDIT:
it's just CUPS
they hyped it too much
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/
A 9.9 CVE has been announced for Linux 👀 RCE (Remote code execution). No details yet. Heartbleed was 7.5, for reference. This is one of the worst in history. All GNU/Linux systems impacted.
it's just CUPS
they hyped it too much
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/
A 9.9 CVE has been announced for Linux 👀 RCE (Remote code execution). No details yet. Heartbleed was 7.5, for reference. This is one of the worst in history. All GNU/Linux systems impacted.
Create console histograms, bar graphs, tables, heatmaps and more in realtime using regex and expressions.
https://github.com/zix99/rare
#opensource #go #golang #tui
https://github.com/zix99/rare
#opensource #go #golang #tui
GitHub
GitHub - zix99/rare: Create terminal-based histograms, bar graphs, tables, heatmaps and more in realtime using regex and expressions.
Create terminal-based histograms, bar graphs, tables, heatmaps and more in realtime using regex and expressions. - zix99/rare
Halo games from now on will be developed on Unreal Engine:
https://m.youtube.com/watch?v=FDgR1FRJnF8 #UE5 #UnrealEngine
https://m.youtube.com/watch?v=FDgR1FRJnF8 #UE5 #UnrealEngine
YouTube
A New Dawn | Halo Studios
With multiple Unreal-powered projects in development, we're entering the next chapter of the franchise and changing the recipe for how we make Halo games.
Join members of the Halo Studios Team and go behind the scenes with “Project Foundry” – a multi-discipline…
Join members of the Halo Studios Team and go behind the scenes with “Project Foundry” – a multi-discipline…