unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
Production deploy time checks with GitLab CI
BackgroundAt the company, a lot of projects have a hard rule for production deploys: Thursday and F...
2019-7-6 08:10:32 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
ship
gitlab
stages
ideally
busybox
Webm progress bar issue, analysis and a fix
IntroWhen we generate a webm with getUserMedia, MediaRecorder, and similar APIs, the resulting webm...
2019-5-21 07:30:21 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
webm
duration
ffmpeg
rebirth
eng
Listen for page crashes with the WebKit remote debugging protocol
BackgroundI’m working on a project that uses puppeteer. One feature opens multiple Tabs in the Chro...
2019-4-22 07:51:25 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
puppeteer
remote
inspector
client
crash
Error retry in RxJS
IntroI recently had a requirement: if a request times out, retry it, and the retry count should be...
2019-1-12 10:52:5 | 阅读: 3 |
收藏
|
Black-Hole's Blog - bugs.cc
retry
retrywhen
acc
curr
rxjs
Reading notes: From Lucene to Elasticsearch: full-text search in practice
These notes only cover the search parts of Elasticsearch.All searches in this post were run in kib...
2018-12-30 14:52:5 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
编程
python
wildcard
phrase
Integrating Sentry with JavaScript
Sentry-JavaScriptSentry is an open-source project for capturing product errors. It supports many l...
2018-8-24 01:16:33 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
sentry
crash
colno
errorobj
Analyze the axios source to find out why you can't use all and spread
IntroIf you create axios with axios.create({}), you will find you cannot use all, spread, Cancel, C...
2018-4-14 05:37:29 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
axios
cancel
iscancel
canceltoken
eslint
Some thoughts on implementing image drag-and-drop and paste with vue-simplemde
IntroThe project uses Vue and needed a markdown editor. I looked on npm, found simplemde (opens in...
2018-4-12 03:0:12 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
simplemde
datalist
axios
codemirror
drag
Run a qcow2 image in VMware
IntroFor some reason I needed to run a qcow2 image on my laptop. Standing up an OpenStack platform...
2018-1-23 01:12:31 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
qcow2
vmdk
chose
download
youtube
Add a unified operation extension to Promise
IntroES6 added Promise. A Promise only has two callback methods: then and catch.Later, Promise als...
2018-1-6 09:34:21 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
unified
reject
es6
ruanyifeng
awkward
Some NumPy, Pandas, and Matplotlib APIs
NumPyImportimport numpy as npAPICreate arraynp.array([10, 11, 12, 13])# [10 11 12 13]np.array([...
2017-11-12 13:4:48 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
k0
np
pd
k1
dataframe
pm2 configuration for Vue+Koa
BackgroundThe stack I am using is: Vue on the frontend, Koa on the backend, Mongodb as the database...
2017-11-7 13:37:0 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
pm2
koler
koa
hot
hh
Some ideas based on URLProtocol attacks
Browsers launch local apps through URLProtocol.1Under the [HKEY_CLASSES_ROOT] registry key, you can...
2017-3-26 08:33:52 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
aliwangwang
touid
wwcmd
aliim
sendmsg
Automated XSS intranet invasion
0x01 PrefaceA lot of people think XSS can only steal cookies. Some SRCs and vendors ignore reflecte...
2016-12-14 14:40:25 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
ipajax
intranet
scripttag
onlystring
Company Wi-Fi security
0x0 PrefaceA lot of companies have no security team. Ops owns all of security, so security takes a...
2016-12-13 03:0:48 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
security
intranet
attacker
1x
802
Browser plugin attack vectors
0x0 PrefaceI have said “browser plugin attack methods” in many places. This post walks through the...
2016-10-5 12:35:52 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
maxthon
download
download1
How to log in to Thunder under Debian
IntroToday I saw someone share the movie “Now You See Me 2” on Qzone.mongoose has been annoying m...
2016-8-24 05:8:47 | 阅读: 2 |
收藏
|
Black-Hole's Blog - bugs.cc
thunder
captcha
wine
download
movie
Notes on bypassing WAFs (Web Application Firewalls)
0×01 IntroThis talk is mainly about a way of thinking, not handing you ready-made code.In many peo...
2016-8-20 11:4:31 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
webkit
php
bypass
carriage
lexer
Automated CSRF detection (part 2)
0x00 IntroThe previous post only sketched the idea and the flow. This one goes into how to actuall...
2016-6-23 15:49:34 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
actioncache
actionpath
formdom
chrome
Automated CSRF detection
0x00 IntroI previously wrote an automated XSS detection extension. Today, an automated CSRF detect...
2016-6-15 12:49:37 | 阅读: 1 |
收藏
|
Black-Hole's Blog - bugs.cc
imgsrc
formdom
outerfor
placeholder
Previous
2
3
4
5
6
7
8
9
Next