Posts

  • safety-db

    A curated database of insecure Python packages

    Safety DB is a database of known security vulnerabilities in Python packages. The data is made available by pyup.io and synced with this repository once per month. Most of the entries are found by filtering CVEs and changelogs for certain keywords and then manually reviewing them.

    Tags: #python

  • FirmAE

    Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

    FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate (From Firmadyne’s 16.28% to 79.36%) with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images from top eight vendors.

    We also developed a dynamic analysis tool for 0-day discovery, which infers web service information based on the filesystem and kernel logs of target firmware. By running our tool on the succesfully emulation firmware images, we discovered 12 new 0-days which affect 23 devices.

    Tags: #python • emulation • firmware

  • ServerListPlus

    A flexible Minecraft plugin to customize the appearance of your server in the server list

    Important Notice

    ServerListPlus is no longer receiving new features and is only updated to fix bugs or compatibility issues. Contributions are welcome! If you are happy with ServerListPlus, you can continue using it.

    ServerListPlus is an extremely customizable server status ping plugin for Minecraft. It provides an easy-to-use configuration for almost everything possible using the server status ping. The plugin aims to become the universal solution for server status ping customization, available for:

    • Bukkit/Spigot/Paper/Folia
    • BungeeCord
    • Velocity
    • Sponge
    • CanaryMod

    ServerListPlus is also available as standalone server that can be used independent from other server implementations e.g. during maintenance.

    Tags: #java • minecraft • bukkit

  • docker-api

    A lightweight Ruby client for the Docker Remote API

    Follow the installation instructions, and then run:

    $ sudo docker -d
    

    This will daemonize Docker so that it can be used for the remote API calls.

    Tags: #ruby

  • mibew

    Mibew Messenger - open-source live support application

    Mibew Messenger is an open-source live support application written in PHP and MySQL. It enables one-on-one chat assistance in real-time directly from your website.

    Tags: #php • mysql • messenger

  • automon

    Automon combines the power of AOP (AspectJ) with monitoring or logging tools you already use to declaratively trace and monitor your Java code, the JDK, and 3rd party libraries.

    1. What is Automon?
    2. Why Automon?
    3. Key Features
    4. What are Automon’s dependencies?
      • AspectJ
      • SLF4J
      • Monitoring tools
    5. Tutorials
    6. How does Automon work?
    7. What are some examples of what Automon can do?
      • Monitoring
      • Tracing
    8. Automon Source Code
    9. Glossary
    10. Support

    Tags: #java • aspectj • monitoring

  • Sniffle

    A sniffer for Bluetooth 5 and 4.x LE

    Sniffle is a sniffer for Bluetooth 5 and 4.x (LE) using TI CC1352/CC26x2 hardware.

    Sniffle has a number of useful features, including:

    • Support for BT5/4.2 extended length advertisement and data packets
    • Support for BT5 Channel Selection Algorithms #1 and #2
    • Support for all BT5 PHY modes (regular 1M, 2M, and coded modes)
    • Support for sniffing only advertisements and ignoring connections
    • Support for channel map, connection parameter, and PHY change operations
    • Support for advertisement filtering by MAC address and RSSI
    • Support for BT5 extended advertising (non-periodic)
    • Support for capturing advertisements from a target MAC on all three primary advertising channels using a single sniffer. This makes connection detection nearly 3x more reliable than most other sniffers that only sniff one advertising channel.
    • Easy to extend host-side software written in Python
    • PCAP export compatible with the Ubertooth
    • Wireshark compatible plugin

    Tags: #python • ble • bluetooth

  • react-native-alipay

    基于 React Native 的宝支付包,已更新到最新的支付宝 SDK 版本,支持Android/iOS。

    1. Android:支持2.3及以上的系统版本运行。
    2. iOS:iOS 6.0以上(包含iOS 6.0)。
    3. 支持手机系统:iOS(苹果)、Android(安卓)。
    4. 调试请注意 支付宝接入应用必须 已审核通过 状态。
    5. 支付宝开放平台-管理中心,签约 APP支付APP支付宝登录 功能。
    6. 适用于 react-native >= 0.60+ 低版本未测试。
    7. AlipaySDK 15.7.7 已更新到最新的支付宝 SDK 版本。
    8. URL Schemes 要以字母开头不能为纯数字。

    Tags: #java • react-native • reactjs

  • lawoole

    Lawoole is a high-performance PHP framework based on Laravel and Swoole

    Lawoole is a high-performance PHP framework based on Laravel and Swoole.

    Laravel is the most popular PHP framework. It is dedicated to helping developers write the most elegant and meaningful code, and also provides a wealth of functions to developers through the ecological chain.

    As we all know, Laravel’s biggest flaw is the performance problems behind its rich features. Lawoole was born to solve this problem. By using Swoole as an infrastructure, it not only enhances the efficiency of network communication, but also avoids the consumption of repeated compilation. At the same time, Lawoole did not sacrifice the outstanding features of Laravel. In Lawoole, you can have a development experience consistent with Laravel and write creative code.

    Lawoole is different from other Swoole-based frameworks in that it does not seek performance, but rather seeks a balance between a comfortable code writing environment and the efficiency of program execution. Lawoole does not admire those who sacrificed code readability and wrote hard-to-maintain and error-prone code.

    Thank for the shoulders of giants:

    Tags: #php • lawoole • laravel

  • workers-graphql-server

    🔥Lightning-fast, globally distributed Apollo GraphQL server, deployed at the edge using Cloudflare Workers

    An Apollo GraphQL server, built with Cloudflare Workers.

    Whether you host your APIs on-prem, in the cloud, or you’re deploying databases to Cloudflare directly, you can deploy a globally distributed GraphQL server with Cloudflare Workers.

    Tags: #typescript • serverless • graphql

subscribe via RSS