Philip Silva

@silva.ph

465 Followers 417 Following

Freelance Software Engineer based in Berlin Working with Web, Go, Linux (also interested in OpenBSD, Plan 9) silva.ph

Phishing E-Mail using Github issue notification through mention redirecting
Animated Christmas tree with falling snow in the terminal from https://github.com/sontek/snowmachine ``` * * * * * * * * * * * * * * * * * * o * * *** * ***** *o****o * * ********* * *******o**o * mmmmmmmmm mmmmmmmmm * * * * * * * * * * *mmmmmmmmm* * * * * * * * * * * * ```
Go example that imports a library with a vulnerable accept header parser function from 2020. It uses the reflect package to call it. Running govulncheck in binary mode results in finding 2 vulnerabilities. Source code: ``` $ cat main.go package main import ( "golang.org/x/text/language" // v0.3.4 (2020) "reflect" ) func Main() { language.ParseAcceptLanguage("00-t-0o") } func main() { reflect.ValueOf(Main).Call([]reflect.Value{}) } ```
log_format no_ip_ua '$time_local "$request" $status $body_bytes_sent "$http_referer"'; access_log /var/log/nginx/access.log no_ip_ua;