Discover gists

ZSH (using Oh My ZSH) on Manjaro Linux

0. If `ZSH` is not already installed on your Manjaro system you can do it with the command:

sudo pacman -Syu zsh

You do not need to install manjaro-zsh-config and all the other related packages like zsh-syntax-highlighting, zsh-history-substring-search, zsh-autosuggestions, etc., as we will use Oh My Zsh.

StegoPVD

This Tinyscript-based tool allows to apply steganography based on PVD (Pixel Value Differencing) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegopvd

Add Git Branch Name to Terminal Prompt (zsh)

Updated for MacOS with zsh

Catalina
Big Sur
Monterey
Ventura
Sonoma

How to install OCI8 on macOS 10.15 (Catalina) with PHP 7.3 or 7.4

Requirements

Homebrew
Command Line Tools for Xcode
PHP 7.3 or 7.4 via Homebrew

Preparation

How to install OCI8 on macOS 12.5 (Monterey) M1 Processor

Note
If your using macOS Ventura or Sonoma, please refer to How to install PHP OCI8 for macOS Ventura/Sonoma on Apple Silicon Macs

Please note that all installations below must use Terminal with Rosetta:

Homebrew Intel Mac Version
PHP 8.1 or 8.0
OCI8 extension

How to install PHP OCI8 for macOS Ventura/Sonoma on Apple Silicon Macs

Note
If your using macOS Monterey or below, please refer to How to install OCI8 on macOS (Monterey) M1 Processor with PHP 8.1

macOS Ventura and above, duplicating and renaming Terminal.app are disabled by Apple. In order to install the OCI8, we need to switch between arm64 and x86_64 architecture.

Install Rosetta

In Terminal, there is no automatic detection for missing Rosetta to run older architecture command line tools.

Upgrade Debian 9 (current WSL) to Debian 12 (bookworm testing)

Note: I do not maintain this gist anymore, but people report that it still works. Please check the comments for any revisions or extra things you should take into consideration.

As of writing, the Debian distro for WSL (Windows Subsystem for Linux) is quite old.

You can get more up-to-date package managers, text-editors and compilers by upgrading WSL to Debian 12 (current testing).

Root required

Use at your own risk, preferably on a fresh installation.

StegoPIT

This Tinyscript-based tool allows to apply steganography based on PIT (Pixel Indicator Technique) in order to retrieve hidden data from an image.

$ pip install tinyscript
$ tsm install stegopit

APSB23-50

https://helpx.adobe.com/security/products/magento/apsb23-50.html

Privilege Escalation

The vulnerability with the highest CVSS score of 8.8 (CVE-2023-38218) states that it is an unauthenticated privilege escalation due to improper input validation.

If we look at the diff we see a number of security related changes. One of those changes is the following in Magento\Customer\Plugin\Webapi\Controller\Rest\ValidateCustomerData::validateInputData:

	Github.com ui .currently does not natively supoport search for multiple topic tags as of now. However their api allows you to query multiple tags. Below is a simple example to query github.com with ecs and go topic tags.

	curl -H "Accept: application/vnd.github.mercy-preview+json" \
	https://api.github.com/search/repositories?q=topic:ecs+topic:go

	Response from the github can be rather verbose so lets filter only relavant info such repo url and description.

	curl -H "Accept: application/vnd.github.mercy-preview+json" \
	https://api.github.com/search/repositories\?q\=topic:ecs+topic:go \| jq '.items[] \| {url:.url, description:.description}'