Skip to content

Instantly share code, notes, and snippets.

@kidd0123
kidd0123 / . steam_overlay_clear.bat
Created August 17, 2024 05:53 — forked from AveYo/. steamwebhelper_min.bat
Steam minimal resource usage after removal of -no-browser & -vgui options. Enter script in powershell then use Steam_min shortcut on Desktop instead
@(set "0=%~f0"^)#) & powershell -nop -c iex([io.file]::ReadAllText($env:0)) & timeout /t 7 & exit /b
# CLEAR THOSE ANNOYING MEDIA PLAYING STEAM OVERLAY BROWSER WINDOWS YOU FORGOT ABOUT - BY AVEYO
$found = $false; $utf8 = new-object Text.UTF8Encoding $false
$userdata = join-path (gp HKCU:\SOFTWARE\Valve\Steam SteamPath -ea 0).SteamPath 'userdata'; pushd $userdata;
dir -rec -file localconfig.vdf |% {
$cfg = $_; $data = [io.file]::ReadAllLines($cfg, $utf8); $ok = $true
if (($data |% {$_ -like '*OverlaySavedData*'}) -notcontains $true) { echo "$cfg : no steam overlay saved data"; $ok = $false }
if ($ok) { if (get-process -name Steam -ea 0) { start -wait "$(split-path $userdata)\Steam.exe" -args '-shutdown' } }
@kidd0123
kidd0123 / spring4shell.md
Last active March 31, 2022 23:23
Understanding spring4Shell Severity

I have done a bit more research on the vulnerability itself and want to share the details in writing to better help my own understanding of the vulerability - before you read further two things

  • My java knowledge is extremely dated.
  • Everything I mention here is already explained in other blogs but its more of a summation and simplification.

When you use spring-boot to build a web application you can take the request parameters (POST) and convert that into an object for easy access. (Java being an Object oriented programming language it makes sense to do this)

Java doesn’t natively support json so they can Jackson or other ways (a library to convert things to json). But it also gives the ability to convert it into a regular java object. These are called POJO ( abbr for plain old java code)

You can do this in spring-boot using @RequestMapping annotation See this example from lunasec blog post.

update and install

sudo yum update
sudo yum info docker
sudo yum install docker

Do you need docker compose

wget https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m) 
sudo mv docker-compose-$(uname -s)-$(uname -m) /usr/local/bin/docker-compose

Make it real

Ideas are cheap. Make a prototype, sketch a CLI session, draw a wireframe. Discuss around concrete examples, not hand-waving abstractions. Don't say you did something, provide a URL that proves it.

Ship it

Nothing is real until it's being used by a real user. This doesn't mean you make a prototype in the morning and blog about it in the evening. It means you find one person you believe your product will help and try to get them to use it.

Do it with style