Rebane's Avatar

Rebane

@rebane2001.bsky.social

πŸ‡ͺπŸ‡ͺπŸ³οΈβ€βš§οΈ | Archivist | 10 CVEs in Chrome | CSS sophomore | MapartCraft | Horse | rebane2001#3716 | Lyra 🦊 she/her https://lyra.horse/ @rebane2001@infosec.exchange

3,321 Followers  |  410 Following  |  925 Posts  |  Joined: 15.06.2023
Posts Following

Posts by Rebane (@rebane2001.bsky.social)

const x = // write anything here
console.log((x?0:x.length)?"flag{............}":"nope");

const x = // write anything here console.log((x?0:x.length)?"flag{............}":"nope");

js trivia challenge!
you can write anything on line one, how are you getting the flag?

i originally wanted to make this into a ctf chall, but it's a bit too "win by knowing 1 obscure trick" to be good

10.03.2026 14:44 β€” πŸ‘ 14    πŸ” 0    πŸ’¬ 3    πŸ“Œ 0

since you ignored my post pointing this out, i'll just leave you with the fact that more linux systems have sh than bash and more linux systems have [ than bash

09.03.2026 16:51 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

a little correction/clarification is that not every shell uses the [ binary as some replace it with a built-in, but you can always force it by doing /bin/[

09.03.2026 16:04 β€” πŸ‘ 14    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Cohost post by rebane2001

secret ssh menu (and other tricks)

hi cohost, ever get annoyed by ssh sessions hanging and forcing you to kill the process? it doesn't have to be this way, for there is a secret ssh menu the ssh industry has been greedily keeping for themselves!

so how do you access this menu? from within an ssh session, press ↡Enter and type ~?

you should see something like this:

Supported escape sequences:
 ~.   - terminate connection (and any multiplexed sessions)
 ~B   - send a BREAK to the remote system
 ~C   - open a command line
 ~R   - request rekey
 ~V/v - decrease/increase verbosity (LogLevel)
 ~^Z  - suspend ssh
 ~#   - list forwarded connections
 ~&   - background ssh (when waiting for connections to terminate)
 ~?   - this message
 ~~   - send the escape character by typing it twice
(Note that escapes are only recognized immediately after newline.)

pretty cool!

Cohost post by rebane2001 secret ssh menu (and other tricks) hi cohost, ever get annoyed by ssh sessions hanging and forcing you to kill the process? it doesn't have to be this way, for there is a secret ssh menu the ssh industry has been greedily keeping for themselves! so how do you access this menu? from within an ssh session, press ↡Enter and type ~? you should see something like this: Supported escape sequences: ~. - terminate connection (and any multiplexed sessions) ~B - send a BREAK to the remote system ~C - open a command line ~R - request rekey ~V/v - decrease/increase verbosity (LogLevel) ~^Z - suspend ssh ~# - list forwarded connections ~& - background ssh (when waiting for connections to terminate) ~? - this message ~~ - send the escape character by typing it twice (Note that escapes are only recognized immediately after newline.) pretty cool!

These sequences are built into the ssh client itself, so they work even if the ssh server or your connection breaks! The most useful one here is ~. which exits the ssh session no matter what. Super useful if you have a session hang!
The "command line" lets you set up port forwarding (type help after opening it). Most of the other options are pretty self-explanatory - if you need them you probably understand what they mean.

What about nested ssh sessions? You can use ~~ to send the sequence to the inner client, here's an example:

pinkie@stable:~$ ssh ponyvillestable
pinkie@ponyville:~$ ssh manehattenstable > ponyville
pinkie@manehatten:~$stable > ponyville > manehatten
pinkie@manehatten:~$ Connection to manehatten closed.↡Enter~~.
pinkie@ponyville:~$stable > ponyville
pinkie@ponyville:~$ ssh manehattenstable > ponyville
pinkie@manehatten:~$stable > ponyville > manehatten
pinkie@manehatten:~$ Connection to ponyville closed.↡Enter~.
pinkie@stable:~$stable
neat!

These sequences are built into the ssh client itself, so they work even if the ssh server or your connection breaks! The most useful one here is ~. which exits the ssh session no matter what. Super useful if you have a session hang! The "command line" lets you set up port forwarding (type help after opening it). Most of the other options are pretty self-explanatory - if you need them you probably understand what they mean. What about nested ssh sessions? You can use ~~ to send the sequence to the inner client, here's an example: pinkie@stable:~$ ssh ponyvillestable pinkie@ponyville:~$ ssh manehattenstable > ponyville pinkie@manehatten:~$stable > ponyville > manehatten pinkie@manehatten:~$ Connection to manehatten closed.↡Enter~~. pinkie@ponyville:~$stable > ponyville pinkie@ponyville:~$ ssh manehattenstable > ponyville pinkie@manehatten:~$stable > ponyville > manehatten pinkie@manehatten:~$ Connection to ponyville closed.↡Enter~. pinkie@stable:~$stable neat!

Okay, a few bonus tricks:

ssh -C enables gzip compression - even though the documentation states that this is unneccessary on fast networks, I've found that it does wonders for improving latency and responsiveness in many situations, especially when using TUIs or printing out lots of logs.
ssh -v enables verbose logging (-vv or -vvv if you want more), which is useful on a slow connection or when connecting to a slow machine (eg a Raspberry Pi). It lets you figure out whether a connection is hanging (eg host down) or just being slow.
ssh -D 1234 creates a SOCKS proxy on your localhost:1234 that lets you use the server's network. Quite handy if you need to mess around in the LAN of the server, or if you need a quick DIY VPN in a pinch.
alright that's all, i hope you picked up something useful from this post! it's my first time posting anything of this kind so i hope you like it!

Okay, a few bonus tricks: ssh -C enables gzip compression - even though the documentation states that this is unneccessary on fast networks, I've found that it does wonders for improving latency and responsiveness in many situations, especially when using TUIs or printing out lots of logs. ssh -v enables verbose logging (-vv or -vvv if you want more), which is useful on a slow connection or when connecting to a slow machine (eg a Raspberry Pi). It lets you figure out whether a connection is hanging (eg host down) or just being slow. ssh -D 1234 creates a SOCKS proxy on your localhost:1234 that lets you use the server's network. Quite handy if you need to mess around in the LAN of the server, or if you need a quick DIY VPN in a pinch. alright that's all, i hope you picked up something useful from this post! it's my first time posting anything of this kind so i hope you like it!

did you know that SSH has a little-known secret menu?

i wrote a post about this on cohost a while back, but since that site shut down i'm posting it here too

09.03.2026 16:00 β€” πŸ‘ 90    πŸ” 14    πŸ’¬ 3    πŸ“Œ 1

mhm, but you probably still have it in /bin/

09.03.2026 15:54 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

this is also why you need the spaces between everything as well as quoting - they're ordinary arguments and need to be provided as such

also note that many shells do actually have similar shell built-ins such as [[ ]] and (( )), which are not stand-alone programs like [ is

09.03.2026 15:46 β€” πŸ‘ 19    πŸ” 0    πŸ’¬ 2    πŸ“Œ 1

fun linux fact:
the `if` shell built-in just executes the command you give it and looks at its exit code

so how can you do stuff like `if [ $a -gt 10 ]`?

well, [ is just a program usually in /bin/[ that takes the arguments ($a, -gt, 10, ]) and returns an exit code accordingly

09.03.2026 15:41 β€” πŸ‘ 52    πŸ” 2    πŸ’¬ 6    πŸ“Œ 0
Post image

switched from stripe to opera gx??

08.03.2026 01:41 β€” πŸ‘ 83    πŸ” 8    πŸ’¬ 5    πŸ“Œ 0

is there some way to fix bluesky logging me out like every day

07.03.2026 12:01 β€” πŸ‘ 30    πŸ” 1    πŸ’¬ 7    πŸ“Œ 0

this is specifically in the context of clickers and puppygirl stuff, if you reply with a saucy joke on a random post you're good

07.03.2026 11:52 β€” πŸ‘ 15    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

i just wanna say that this account is not nsfw and whenever i talk about clickers and other such stuff it's not in a sexual context, replies of that nature make me uncomfortable and i will block them

07.03.2026 11:50 β€” πŸ‘ 39    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0

ooh, i didn't know, thanks!

05.03.2026 08:01 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

people say being clicker trained is weird and yet they freak out over the discord ping sound

04.03.2026 23:28 β€” πŸ‘ 324    πŸ” 51    πŸ’¬ 4    πŸ“Œ 3
Sylvie
i was also trying to play around with the base offset and couldn't figure out what tf the point of that was
why is it loaded at 0x100

Rebane
uh because uh
youre gonna love this

Sylvie
also it gets so so much slower if i increase the number of memory cells beyond like 0x700

Rebane
see i downloaded this strange program

[Image of an ancient-looking program called i8068]

and i couldnt figure out how to use it
but every time i loaded my binary it loaded at 0x100
so i was like
hmm
maybe i should load it at 0x100 in css too

Sylvie
lmfao
😭
just wasting 256 bytes of memory for No Reason

Sylvie i was also trying to play around with the base offset and couldn't figure out what tf the point of that was why is it loaded at 0x100 Rebane uh because uh youre gonna love this Sylvie also it gets so so much slower if i increase the number of memory cells beyond like 0x700 Rebane see i downloaded this strange program [Image of an ancient-looking program called i8068] and i couldnt figure out how to use it but every time i loaded my binary it loaded at 0x100 so i was like hmm maybe i should load it at 0x100 in css too Sylvie lmfao 😭 just wasting 256 bytes of memory for No Reason

rare x86css lore

04.03.2026 19:00 β€” πŸ‘ 74    πŸ” 2    πŸ’¬ 3    πŸ“Œ 0
Post image Post image Post image Post image

more pics!

04.03.2026 10:44 β€” πŸ‘ 8    πŸ” 1    πŸ’¬ 1    πŸ“Œ 0
Post image Post image Post image Post image

more pics!

04.03.2026 10:44 β€” πŸ‘ 8    πŸ” 1    πŸ’¬ 1    πŸ“Œ 0
Post image

it works!!

04.03.2026 10:34 β€” πŸ‘ 5    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0
Say hello to direct messaging on YouTube
Now you can send and reply to videos witho leaving the app. People who open your links can see and message your channel.
(link) See privacy settings.

Say hello to direct messaging on YouTube Now you can send and reply to videos witho leaving the app. People who open your links can see and message your channel. (link) See privacy settings.

apparently if i send youtube links it lets you send me messages now? anyone wanna try?

youtu.be/m9sENFZcfpw?...

04.03.2026 10:18 β€” πŸ‘ 25    πŸ” 1    πŸ’¬ 8    πŸ“Œ 1
Wikipedia article: Qrpff

This article relies excessively on references to primary sources. (September 2011)

qrpff is a Perl script created by Keith Winstein and Marc Horowitz of the MIT SIPB. It performs DeCSS in six or seven lines. The name itself is an encoding of "decss" in rot-13. The algorithm was rewritten 77 times to condense it down to six lines.

Wikipedia article: Qrpff This article relies excessively on references to primary sources. (September 2011) qrpff is a Perl script created by Keith Winstein and Marc Horowitz of the MIT SIPB. It performs DeCSS in six or seven lines. The name itself is an encoding of "decss" in rot-13. The algorithm was rewritten 77 times to condense it down to six lines.

it performs decss in HOW MANY LINES??

02.03.2026 09:19 β€” πŸ‘ 103    πŸ” 5    πŸ’¬ 5    πŸ“Œ 0
Post image

has buy now pay later gone too far??

28.02.2026 22:33 β€” πŸ‘ 86    πŸ” 6    πŸ’¬ 1    πŸ“Œ 0
Video thumbnail

why does google change the color shade of their background every other time i tap the "see more" button???

27.02.2026 16:17 β€” πŸ‘ 29    πŸ” 0    πŸ’¬ 3    πŸ“Œ 0
Google notification on a phone: Tom's Hardware - Enterprising developer somehow writes an x86 CPU emulator in plain CSS β€” no Javascript, no WASM, just ...

Google notification on a phone: Tom's Hardware - Enterprising developer somehow writes an x86 CPU emulator in plain CSS β€” no Javascript, no WASM, just ...

i just got a notification for my own project?

26.02.2026 16:34 β€” πŸ‘ 174    πŸ” 1    πŸ’¬ 2    πŸ“Œ 0
Windows' "Keep these display settings?" dialog upside down

Windows' "Keep these display settings?" dialog upside down

this menu NEEDS an "i switched to vertical but meant to switch to vertical (flipped)" button

26.02.2026 11:36 β€” πŸ‘ 47    πŸ” 0    πŸ’¬ 4    πŸ“Œ 0

i have not made any video about this

26.02.2026 09:32 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

i personally think a programming language doesn't need to be able to run complex logic to be one, but it's really difficult to convince people of that so it's just easier to make it run x86 assembly instead

25.02.2026 16:35 β€” πŸ‘ 88    πŸ” 5    πŸ’¬ 4    πŸ“Œ 1

new stackoverflow site looks like slop

25.02.2026 12:57 β€” πŸ‘ 66    πŸ” 9    πŸ’¬ 10    πŸ“Œ 0

i'm curious, what was it? ^^

25.02.2026 09:46 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

i think faq-s should be written in a way where you can read through them like a story if you're bored

24.02.2026 17:25 β€” πŸ‘ 34    πŸ” 1    πŸ’¬ 1    πŸ“Œ 0

bsky.app/profile/reba...

24.02.2026 17:21 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

well no, that's easy, you just do contain:strict and nothing can get out

24.02.2026 17:20 β€” πŸ‘ 12    πŸ” 1    πŸ’¬ 1    πŸ“Œ 0