DEV Community: Ansari

Terminal TOTP Manager

Ansari — Tue, 20 Jun 2023 18:36:56 +0000

Attention all developers! Are you tired of juggling between your terminal and Google Authenticator whenever you need to login to SSH or other platforms with a Time-Based One-Time Password (TOTP)? Well, fear no more! I present to you Terminal TOTP Manager, the superhero tool that saves the day by bringing TOTPs right to your command line. Let's dive into this epic tale of laziness turned innovation and discover how this handy tool can revolutionize your developer life.

Embracing the Developer's Lair:

As developers, we spend countless hours in our terminal caves, crafting lines of code that shape the digital world. But those pesky TOTPs often disrupt our flow, forcing us to venture out of the terminal to retrieve them from external apps. Terminal TOTP Manager comes to the rescue, eliminating the need for such distractions. Now you can manage your TOTPs without leaving the sacred realm of the terminal.

My Mind: You should quit programming and join sales😂

Long story short, I was so frustrated jumping between authenticator app & terminal for totps and also wanted to know how TOTPs actually work. Instead of reading articles or watching youtube videos, I directly went to RFC for docs,read it and build a small tool that manage the TOTP in the terminal itself.

If you found this tool interesting or wanna check out how it works.
Here's the repo link 👉🏻 link - A star could make my day 😁😁

You can also directly install it by pip
pip install pyttm

You can follow me on Twitter - Ansari

The Leet Code Journey

Ansari — Thu, 20 Oct 2022 09:39:15 +0000

Data Structures are necessary for designing efficient algorithms and to write code efficiently. I wanted to brush up my DS skills, so I'm challenging myself to solve DS Problem as much as I can on weekly basis and share it in this community. If you're much interested on how algorithm works and want to develop your DS skills join the journey with me.

Problem 1 :

Given an array of integers nums and an integer target, return indices of the two numbers such that they add up to target.

Example :
Input: nums = [2,7,11,15], target = 9
Output: [0,1]
Explanation: Because nums[0] + nums[1] == 9, we return [0, 1].

What most would do:

After reading the problem instantly, we wrote a nested loops and found the right pair for the answer.I did the same and run the code.

It was success the problem has been solved but the result looked terrible. It was like operation success but patient died.

Literally that was ~2s which is not at all a efficient code. So instead of using nested loops I used hashmap.

Now the result looked like this 👆,which was insane. So just by using hashmap, the code was nearly 67 times faster than the previous one.

If you want to learn more and know such interesting thing follow me and join the journey.

Simple JavaScript Number formatting Method

Ansari — Thu, 22 Sep 2022 10:54:38 +0000

Every big social media sites format their numbers the same way like 93.1K followers 1M subscribers or 2.5B views, they do this because it’s much easier to design a UI with a compact number.

To format numbers like this you might think you need to write a function with a bunch of conditional logic or find a package on npm to do it for you. But actually you can do it natively in javascript with the intel or internationalization api it has excellent browser support.

Create a number formatter that first takes the locale language (“en”) then an object with a bunch of options like notation compact which will round the number and replace the last digits with a K M B or T to easily giving you the social media style format

There’s even experimental support for different rounding modes the bottom line is that if you’re ever formatting numbers on a website the internationalization api is likely the tool you’re looking for.

If you found this article useful make sure to follow me for more interesting small programming hacks.

Twitter Handle : AmSorry

Python to ease your life !!

Ansari — Sat, 17 Sep 2022 07:23:51 +0000

Many people are still out there working from home, there is no denying that you never procrastinate while working from home. Surely you will do and mostly you just move the mouse pointer just for the sake of keeping alive of your work status.

Some people do them manually and I wondered whether there are any device for this particular job and I also doubted who's gonna buy these types of devices. So I did a random search amazon and came across these surprising results.

I was shocked to see that lot of people are really buying these devices when you can do it by simply writing few lines of code and running it.

So here is a simple guide for people to make their own mouse jiggler.

Requirements :

Install python3 — https://www.python.org/downloads/
Install pip — use this doc https://pip.pypa.io/en/stable/installation/
After that install the package pyautoguipip install pyautogui

That’s it, this will do the job

Open any text editor of your choice and just copy paste the code and save as jiggler.py

Now run python jiggler.py

This will automatically move your mouse every 3 second.

You can tweak and play with the code.

If you like this article consider following.

Twitter Handle — AmSorry

Setting VSCode in Tablet/Phones

Ansari — Sun, 07 Aug 2022 14:59:00 +0000

Here’s how the story begins. I was working in a well reputed product based company as an fullstack developer. One day when i took WFH cause I was so tired that morning, my bed never allowed me out. But, my bad time within few hours the server crashed and my manager told to check the issue as soon as possible. So i turned on my laptop, then this happened…

My Laptop battery was about to die. On top of this, It was electricity maintenance hour. Even though the issue might be so simple to fix and update the server. I couldn’t do it. I thought I was screwed.

Suddenly an idea popped. I thought why can’t I setup my tablet as temporary machine for small bug fixes like this. So this what i did..

I pulled my tablet out. Searched whether anything up on internet to setup a vscode in tablet/phones. Then i came across code-server which was open source tool for setting up vscode in your phone. As am also familiar with termux i followed the instructions and then got access to vscode and fixed the issued and updated. All this setup took was about 15 mins and I was ready to go.

If you love watching video instead following through article checkout it here and don’t forget to subscribe 😁

These were the steps I followed:

Install the termux app directly from github since playstore app was outdated and stopped the updates.
Then use this command to update the repositories and install proot-distro pkg update -y && pkg install proot-distro -y
Now lets install debian distribution with this command and login to it proot-distro install debian && proot-distro login debian
If error occurs while updating the packages try switching the repo with this command termux-changer-repo
Once the debian os is set after that we should update the repo and install nvm from the source and install node from it and then install the code-server from the respective site. It was annoying to follow these right ?
So I wrote simple bash script so that it will do everything with single command curl https://raw.githubusercontent.com/The-Robin-Hood/Useful-Python-Script/main/code-server.sh | bash
That's it, everything is set. We ready to up the server code-server will up the server
Initially it will create config file ~/.config/code-server/config.yaml
Change , Copy or Delete the authentication from there.
To Delete the authentication, set the auth to none and remove the password line
To make available across devices on same network, set the bind-addr as follow

Now restart the server and visit the localhost:8080 to enter the vscode
Add the site to Home screen for easier access.

Well now no worries when your laptop died or while traveling without your laptop. You could code from your tablet/phone.

If you like the article and wish to read more like this. Don’t hesitate to hit the follow button and a like would be much appreciated 😅

Hacking and Getting Remote Access with PIP

Ansari — Mon, 25 Jul 2022 15:43:28 +0000

RCE with pip ? Yes you read it right.

First before getting our hands dirty, lets see what is pip
Most Python developers would obviously knows what is pip.
For other developers, pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. It is npm, apt, homebrew (Some other package manager you name it) for python.

How does it works

Let's assume you wanna send http request from python well you could use famous package name requests
To get requests package on your computer, you will using the command :
pip install requests That's it.
This will install the package and you can use the package can be used by importing the package.

So how the pip install works, Simple it gets the source code from the server and execute the script in your computer and install the requirements, this is how pip install works.

What if you write your own reverse shell package ?

That's what I did, I wrote a package which allows the attacker to get the reverse shell of the victim.
I didn't want to make a global reverse shell thing, so i simply wrote the script to be executed on locally on the machine.

Here's the demo video check it out: Link
The package is available: Link

First listen on 1234 port with nc nc -lvp 1234
Now install the package pip install pip-remote-access

Now the listener will get the reverse shell.

How to prevent this ?

This module is to show and create a awareness among developers, So when installing package verify that it is legal verified publisher.
PyPi.org doesn't checks the github page whether it was the appropriate right developer, It just get whatever github the developer gives and displays the stars and forks from it.
So better get into the github page of the package and check the page, this way you also get to know the code.
Install the package with binary only mode it will be much more safe.

Explaining Markdown like you are five

Ansari — Sun, 17 Jul 2022 09:05:05 +0000

Technical Explanation:

Markdown is a lightweight markup language for creating formatted text using a plain-text editor. John Gruber and Aaron Swartz created Markdown in 2004 as a markup language that is appealing to human readers in its source code form

Markup refers to data included in an electronic document which is distinct from the document's content in that it is typically not included in representations of the document for end users, for example HTML is a Markup language.

For Example, Lets assume the below code will be written by developers

<html>
<h1> This is Head </h1>
</html>

But the output will be like this 👇🏻

The end user won’t be seeing the tags written by the developers, they only seeing the outcome.

So Like HTML, Markdown also a markup language where it uses the extension .md

Example :

Text can be ****bold****, _italic_, or ~~strikethrough~~.

Text can be bold, italic, or ~~strikethrough~~.

[Link to another page](./another-page.html).

Link to another page

You can refer this link for basic syntax of markdown: Link

Why Should I use it?

1. It’s Easy to Learn and Fast to Use

Markdown is dead simple to learn. So typing Markdown is almost always faster than writing with a rich text editor, especially when you start getting into things like links or bulleted lists, which either make you use the mouse or force you to memorize a complicated sequence of keyboard shortcuts. One caveat is that if you need complicated text elements, such as tables, you’re better off sticking to HTML. Fortunately, Markdown has full HTML support, so you can code a table in HTML and go right back to Markdown in the same document.

Plus, it’s much easier to read raw Markdown than it is to read raw HTML. Which, you know, was part of the reason Markdown was even invented.

2. It Converts to HTML Easily

Now, if you’re going to be writing HTML, you should just…write HTML. But if you’re, say, writing an email or a readme file where you need HTML’s formatting options but not the full breadth of its features, Markdown is perfect.

Markdown converts to HTML flawlessly, sparing you the hassle of opening and closing all those tags. In fact, Markdown has the software to convert the plain text to HTML built in! So Markdown is actually a text-to-HTML conversion software in addition to being a markup language.

In fact, Markdown has the software to convert the plain text to HTML built in! So Markdown is actually a text-to-HTML conversion software in addition to being a markup language.

3. Markdown is Futureproof

By “futureproof,” we mean that Markdown is a plain text format. For as long as plain text is the standard (which it will be for a long, long time), Markdown will be usable and openable by modern programs.

Ok enough of Technical explanation lets explain to a 5 years kid.

“Hope you have written something in your notebook, Sometimes you want to highlight some text or want to underline some phrases and you want to do some decoration over the overall context so that the understanding will be much easier. That is what the Markdown does for you.”

Hacking Google 😻

Ansari — Thu, 16 Jun 2022 13:14:31 +0000

On seeing the title of the article, Many people would be wondering
“Man seriously you gonna hack the google ?”
For those people my answer would be.

Then What is this article about ? First Lets define Hacking.

Hacking can be simply defined as making a product to work in much more effective or efficient way / a strategy or technique that changes the use of a product to make some other process work other than which it is designed for.

We aren’t gonna get unauthorised access to google database, Well most people doesn’t need or care about it and also that much potential,layman doesn’t posses.So in our day to daily life, at least once we google search from child to old age people, they would search for something. Without it, It will be really hard for us to know some info instantly. Here lets see those hacks/tricks to use google search in efficient.

Hold on ! Hold on ! Not fan of reading article then might wanna check the video here LINK 😻

HACK #1 : Exact Phrase

If you are looking for a exact phrase or words in google search. That must be exactly the same as you type. Then just add quotation before and after the word and search.

Example - “ IS HACKING ILLEGAL ?”

Now google engine fetches for the exact match and shows only those match in the result.

HACK #2 : Definition

Most students would be searching for definition of certain things and sometimes they might be ending up with google overwhelming behaviour that giving a lot information which is not required by a student.

The student might just want the definition for the word. On such cases you could add “Define:” before the word which is you are looking for.

Example - Define: Engineering

HACK #3 : Time Range

This hack is for people who are into research, writing their thesis and collecting information from various periods of time. To search a topic in a particular time period you could use this hack.
First enter your topic,then starting year followed by two dots and ending year

Example - Recession 2007..2009

By searching this way google shows only results only with the particular time range.

HACK #4 : Site Fetching

Sometimes you will be looking for a people or searching for a topic in specific site like Medium,Instagram, Twitter etc.
For those cases you can use this hack. Enter “search:” followed by respective site and finally the search topic

Example - search:medium.com therobinhood

This way google fetches the word in that particular site and shows the result.

HACK #5 : File Type

Next hack to filtering a particular file type through simple search.
For example lets assume you are looking for book in PDF format
in that case to get the book easily in PDF format search like this.
First type “filetype:pdf” followed by the book name

Example - filetype:pdf Wings of fire

then google results will be filtered with only PDF results and this trick can be applied for any other file types too.

Bonus Hack : Downloading Movies

Final bonus hack my favourite one. Most of times you would be looking for little old Hollywood movies or series and you would be searching google and at those times it will shows some link which keeps us redirecting somewhere.
which is frustrating. To avoid this, you can use this hack.
Just add “index of ” before whatever movie or series you are looking for.

Example - index of Avengers Endgame

Most of all the first link will give you the direct link to download the movie or series and don’t look for recently released movies. Mostly it won’t be available.
Other than that it is one of the best hack of google.

If you come down this much, then a like and follow would be much appreciated 😁😁

7 Most Useful Apps - 2022

Ansari — Sat, 02 Apr 2022 10:32:43 +0000

Another day, another month, another new way to look for cool apps. Some of these apps provide and can add value to your life, changing little things on progress to your productive schedules.

Watch the video here 👉 Link

AnyTracker:

This app is exactly as it sounds. It helps you to track anything, yes, anything! Wanna go for a jog? Need to check your investments? Does your shopping cart need price tracking? This app does it all.

It is based on a tracking technology that works with text change. So, anything involving a change of user interface or content in it, it will be able to portray the change to you. The best part is that you can access your old tracking history along with a cool widget that you can add to your home screen. Pretty handy!

Alarmy:

There is nothing in this world that we can hate so much for no reason as the first alarm in the morning. Countless Snoozes and rage quit on keeping alarms are now a thing of the past, thanks to Alarmy. Alarmy helps you to be awake by having unique systems to keep you from falling asleep again.

Alarmy has a pragmatic approach to make you awake. Snoozing your alarm requires an activity that you must perform (usually takes less than 5 minutes) in order to shut your alarm down. That's the magic trick! Once you are sober enough to do the activity, you automatically get awake and you can successfully carry on your day.

DroidCam:

Ever had a need for a Webcam for your PC but you couldn't get your hands on one due to various reasons? DroidCam for the rescue. This app lets you to convert your Android device into a Webcam that you can use for your PC. It also comes with various premium features such as great video quality, microphone noise cancellation, and the ability to record along conserving battery even when the screen is off.

And the best part? It's free!

Animixplay:

Movies and TV shows aren't the only ways to watch and enjoy entertainment. Ever wondered what the world of anime looks like? Animixplay lets you watch all kinds of shows that Anime has to offer while maintaining a clean user interface and easy navigational features. If you thought Anime was for kids, watch a few good shows along with the best compatible features of Animixplay and you would have to think otherwise!

The list goes on and on. But a few handy features include the ability to download any episode you wish while choosing the quality at your own disposal. All in One!

Harpy:

Gone are the days when a Tweet would get stuck under a mountain of other tweets from other personalities. Harpy lets you visualize Twitter from a completely new perspective. You can access tweets in chronological order and the features it offers to view various timelines are second to none. If you are an avid fan of Twitter, be sure to check Harpy and you would love Twitter even more!

Guerrilla Mail:

Not all registrations are safe and secure. If you are stuck choosing whether to give your authentic details to a service, Guerilla Mail is your friend! This app lets you create a temporary mail that you can use to register for services that you feel might not be good enough for authentic emails. It even lets you check any emails that you might receive on the temporary email account that you used to register, you can also receive attachments and it is available in multiple languages!

In a need of a private browsing session, Guerilla Mail will sure clear the ways for you.

SpotiFlyier:

Streaming services are a thing of the past now. Yes! With SpotiFlyier, you can now download all your songs from any streaming service that you like. This app is 100% Open-sourced adding authenticity for its users. This is also available in Web and Desktop versions for access on every device. It's time to groove to the music and enjoy your favourite songs on the go, all on SpotiFlyier!

Recreating WORDLE in my Mother Tongue 🖥👅

Ansari — Mon, 28 Mar 2022 17:06:55 +0000

Before Going through the article. Don't forget to watch the video and a sub to the channel would be worthy

Link

After the purchase of Wordle by New York Times, the game hit the sky with popularity more people started to play the game, each day and that developer showed us how a simple and common product can make game changing thing.
After seeing this hit, I just want to recreate Wordle but not in English instead I am going with my mother tongue, Tamil.

What is Wordle ?

It is Web based word game build by a software engineer, Josh Wardle. The Game is so simple. Each day a new five letter word will be available , you got six tries to find out the right word. If you haven't played give a try.

Challenge

Getting back to our problem it would be easy as cloning the wordle in another language, if Tamil contains just 26 letters. But that's not the case. Tamil is one of the longest-surviving classical languages in the world. A recorded Tamil literature has been documented for over 2000 years. One of the greatest language of the world.

It consist of 247 letters with that, n number of words and meanings are possible. So the challenge is

If you gave all 247 letters then the possibilities is limitless it wouldn't be easy to guess the correct answer.
If you randomly pick the letters, then the chances of not framing a word is possible which we don't want.
Validating the word whether it is actually word or not.

Solution

First , I started with back-end rest API which tells the given word is valid or not. For that I used Express JS.
Next the task is not to give all 247 Tamil letters instead give only particular 26 letter from which people can form many word.

I made a Tamil word-list from that random word will be selected which at least contain one letter from the main guess word this way people can be confused and letter from these words keep adding to list until the list length is 26.

Then the list is shuffled and it is represented as the keyboard. So now from 247 letters it has been reduced too 26 from which words can be made.

So when a person enters a word first it checks the inbuilt word-list whether it is valid or not if valid then it checks with answer else then it sends API call from that it acts accordingly.
Now the site is live on tamilwordle.in check it out.

As usual don't forget to subscribe and follow 😉

How I hacked My Neighbor's Wi-Fi 📶

Ansari — Tue, 08 Mar 2022 05:38:33 +0000

Before getting started if you want to see the video about it
Check it out here 👇🏻

https://youtu.be/ENhi1gd-W1c

Getting Started

Is there anyone who doesn't like hacking ? If so, this article is not for you. I hope nobody doesn't like it, We all want to hack someone's WiFi at least once in our life just to have fun with them. That's how it started for me. Whenever I see a encrypted WiFi in my mobile I wish that I could hack it. It turned out if the WiFi's password isn't pretty strong then you can hack them at ease.

How does WiFi works ?

Without any prior knowledge about something, We couldn't hack anything. The same applies here, So first lets know how it works.Without going in depth about it. Let me put it in simple words.

Basically two things are there that you need to know :

Access Point
Client

As the name suggest access point is a device which allows other Wi-Fi devices to connect to wired network. For example your home router or lets say your friend's mobile hotspot. On other hand Clients are the Wi-Fi devices which connects to the access point.

An encrypted way of communication takes place between these two devices which is known to be 4-way handshake.
So when each time client connects to the access point it initially shares the passwords in an encrypted form.

Lets say your password is 12345678 the client will encrypt this into something like this 8B53D81E2E43080D5F62896068D6D325 and then send this to the access point which then decrypts it and check whether its a match or not and then accordingly. So this is how the connection the takes place.

The Flaw :

Since the client sends the password each time to the access point to connects. We can intervene the process and capture encrypted password.

Procedure:

-> First we look for a access point which already has connected client.
-> Then we send disrupt the connection between the both devices so that the client gets disconnected.
-> As usual a normal device tends to reconnect to access point again. This time we stop the disruption allowing the client to connect and capture the handshake which is passed.
->Still we don't have the password. We only have the hashfile (encrypted file) of the password
-> Lets see how we can decrypt the encrypted file.

Rockyou.txt

To decrypt the file we could basically do bruteforcing which in terms trying every possible combination until the file gets decrypted.But this time taking process

Instead we could use dictionary attack where we have list of common password in a text file and we try to break the hash file by trying each password.

One of the most famous wordlist is RockYou.txt , In 2009 a company named rockyou got breached because of not well encrypted database and millions of user data has been released. Rockyou.txt consist of more than millions of common password with the help of it we can try to crack it.

This process depends on your CPU performance the more speed it can achieve with more power.

Because of my neighbour's common WiFi Password (thejoker666) I am able to crack it in less than 2 mins and that's how i hacked my neighbour's Wi-Fi.

So avoid using common password or week password. Make sure to use a strong and unique password

Disclaimer

I did this for educational purpose to show how easy it is to hack if you don't have a strong password and the concern person also knows about this hack.

I made an Avatar Website that insults you 🤯

Ansari — Mon, 07 Mar 2022 12:40:15 +0000

Insult Your Friends

Funnily insulting your friend will always makes you laugh that's human nature. Imagine a avatar like robot insulting your friend, don't you laugh at him/her and have fun. That's what the InsultAvatar is all about.

With Simple HTML for the structure and little styling with CSS and importantly pure vanilla JavaScript i could able to make this site.

How it Started :

Well with simple API, plus your imagination the sky is your limit. While I was developing a login and signup page for another project, I was wondering how I can make user to feel unique, I don't want to use empty user icon 👤 for the avatars. So with little search in google I came across the dicebear a free open source avatar library for developers and designers.

How it works ?

As Simple it is, just enter your name with particular seed it fetches the dicebear library for the avatar and then while clicking on insult it now fetches a GitHub hosted json api and randomize the selection from it.

Note: You could only insult a person once in a day. With the help of local Storage I could accomplish this.

Don't forget to check it out.
https://insultavatar.ml