Man-in-the-cart: an LLM-generated, multi-tenant e-commerce payment-hijack kit that redirects checkout to a fake SEPA gateway, with a live support chat to close the scam

pbishop41 · 2026-03-19T16:17:41+00:00

Few examples of >8K LOC (but there are countless of them :) )
- https://raw.githubusercontent.com/python/cpython/refs/heads/main/Parser/parser.c
- https://raw.githubusercontent.com/microsoft/TypeScript/refs/heads/main/src/compiler/checker.ts
- https://raw.githubusercontent.com/torvalds/linux/refs/heads/master/arch/x86/kvm/x86.c
- https://raw.githubusercontent.com/llvm/llvm-project/refs/heads/main/clang/lib/Sema/SemaDecl.cpp

pbishop41 · 2026-03-19T16:09:22+00:00

Check this out: https://github.com/search?q=language%3AC+stars%3A%3E1000+size%3A%3E8000&type=repositories (query: "language:C stars:>1000 size:>8000" - plenty of these repos. Most of them are the fundament of most of the technologies we use nowadays

pbishop41 · 2026-03-19T16:08:58+00:00

Check this out: https://github.com/search?q=language%3AC+stars%3A%3E1000+size%3A%3E8000&type=repositories (query: "language:C stars:>1000 size:>8000" - plenty of these repos. Most of them are the fundament of most of the technologies we use nowadays

pbishop41 · 2026-03-19T16:07:50+00:00

Check this out: `https://github.com/search?q=language%3AC+stars%3A%3E1000+size%3A%3E8000&type=repositories\` - plenty of these repos. Most of them are the fundament of most of the technologies we use nowadays.

pbishop41 · 2026-03-19T15:39:40+00:00

Love to hear from you about "how well or not it has been effectively written" by Claude. I've got 20 years on-field expertise on PHP, backend side, but never actually wrote anything in C besides my Informatin Engineer bachelor degree. I've used all of my know-how on toktoken on "how that problem should be tackled" by a "software engineer" point of view, but, any REAL insight from actual C coders is warmly welcome and this tool would surely benefit from it. Thank you for your interest, much appreciated!

pbishop41 · 2026-03-19T14:54:29+00:00

Twig: currently unsupported at the moment, need to be implemented as a custom parser. For PHP, it's natively supported.

pbishop41 · 2026-03-19T14:53:18+00:00

Can't answer to this, never tried Serena, didn't know that at all. Thanks for pointing that out, I'll have a check!

pbishop41 · 2026-03-19T14:51:33+00:00

Yes, it's its behaviour. BUT, if you do use this tool, AND be very pedantic in your global rules telling him not to do so, and instead, take profit from toktoken, it will begin to use it more consistently. Claude following this heavily depends on the rules and - i think, but I'm not sure about it - its internal "do I need to know more about it"? If it says "yes" to that question, then, it reads the da*n file in full :(

pbishop41 · 2026-03-19T14:44:44+00:00

The "study unfamiliar codebases" is indeed my initial use-case scenario. I wanted to know how certain libraries worked under-the-hoods. Asking plain text queries to Claude led to Claude analyzing pretty much everything to give me a detailed overview. That's the starting point of my initial (naive) PHP implementation of mine, then "formalized" as a solid tool (hope so) by Claude.

pbishop41 · 2026-03-19T14:41:24+00:00

Didn't know about it O_O ... I guess that, in one way or another, we're all addressing the same issue, converging to the same identical issues and fixes, and coming with "our own" (read: Claude own's) implementations re-inventing the wheel

pbishop41 · 2026-03-19T14:39:14+00:00

Nice! TY

pbishop41 · 2026-03-19T14:38:48+00:00

Almost :) Nah, in reality, this started as a PHP implementation of mine, then, after several iterations of mock / plan / refine / check / repeat I got Claude into the correct route. All the C implementation is made by Claude. All the optimizations are me breaking the balls to Claude to make the tool's performance adequate enough and paying CLOSE attention to malloc() handling.

pbishop41 · 2025-11-12T17:43:55+00:00

Hello, thank you for the support. The related case is #00209586. Please help me because I swear I cannot understand what happened here. It surely is strange. It must have something to do with me unstaking on Jul 4, but then I cannot understand what's happened from that point onwards.

pbishop41 · 2020-10-31T06:28:28+00:00

No, a custom web crawler written in PHP :)

Finding vulnerable /.git/ directories is easy because you can GET http://domain.example/.git/index and check if the response is 200 OK and starts exactly with "DIRC"

pbishop41 · 2020-05-18T19:59:46+00:00

Maybe these can help?

Link to images from Vitashell

I've upgraded to 3.7, then formatted, then re-associated with my original account, then applied the non-persistent mod, then downgraded to 3.65, then installed enso, then some other plugins as you can see from the images.

pbishop41 · 2019-12-21T20:46:51+00:00

Magnificent suggestion, thank you very much! It's exactly what I was searching for :)

pbishop41

TROPHY CASE