Four files from the teardown of aresrexh7-beep/binwonk-s-old-ro-wizard-script. The original blob is byte-identical to what GitHub serves right now; the readable copy contains exactly the same 20,814 tokens, proven by a whitespace-insensitive round-trip.
Original payload — the repo's .gitignore, renamed so git never reads it, content untouched
e1acd2b06dc828ae10f601e53bc57df48f8d6a9fba420241f621bd00e491bc97
⬇ Download
The same token stream, beautified — 1,911 lines, round-trip proved
d18b933a0f9d189490bc2e18117daf614e2119ca58f5076ddd55833981f755f2
⬇ Download
Full static report: provenance, capability inventory, supply chain, IOCs
d248b2c69cd6b3897e58939e3d8bd7a159c620729b84490cb4939246fd7ca88c
⬇ Download
The tokeniser that does the decode from the blob alone
75c32cee76e61421b8d04a43c3d212a6d3cbff7e9ad231792502a73e735108be
⬇ Download
The blob is named gitignore-blob.txt here rather than .gitignore: the bytes are unchanged (verify the hash), but a live .gitignore inside a deployed tree can silently change what version control tracks.
It is one line, 89,728 bytes, starting with a quote. That is the trick being documented: a complete Lua program stored as a single string literal inside a file that GitHub, code search and most scanners read as configuration. Strip the outer quote pair, resolve the escapes, and you get 86,414 characters of ordinary, completely unobfuscated Lua. The teardown walks through all of it.