DonnchaC’s gists

DonnchaC / tor-desc-id-calc.py

Last active December 16, 2015 14:49

This is a simple Python port of the Tor's code for generating hidden service descriptor id's. Haven't tested this snippet so there might be a syntax error or something

	#!/usr/bin/env python
	from time import time
	from base64 import b32encode, b32decode, b16decode
	from hashlib import sha1
	from struct import pack, unpack

	# When provided with a Tor hidden service 'service_id', this script should output
	# the desc_id's which clients would request at the current time .

	# Based on rend_compute_v2_desc_id() from rendcommon.c in Tor source code.

DonnchaC / coinbase-oauth-poc.py

Created May 5, 2013 20:00

This is a proof-of-concept script which exploited a bug in Coinbase.com's implementation of OAuth. More information and demo at https://vimeo.com/user18139365/coinbase-oauth-poc. Coinbase are pretty generous and gave a 5 BTC bounty for this bug which give an attacker full control of an account, when a logged in user visits their malicious web pa…

	# -- coding: utf-8 --
	# Coinbase.com OAuth Authorization PoC
	# Donncha O'Cearbhaill - 4/05/13
	# @DonnchaC
	# [email protected] - PGP: 0xAEC10762

	import requests
	import json
	from BeautifulSoup import BeautifulSoup
	from flask import Flask, request, render_template

DonnchaC / tor_marketplaces.txt

Last active December 17, 2015 10:28

Tor Marketplaces

	Onion Address Descriptor ID Requests
	----------------------------------------------------------------
	silkroadvb5piz3r cjzls3i2mbj4hjnquqmuvznihues4xh4 16387
	silkroadvb5piz3r m6yz6gqrmu35twduuiixzr2mqtxdo3er 10891
	5onwnspjvuk7cwvk 6t44eim223ypmb2ueokcsfco5vzvryfm 1413
	silkroadvb5piz3r hadco5o7rmh2vcamg7mdzqklprqffyyh 558
	silkroadxmx45vk4 6tyqo2bf7xclfbmrtrxwm7mgb3z4s5ui 197
	atlantisrky4es5q hdj7wkuaigt7iicqf77gyzbo7zyvq7wf 165
	atlantisrky4es5q m6y4s2utv4kxgdczv7t3gbmoloezblzf 161
	atlantisrky4es5q 6r3z4tlr2vvl5z34v5lcuaqckgjvtr7s 129

DonnchaC / skynet_botnet_requests.txt

Created May 16, 2013 22:57

Requests for Skynet Tor based botnet based on onion address from an analysis from Rapid7 (https://community.rapid7.com/community/infosec/blog/2012/12/06/skynet-a-tor-powered-botnet-straight-from-reddit). Contact @skynetbnet on Twitter for more info ;) Thi data is elaborated on in [my blog post (http://donncha.is/2013/05/trawling-tor-hidden-servi…

	Onion Address Descriptor ID Requests
	----------------------------------------------------------------
	gpt2u5hhaqvmnwhr m5t2jamzi4fht3hicqadzd3rkl57lyjj 9792
	x3wyzqg6cfbqrwht m5doen5pidde5wshaormqh6l2c4bljd5 7162
	gpt2u5hhaqvmnwhr hdjeqyqaq344rbb6vxndliobueh3v2u5 6641
	4bx2tfgsctov65ch 6twxygfbtb2haivmixjqx5ag35dg72tk 6485
	owbm3sjqdnndmydf hd2j5xswo5ddvxpa2rahkg24vwhqo77y 6471
	niazgxzlrbpevgvq m63z25bfydkc6nfko4b4kz44u3jsh67k 6334
	6ceyqong6nxy7hwp m6czfa7ra6qvrfvbmg6zlsimi4braizy 2691
	6tkpktox73usm5vq 6ruzifokbb6ez2qbnion7deylz4jjmq3 1827

DonnchaC / silkroad_descriptor.txt

Created May 19, 2013 22:16

Here is one of the current hidden service descriptors for the "Silk Road". Interestingly they are only including 3 introduction points for all their users.

	rendezvous-service-descriptor d64o4fefz32lvzb5bxx37zbgp7bufb6t
	version 2
	permanent-key
	-----BEGIN RSA PUBLIC KEY-----
	MIGLAoGBAJoahaQjFQp8lnhmHl3dUpwLJMgQD8iNdn5wK6hAdVzXRFcp1J0lvbCv
	aN4LO0dwtqKr0wK/4w27DUW6Bpxoic0hmi7uRZULZRatOhC4UKNf3Ml4AlXoltLY
	alfTvpdcUp5ZPU8LOY2XleLg+5ASgSa1qUSxUKDTwmUN3AG1TyObAgUOk1CHUQ==
	-----END RSA PUBLIC KEY-----
	secret-id-part wut3xpvpfmojiycyzsk3ru5fkocqvrvk
	publication-time 2013-05-19 21:15:59

DonnchaC / init-tor

Created May 30, 2013 19:45

Tor init.d script for managing multiple nodes - Original from torservers.net (https://www.torservers.net/wiki/setup/server#multiple_tor_processes)

	#! /bin/sh

	# $Id$
	# $URL$

	### BEGIN INIT INFO
	# Provides: tor
	# Required-Start: $local_fs $remote_fs $network $named $time
	# Required-Stop: $local_fs $remote_fs $network $named $time
	# Should-Start: $syslog

DonnchaC / recent-comments-without-pingbacks.php

Last active December 20, 2015 06:09

Wordpress widget to show Recent Comments with pingbacks or trackbacks.

	<?php

	/**
	This is a straight copy of the the default Wordpress 3.5.2 Recent Comments widget which has been modified
	to only show actual comments and to not display pingbacks and trackbacks in the sidebar. To use this
	widget just add it to your theme directory and put the line "require('recent-comments-without-pingbacks.php');""
	in your theme's 'functions.php' file.
	**/

	class Recent_Comments_Clean extends WP_Widget {

DonnchaC / keybase.md

Created March 31, 2014 18:03

Verifying my Github account on Keybase.io

Keybase proof

I hereby claim:

I am donnchac on github.
I am donncha (https://keybase.io/donncha) on keybase.
I have a public key whose fingerprint is 7EFB DDE8 FD21 11AE A7BE 1AA6 3B0D 706A 7FBF ED86

To claim this, I am signing this object:

DonnchaC / OnionTip Fee Estimation

Last active August 29, 2015 14:05

Some estimations to help determine a good donation distribution protocol

	# Total Donation required for each selected relay to receive the bitcoin dust limit amount (5460 satoshi = ~ $0.03)

	300 Selected Relays
	---
	Fee: 110000 ($0.5500)
	Outputs: 1638000 ($8.19000)
	Fee: 6.29%
	Total Spend: $8.74000 (0.0175 BTC)

DonnchaC / filter-escaping-test.py

Created September 17, 2014 22:38

	from jinja2 import Markup, escape

	print 'Filter Test.\n---'
	value = """
	a test <strong>string</strong>
	new line test.
	"""

	print 'Escape() give Markup Object:'
	print type(escape(value))

Donncha Ó Cearbhaill DonnchaC

Keybase proof