*(All material drawn exclusively from the public text of the report; all redactions **/ are reproduced exactly as printed.)
Original report:
| ########## | |
| # Win10 Initial Setup Script | |
| # Author: Disassembler, Gr1d:, TheRoc | |
| # Edited by Gr1D: | |
| # dasm's script: https://github.com/Disassembler0/Win10-Initial-Setup-Script/ | |
| # TheROC's E.T. Disable script: https://gist.github.com/thoroc/86d354d029dda303598a | |
| # THIS IS VERSION 5.5, error suppression is turned on. PLEASE be patient and PLEASE restart after running the script. | |
| # This script leaves more MS defaults on, including MSE and smart-screen, | |
| # but blocks a ton of domains and disables remote assistance secures java, sets up ipsec.. |
| local previewers = require('telescope.previewers') | |
| local Job = require('plenary.job') | |
| local new_maker = function(filepath, bufnr, opts) | |
| filepath = vim.fn.expand(filepath) | |
| Job:new({ | |
| command = 'cat', | |
| args = { filepath }, | |
| on_exit = function(j) | |
| local result = j:result() |
| #!/usr/bin/env python | |
| # This script will go through a given directory recursively, extracting all attachments from .eml files. | |
| # .eml files are often how full mailbox dumps are leaked online. | |
| # If an attachment with the same filename already exists, MD5 sum of the files are calculated and if not | |
| # a match, the new file will be saved with _# suffix. | |
| # | |
| # Hamid Kashfi (@hkashfi) | |
| import os |
| # Sample script to use OpenAI Whisper API | |
| # This script demonstrates how to convert input audio files to text, fur further processing. | |
| # The code can be still improved and optimized in many ways. Feel free to modify and use it | |
| # for your own needs. | |
| # | |
| import openai | |
| from openai import OpenAI | |
| client = OpenAI(api_key="sk-proj-....") |
| #!/usr/bin/env python3 | |
| """ | |
| Tor Identity Manager - A tool to manage Tor identities and exit nodes. | |
| This script allows you to renew your Tor identity and optionally set the exit node | |
| country. It provides enhanced error handling, configuration options, and feedback. | |
| hamid@darkcell.se | |
| """ |
| Draziw.Button.Mines | |
| ag.video_solutions.wedotv | |
| ahf.dummynation | |
| ai.socialapps.speakmaster | |
| air.com.beachbumgammon | |
| air.com.freshplanet.games.SongPop2 | |
| air.com.gamesys.mobile.slots.jpj | |
| air.com.goodgamestudios.empirefourkingdoms | |
| air.com.kitchenscramble.goo | |
| air.com.lalaplay.rummy45 |
| rule Paragon_Spyware_IOCs | |
| { | |
| meta: | |
| description = "Indicators of compromise (IOCs) for Paragon Solutions Graphite spyware from the Citizen Lab report 'Virtue or Vice? A First Look at Paragon’s Proliferating Spyware Operations'" | |
| author = "ChatGPT" | |
| date = "2025-03-29" | |
| reference = "https://citizenlab.ca/2025/03/a-first-look-at-paragons-proliferating-spyware-operations/" | |
| strings: | |
| // Suspected customer domains (Table 4) |
*(All material drawn exclusively from the public text of the report; all redactions **/ are reproduced exactly as printed.)
Original report:
| #!/usr/bin/env python3 | |
| """ | |
| Look-up the approximate position of a cell tower with Google’s Geolocation API | |
| and print a Google-Maps link for easy visualisation. | |
| hamid@darkcell.se | |
| pip install requests | |
| """ |
| #!/usr/bin/env python3 | |
| """ | |
| iOS Backup Reconstructor | |
| Version: 0.1 | |
| iOS encrypted backups by default are not meant to be human-readable. The folder structure needs to be reconstructed, before it is consumable by most other tools. | |
| This script provides a way to reconstruct the folder structure of an iOS backup, making it easier to analyze and work with. | |
| Actual file names are extracted from the backup's manifest.db database. | |
| Note that it is expected for the script to produce a lot of "source file not found" errors. |