Karib0u

Gmail Filters

Catch newsletters and junk

Matches: ("opt-out" OR unsubscribe OR "viewing the newsletter" OR "privacy policy" OR enews OR "edit your preferences" OR "email notifications" OR "update profile" OR smartunsubscribe OR secureunsubscribe OR yahoogroups OR "manage your account" OR "group-digests") Do this: Skip Inbox, Apply label "Work/Newsletters"

Keep pesky calendar invites out of inbox

Matches: (subject:("invitation" OR "accepted" OR "rejected" OR "updated" OR "canceled event" OR "declined") when where calendar who organizer) Do this: Skip Inbox, Apply label "GTD/Follow up"

Keep 90% of Sales emails out of Inbox

Get De-XRAY from Hexacorn:

Ubuntu 16.04 (Xenial)

## at least these or just CPAN

	# Code from best solution in page below:
	# https://help.zoho.com/portal/community/topic/zoho-mail-servers-reject-python-smtp-module-communications

	import smtplib
	from email.mime.text import MIMEText
	from email.header import Header
	from email.utils import formataddr

	# Define to/from
	sender = '[email protected]'

	# IMPORTANT!
	# This gist has been transformed into a github repo
	# You can find the most recent version there:
	# https://github.com/Neo23x0/auditd

	# ___ ___ __ __
	# / \| __ ______/ (_) /_____/ /
	# / /\| \|/ / / / __ / / __/ __ /
	# / ___ / /_/ / /_/ / / /_/ /_/ /
	# /_/ \|_\__,_/\__,_/_/\__/\__,_/

	:: Windows 10 Hardening Script
	:: This is based mostly on my own personal research and testing. My objective is to secure/harden Windows 10 as much as possible while not impacting usability at all. (Think being able to run on this computer's of family members so secure them but not increase the chances of them having to call you to troubleshoot something related to it later on). References for virtually all settings can be found at the bottom. Just before the references section, you will always find several security settings commented out as they could lead to compatibility issues in common consumer setups but they're worth considering.
	:: Obligatory 'views are my own'. :)
	:: Thank you @jaredhaight for the Win Firewall config recommendations!
	:: Thank you @ricardojba for the DLL Safe Order Search reg key!
	:: Thank you @jessicaknotts for the help on testing Exploit Guard configs and checking privacy settings!
	:: Best script I've found for Debloating Windows 10: https://github.com/Sycnex/Windows10Debloater
	:

	import idautils
	import idaapi

	def memdump(ea, size, file):
	data = idc.GetManyBytes(ea, size)
	with open(file, "wb") as fp:
	fp.write(data)
	print "Memdump Success!"

	Rough summary of developing BadRabbit info
	------------------------------------------

	BadRabbit is locally-self-propagating ransomware (ransom: 0.05 BTC), spreading via SMB once inside.
	Requires user interaction.
	Mostly targeting Russia and Ukraine so far, with a few others (Germany, Turkey, Bulgaria, Montenegro ...)
	Not globally self-propagating, but could be inflicted on selected targets on purpose.
	May be part of same group targeting Ukraine generally (BACKSWING) (per FireEye)
	Confirmed to use ETERNALROMANCE exploit, and same source code and build chain as NotPetya (per Talos)
	Mitigations are similar to Petya/NotPetya resistance. An inoculation is also available (see below).

	<#
	.SYNOPSIS
	This script can bypass User Access Control (UAC) via fodhelper.exe

	It creates a new registry structure in: "HKCU:\Software\Classes\ms-settings\" to perform UAC bypass and starts
	an elevated command prompt.

	.NOTES
	Function : FodhelperUACBypass
	File Name : FodhelperUACBypass.ps1

	# This is a Python script that let you arrange
	# files into a folder for each extension. Actually
	# I lied, this script is not about file extension
	# but about a file's mime type. So, in case there
	# are files that has no extension this script can
	# predict what the file's extension could be.
	# However, the only requirement is that file need
	# to be able to be read by the computer's OS. For
	# example image files usually has no problem with
	# this script also with other media files. But,

	<?xml version="1.0" encoding="UTF-8"?>
	<Annotations start="0" num="171" total="171">
	<Annotation about="www.bussink.net/*" timestamp="0x0005d7bc4022b026" href="ChF3d3cuYnVzc2luay5uZXQvKhCm4IqBxPf1Ag">
	<Label name="_cse_turlh5vi4xc"/>
	<AdditionalData attribute="original_url" value="https://www.bussink.net/"/>
	</Annotation>
	<Annotation about=".thedfirreport.com/" timestamp="0x0005d76dd5f8679d" href="ChUqLnRoZWRmaXJyZXBvcnQuY29tLyoQnc_hr93t9QI">
	<Label name="_cse_turlh5vi4xc"/>
	<AdditionalData attribute="original_url" value="https://thedfirreport.com/"/>
	</Annotation>