Nikolai Tschacher NikolaiT

Trying to deploy WPA3 on my home network

Introduction

Recently, news broke about a new possible offline attack on WPA2 using PMKID. To summarize the attack, WPA2 protected APs can end up broadcasting PMKID values which can then be used to offline-brute-force the password.

These PMKID values are computed this way:

PMKID = HMAC-SHA1-128(PMK, "PMK Name" | MAC_AP | MAC_STA)

log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228

Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders

sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log

	# =======================================================================
	# === Description ...: Integrate DRF with VueTable-2
	# === Author ........: Mike Boiko
	# =======================================================================

	# If you want to integrate Django Rest Pagination with VueTable, you must
	# change the pagination as shown below:
	# Then, in your views.py file, the pagination_class must be set to CustomPagination
	# See example below:
	# from rest_framework import pagination

	import argparse
	import boto3
	import os
	import threading
	from fnmatch import fnmatch

	# S3 multi-part upload parts must be larger than 5mb
	MIN_S3_SIZE = 6000000
	LOG_LEVEL = 'INFO'

	# taken from http://www.piware.de/2011/01/creating-an-https-server-in-python/
	# generate server.pem with the following command:
	# openssl req -new -x509 -keyout key.pem -out server.pem -days 365 -nodes
	# run as follows:
	# python simple-https-server.py
	# then in your browser, visit:
	# https://localhost:4443


	import http.server