Xavi Torelló XaviTorello

Netgear Signed TLS Cert Private Key Disclosure

Overview

There are at least two valid, signed TLS certificates that are bundled with publicly available Netgear device firmware.

These certificates are trusted by browsers on all platforms, but will surely be added to revocation lists shortly.

The firmware images that contained these certificates along with their private keys were publicly available for download through Netgear's support website, without authentication; thus anyone in the world could have retrieved these keys.

What?

A thin Python script to update the proxy list in proxychains.conf with output from proxybroker.

Why?

Well, the proxies pulled down by proxybroker are often stale or useless for our purposes.

And updating proxychains.conf with new proxies is a pain in the ass.

Ok

Just run it in the background and never be without usable proxies again (⌐■_■)

JSON Puller - Google Apps Script

Transforms the data of a given Spreadsheet Sheet to JSON.

The frozen rows are taken as keys for the JSON.
The data taken for the values is only that after the frozen rows

Set up:

exportJSON(Spreadsheet) - transforms the data in the given sheet to JSON.

	(cors) {
	@cors_preflight{args.0} method OPTIONS
	@cors{args.0} header Origin {args.0}

	handle @cors_preflight{args.0} {
	header {
	Access-Control-Allow-Origin "{args.0}"
	Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS"
	Access-Control-Allow-Headers *
	Access-Control-Max-Age "3600"

	/**
	* @param {number} latitude in degrees
	* @param {number} longitude in degrees
	* @param {number} mapWidth in pixels
	* @param {number} mapHeight in pixels
	*/
	function latLonToOffsets(latitude, longitude, mapWidth, mapHeight) {
	const FE = 180; // false easting
	const radius = mapWidth / (2 * Math.PI);

	SUBSYSTEM!="sound", GOTO="pulseaudio_end"
	ACTION!="change", GOTO="pulseaudio_end"
	KERNEL!="card*", GOTO="pulseaudio_end"

	SUBSYSTEMS=="pci", ATTRS{vendor}=="0x106b", ATTRS{device}=="0x1803", ENV{PULSE_PROFILE_SET}="apple-t2.conf"

	LABEL="pulseaudio_end"

	from django.contrib.postgres.fields import JSONField

	from graphene.types.generic import GenericScalar
	from graphene.utils.str_converters import to_camel_case, to_snake_case
	from graphene_django.converter import convert_django_field


	def patch_graphene_django_JSONField_converter(auto_camel_case=True):
	"""
	Ask `graphene_django` to convert `JSONField` to `GenericScalar` (JSON as is) instead of default `JSONString`

	#used in jupyter notebook with Python 2
	!apt-get install python-cairocffi
	!pip install mapnik


	import mapnik
	import cairocffi as cairo

	map = mapnik.Map (1750 ,1185)
	mapnik.load_map ( map ,'wallmap.xml')

	version: '2'
	services:
	api:
	volumes:
	- "nfsmount:${CONTAINER_DIR}"

	volumes:
	nfsmount:
	driver: local
	driver_opts:

	from PyQt4.QtGui import QApplication, QMainWindow, QDialog, QHBoxLayout
	from PyQt4.QtCore import SIGNAL

	from Koo.Rpc import Rpc
	from Koo.Common import Api
	from Koo.Common import Localization
	Localization.initializeTranslations()
	from Koo.Dialogs import WindowService

	x = Rpc.session.login('http://admin:admin@localhost:8069', 'test_1522167327')