Skip to content

Instantly share code, notes, and snippets.

View albertzsigovits's full-sized avatar
🕹️
[_]/\XO

Albert Zsigovits albertzsigovits

🕹️
[_]/\XO
View GitHub Profile
@albertzsigovits
albertzsigovits / android.txt
Last active July 27, 2021 09:40
Android Tools
Get Android APKs:
- Virusbay.io
- VirusTotal.com
- Hybrid-analysis.com
- Virusshare.com
- Github repos
- Search Any.run
- JoeSandbox reports
- Apkpure
- Mediafire URLs
@albertzsigovits
albertzsigovits / malware-analysis.vm
Created March 19, 2021 15:41
Linux Malware Analysis Tools
repo.txt:
---------
https://github.com/fireeye/flare-floss
https://github.com/goretk/redress
https://github.com/upx/upx
https://github.com/trendmicro/telfhash
https://github.com/simsong/bulk_extractor
https://github.com/volatilityfoundation/volatility3
init.sh:
@albertzsigovits
albertzsigovits / amd-announcement-speech.txt
Last active November 10, 2020 12:02
AMD Announcement Speech
Welcome everyone
Thank you for joining here today
I love seeing all of your excitement
It was actually the most watched
I must say I am very proud of
But today is all about
I am really excited to
As you know we brought the first gen
Talk about the history
what we released so far
@albertzsigovits
albertzsigovits / volatility.txt
Created June 27, 2020 19:34
Mz Volatility Cheatsheet
https://github.com/volatilityfoundation/volatility/wiki
1. Copy image
2. SHA256
3. imageinfo
4. kdbgscan
5. kpcrscan
a. choose profile
b. choose KDBG value
envars
Dig queries:
============
dig @ns1.server.srv -y mykey:somekey axfr
dig -6 @ns2.server -y hmac-sha256:mykey:key www.server axfr +all +besteffort +class +qr +nsid
DNS Tools:
==========
dnsenum
dnsrecon
dnswalk
@albertzsigovits
albertzsigovits / harden-linux.conf
Created June 14, 2020 12:42
Linux Kernel Hardening
/etc/pam.d/system-login
auth optional pam_faildelay.so delay=5000000
/etc/pam.d/system-login
auth required pam_tally2.so deny=3 unlock_time=600 onerr=succeed file=/var/log/tallylog
/etc/sysctl.d/51-kexec-restrict.conf
kernel.kexec_load_disabled = 1
/etc/sysctl.d/51-kptr-restrict.conf
@albertzsigovits
albertzsigovits / blockua.rules
Created June 13, 2020 12:21
Nginx Blocked UA
map $http_user_agent $blockedagent {
default 0;
~*malicious 1;
~*bot 1;
~*backdoor 1;
~*crawler 1;
~*bandit 1;
}
@albertzsigovits
albertzsigovits / nginx.conf
Created June 13, 2020 12:21
Nginx configuration prototype
user nginx;
worker_processes 1;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
@albertzsigovits
albertzsigovits / default.conf
Last active June 13, 2020 12:18
Nginx default.conf prototype for HTTPS redirection
server {
listen *:80 default_server;
listen [::]:80 default_server;
server_name server.domain;
return 301 https://$server_name$request_uri;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
@albertzsigovits
albertzsigovits / ssl.conf
Created June 13, 2020 12:14
Nginx SSL TLSv1.3 config for A+ certification
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;
ssl_ecdh_curve secp384r1;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_prefer_server_ciphers on;
ssl_stapling on;
ssl_stapling_verify on;
#ssl_trusted_certificate /etc/nginx/ssl/ocsp.crt;