Atila Romero atilaromero
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| kubectl run -i --tty --rm alpine --image=alpine --restart=Never -- sh |
atilaromero
/ convert vbox image
Last active
November 23, 2018 18:47
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| VBoxManage clonehd '{ff460fde-fac8-48b7-afbb-251ab0dc9342}' ff460fde-sdcard.dd --format RAW |
atilaromero
/ createVMDK.sh
Created
November 19, 2018 14:13
Instantly create a vmdk file from a dd file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| VBoxManage internalcommands createrawvmdk -filename imagemHD.vmdk -rawdisk imagemHD.dd |
atilaromero
/ list bookmarks.sh
Created
November 19, 2018 14:08
list bookmarks from places.sqlite (firefox)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| sqlite3 places.sqlite 'SELECT b.url FROM moz_bookmarks AS a JOIN moz_places AS b ON a.fk = b.id' |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| mountmmls() { | |
| mmls "${1}" | tail -n+7 | while read -ra i | |
| do | |
| [ ${i[1]} == ------- ] && continue | |
| [ ${i[1]} == Meta ] && continue | |
| echo mkdir -p vol${i[0]%:} | |
| echo mount "${1}" vol${i[0]%:} -o ro,offset=$[${i[2]##+(0)} * 512],sizelimit=$[${i[4]##+(0)}*512] | |
| done | |
| } |
atilaromero
/ JumpListIDs.csv
Created
March 21, 2012 11:57
JumpList ids - from http://www.forensicswiki.org/wiki/List_of_Jump_List_IDs
We can make this file beautiful and searchable if this error is corrected: No commas found in this CSV file in line 0.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 65009083bfa6a094 (app launched via XPMode) 8/22/2011 Win4n6 List Serv | |
| 469e4a7982cea4d4 ? (.job) 8/22/2011 Win4n6 List Serv | |
| b0459de4674aab56 (.vmcx) 8/22/2011 Win4n6 List Serv | |
| 89b0d939f117f75c Adobe Acrobat 9 Pro Extended (32-bit) 8/22/2011 Microsoft Windows 7 Forum | |
| 26717493b25aa6e1 Adobe Dreamweaver CS5 (32-bit) 8/22/2011 Microsoft Windows 7 Forum | |
| e2a593822e01aed3 Adobe Flash CS5 (32-bit) 8/22/2011 Microsoft Windows 7 Forum | |
| c765823d986857ba Adobe Illustrator CS5 (32-bit) 8/22/2011 Microsoft Windows 7 Forum | |
| 84f066768a22cc4f Adobe Photoshop CS5 (64-bit) 8/22/2011 Microsoft Windows 7 Forum | |
| 44a398496acc926d Adobe Premiere Pro CS5 (64-bit) 8/22/2011 Microsoft Windows 7 Forum | |
| 23646679aaccfae0 Adobe Reader 9. 8/22/2011 Microsoft Windows 7 Forum |
NewerOlder