blisabda

Reverse Engineering Golang

Some notes, tools, and techniques for reverse engineering Golang binaries.

Table of Contents

• Go Reverse Engineering Tool Kit (go-re.tk)
• GoReSym
• Unsorted

blisabda

ⓘ This list is not meant to be exhaustive and is not guaranteed to be maintained. See the comments for updates and alternative options.

(Items in bold indicate possible concerns)

	Keycloak	WSO2 Identity Server	Gluu	CAS	OpenAM	Shibboleth IdP
OpenID Connect/OAuth support	yes	yes	yes	yes	yes	yes
Multi-factor authentication	yes	yes	yes	yes	yes	yes
Admin UI	yes	yes	yes	yes	yes	no
OpenJDK support	yes	yes	partial²	yes

blisabda

""" Simple IPC benchmark test

Test throughput of 512 KB messages sent between two python processes using:

- multiprocessing pipe
- zeroMQ PUSH/PULL
- zeroMQ DEALER/DEALER

Result:

blisabda

"""
This is an example on how to reload Flask app in runtime

It can be useful for the use case where you want to enable/disable blueprints/routes dynamically.

To run the app:

> pip install flask & python app.py

Then test it via curl

blisabda

Linux NetFilter, IP Tables and Conntrack Diagrams

IPTABLES TABLES and CHAINS

IPTables has the following 4 built-in tables.

1) Filter Table

Filter is default table for iptables. So, if you don’t define you own table, you’ll be using filter table. Iptables’s filter table has the following built-in chains.

blisabda

# Matching 'SSL SERVER HELLO' packets using IPtables
# Using some connection tracking to make sure not 
# to match randomly in the middle of some huge SSL 
# session. 

iptables --insert INPUT -p tcp --sport 443 \
  -m connbytes --connbytes-mode bytes --connbytes-dir both --connbytes 0:500 \
  -m state --state ESTABLISHED \
  -m length --length 46:375 \
  -m u32 --u32 "\

blisabda

# The general procedure here is adapted from the 7->8 guide here. https://www.tecmint.com/upgrade-centos-7-to-centos-8/
#
# It is a curated list of my bash history. I entered other commands so hopefully I got the right ones here.

yum upgrade
reboot
dnf install epel-release
dnf install rpmconf
dnf install yum-utils
rpmconf -a  # answer "n" to both things

blisabda

A complete overview of PHP session handler life cycle

The purpose of this document is to provide a complete overview of the PHP session handler life cycle updated to version 7.0 or above. In particular, I want to emphasize what methods and in what order are called when the native PHP functions are used for session management.
I created this document because the information on the web and the official documentation are very superficial on this topic, in particular on what concerns the implementation of a safe and stable session handler.

blisabda

Code is clean if it can be understood easily – by everyone on the team. Clean code can be read and enhanced by a developer other than its original author. With understandability comes readability, changeability, extensibility and maintainability.

---

General rules

1. Follow standard conventions.
2. Keep it simple stupid. Simpler is always better. Reduce complexity as much as possible.
3. Boy scout rule. Leave the campground cleaner than you found it.
4. Always find root cause. Always look for the root cause of a problem.

Design rules

blisabda

# KEYCLOAK BASE URL
KEYCLOAK_BASE_URL=

# KEYCLOAK CLIENT SECRET
KEYCLOAK_CLIENT_SECRET=

# KEYCLOAK CLIENT ID
KEYCLOAK_CLIENT_ID=

# BASE URL FOR NEXT AUTH