coh7eiqu8thaBu coh7eiqu8thaBu

Most VPN Services are Terrible

Short version: I strongly do not recommend using any of these providers. You are, of course, free to use whatever you like. My TL;DR advice: Roll your own and use Algo or Streisand. For messaging & voice, use Signal. For increased anonymity, use Tor for desktop (though recognize that doing so may actually put you at greater risk), and Onion Browser for mobile.

This mini-rant came on the heels of an interesting twitter discussion: https://twitter.com/kennwhite/status/591074055018582016

2023 update

ℹ️ Please note this research is from 2016 when Opera has first added their browser "VPN", even before the "Chinese deal" was closed. They have since introduced some real VPN apps but this below is not about them.

🕵️ Some folks also like to use this article to show a proof that the Opera browser is a spyware or that Opera sells all your data to 3rd parties or something like that. This article here doesn't say anything like that.

When setting up (that's immediately when user enables it in settings) Opera VPN sends few API requests to https://api.surfeasy.com to obtain credentials and proxy IPs, see below, also see The Oprah Proxy.

The browser then talks to a proxy de0.opera-proxy.net (when VPN location is set to Germany), it's IP address can only be resolved from within Opera when VPN is on, it's 185.108.219.42 (or similar, see below). It's an HTTP/S proxy which requires auth.

	#!/usr/bin/env ruby
	# frozen_string_literal: true

	# ods-ksmutil key export --keystate ready -t KSK --all \| ruby gandi.rb ready
	# ods-ksmutil key export --keystate retire -t KSK --all \| ruby gandi.rb retire

	require 'pp'
	require 'rubygems'
	require 'dnsruby'
	require 'xmlrpc/client'

	def donne_le_pluriel(nom):
	si nom.finit_par('x') ou nom.finit_par('z'):
	retourne nom
	sinon si nom.finit_par('al'):
	retourne nom[:-2] + 'aux'
	sinon si nom.finit_par('ail'):
	retourne nom[:-3] + 'aux'
	sinon si nom.finit_par('ou'):
	si nom.dans(['bijou', 'caillou', 'chou', 'genou', 'hibou', 'joujou', 'pou', 'ripou']):
	retourne nom + 'x'

	function Invoke-UACBypass {
	<#
	.SYNOPSIS

	Bypasses UAC on Windows 10 by abusing the SilentCleanup task to win a race condition, allowing for a DLL hijack without a privileged file copy.

	Author: Matthew Graeber (@mattifestation), Matt Nelson (@enigma0x3)
	License: BSD 3-Clause
	Required Dependencies: None
	Optional Dependencies: None

	#!/bin/bash

	# Give the usual warning.
	clear;
	echo "[INFO] Automated Android root script started.\n\n[WARN] Exploit requires sdk module \"NDK\".\nFor more information, visit the installation guide @ https://goo.gl/E2nmLF\n[INFO] Press Ctrl+C to stop the script if you need to install the NDK module. Waiting 10 seconds...";
	sleep 10;
	clear;

	# Download and extract exploit files.
	echo "[INFO] Downloading exploit files from GitHub...";

	/*
	Scramble/descramble raw NAND dumps from the NES Classic.
	plutoo 2016

	Cheers to brizzo, derrek.
	*/

	#include <stdio.h>
	#include <string.h>
	#include <stdint.h>

	#region Step #1 (optional): Salvaging of drivers

	# I had to manually install a disk and network driver the last time I installed Nano Server.
	# I saved my previous WIM file and exported the installed drivers using the Dism cmdlets.

	# These paths are specific to my system.
	# This was my old Nano Server TP5 image.
	$NanoTP5ImagePath = 'C:\Users\Matt\Desktop\Temp\NanoTP5Setup\NanoServerBin\NanoServer.wim'
	$WimTempMountDir = 'C:\Users\Matt\Desktop\TempMountDir'
	$ExportedDriverDir = 'C:\Users\Matt\Desktop\ExportedDrivers'

	#!/usr/bin/python
	# This file has no update anymore. Please see https://github.com/worawit/MS17-010
	from impacket import smb, ntlm
	from struct import pack
	import sys
	import socket

	'''
	EternalBlue exploit for Windows 8 and 2012 by sleepya
	The exploit might FAIL and CRASH a target system (depended on what is overwritten)

	#!/bin/bash

	# small tool to retreive vk.com (vkontakte) users hidden metadata (state, access, dates, counts, etc) anonymously (without login)

	# sudo apt install curl

	parse(){
	local IFS=\>
	read -d \< CELL VALUE
	}