Jakub Urbanec cubapp

SSH keys on a Yubikey in a Mac

Install the YubiKey Manager CLI (ykman); alternative installation options can be found here: brew install ykman
Install GPG >= 2.1. Version 2.1 simplified the running of gpg-agent. The version isn’t a hard requirement, but it might make your life easier.

Username is user
User is in group user
User's home is /home/user
Python application is in /home/user/pythonapp
Python script is named start.py
Virtual environment is /home/user/.virtualenvs/pythonapp created with python -m venv /home/user/.virtualenvs/pythonapp

You can add multiple Environment lines if you need more env-variables

	#!/bin/bash

	while :; do

	verf=$(cat /dev/urandom \| tr -dc '0-9' \| fold -w 8 \| head -n 1)
	pin=$(cat /dev/urandom \| tr -dc '0-9' \| fold -w 5 \| head -n 1)

	ip=$(printf "%d.%d.%d.%d\n" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))")

	#!/bin/bash
	# Find files in CVE-2020-15227 nette/application issue
	# by @spazef0rze
	# Run with `bash find-cve-2020-15227.sh`, works on Linux, FreeBSD, tested on Ubuntu 18.04, FreeBSD 11.4

	# This is a universal finder for all affected versions.

	# Requirements: find, grep, bash (might work with your default shell but YMMV)

	# The fixes:

	import requests
	import time
	import sys
	from base64 import b64encode
	from requests_ntlm2 import HttpNtlmAuth
	from urllib3.exceptions import InsecureRequestWarning
	from urllib import quote_plus

	requests.packages.urllib3.disable_warnings(category=InsecureRequestWarning)

	import requests
	import random
	import string
	import sys
	import time
	import requests
	import urllib3
	urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

	def id_generator(size=6, chars=string.ascii_lowercase + string.digits):