Skip to content

Instantly share code, notes, and snippets.

@diyinfosec
diyinfosec / ntfs_ads_limit_test.ps1
Created February 3, 2022 18:07
Testing the number of possible Alternate Data Streams for a file in NTFS.
#- Iterate over the maximum size of Attribute ID
for($i=1; $i -lt 65536; $i++)
{
#- This file must already exist. Additional hardlinks will be created for this file.
$original_file_name="file.txt";
#- Testing the upper limit for ADS creation, breaking off once there is an non-terminating error [Set-Content : Could not open the alternate data stream ‘<stream_name>’ of the file]
#- Non-terminating errors are not handled using try/catch. To force a non-terminating error to be caught we use "-ErrorAction Stop"
try
{
apiVersion: audit.k8s.io/v1beta1
kind: Policy
rules:
# non relevant rules
- level: None
nonResourceURLs:
- "/healthz*"
- "/logs"
- "/metrics"
- "/swagger*"
#!/bin/bash
#- Script to setup Docker, Minikube, Kubectl, Helm on Ubuntu.
#- On the K8s cluster install - Vault, Consul, Datadog agent.
#- Access to K8s dashboard is provided through nginx on port 5000. http://<host_ip>:5000
#- Acess to Vault UI is provided through kubectl port-forward. http://<host_ip>:8200
#- I use multipass for the VMs, so rebuild a VM the following steps are applicable.
#- For the first time, the first two commands can be ignored.
# multipass delete ktest
#!/bin/bash
#- This script is just a collection of functions that I created for learning ext4.
#- Just run ". ./manage_ext4.sh" from the command prompt and it will load the functions into your current session.
#- To list the functions defined in your Bash shell use: "declare -F"
#- For our purposes you can ignore functions starting with _. So "declare -F | grep -v ' _'" gives you a shorter list.
#==================================
#- Comments about multipass
#==================================

Keybase proof

I hereby claim:

  • I am diyinfosec on github.
  • I am ane2843 (https://keybase.io/ane2843) on keybase.
  • I have a public key ASBVHEdc_Yub7TdQ7oulsyilO33pP4Y1T0iX2ukTTXKkcQo

To claim this, I am signing this object: