Skip to content

Instantly share code, notes, and snippets.

@drk1wi
drk1wi / README.md
Created October 13, 2021 07:40 — forked from Remiii/README.md
How to delete Vault (AWS Glacier) 🗻

How to delete Vault (AWS Glacier)

This Gist give some tips in order to remove AWS Glacier Vault with AWS CLI (ie. https://aws.amazon.com/en/cli/).

Step 1 / Retrive inventory

$ aws glacier initiate-job --job-parameters '{"Type": "inventory-retrieval"}' --vault-name YOUR_VAULT_NAME --account-id YOUR_ACCOUNT_ID --region YOUR_REGION
@drk1wi
drk1wi / logger.js
Created March 16, 2021 13:56 — forked from fransr/logger.js
logger.js for hunting script gadgets. More info about script gadgets: https://github.com/google/security-research-pocs/tree/master/script-gadgets (Sebastian Lekies / Eduardo Vela Nava / Krzysztof Kotowicz)
var logger = console.trace;
// ELEMENT
;(getElementByIdCopy => {
Element.prototype.getElementById = function(q) {
logger('getElementById', q, this, this.innerHTML);
return Reflect.apply(getElementByIdCopy, this, [q])
}
})(Element.prototype.getElementById)
@drk1wi
drk1wi / vpn-openconnect-connect-to-cisco-anyconnect.md
Created January 3, 2021 16:01 — forked from stefancocora/vpn-openconnect-connect-to-cisco-anyconnect.md
Split tunneling with openconnect - A guide on how to use openconnect to establish a vpn connection to an enterprise cisco anyconnect vpn endpoint with client side routing.

Introduction

The purpose of this short howto is to show you how to:

  • use openconnect [1] to connect to an enterprise cisco anyconnect endpoint
  • whilst minimizing the amount of traffic that your route through the vpn connection

Usually VPN administrators will puth the default route to the users, so that all user traffic is routed through the vpn connection. This is to address the various security concerns around compromised user computers bridging external internet traffic into the secure VPN network.

While the VPN administrator can push routes to the clients, the client can ignore these default routes and establish client side routing so that only the required A.B.C.D/E network is routed through the VPN. All other traffic will still use the clients default route and default outbound internet connection.

@drk1wi
drk1wi / save-blobs.sh
Created June 2, 2019 07:17 — forked from anonymous/save-blobs.sh
save-blobs.sh
#!/bin/sh
MODEL="iPhone9,3"
ECID="##########"
#./tsschecker_macos -d $MODEL -e $ECID -s -i 11.2.2
#./tsschecker_macos -d $MODEL -e $ECID -s -i 11.2.1
#./tsschecker_macos -d $MODEL -e $ECID -s -i 11.2
./tsschecker_macos -d $MODEL -e $ECID -s -i 11.1.2
./tsschecker_macos -d $MODEL -e $ECID -s -i 11.1.1
./tsschecker_macos -d $MODEL -e $ECID -s -i 11.1
./tsschecker_macos -d $MODEL -e $ECID -s -i 11.0.3
// iPhone11,2-4-6
void inject_trusts(int pathc, const char *paths[])
{
printf("[+] injecting into trust cache...\n");
extern uint64_t g_kern_base;
static uint64_t tc = 0;
if (tc == 0) {
// loaded_trust_caches: 0xFFFFFFF008F702C8

Setup modern.ie vagrant boxes

Since modern.ie released vagrant boxes, it' no longer necessary to manually import the ova file to virtualbox, as mentioned here.

However, the guys at modern.ie didn't configured the box to work with WinRM. This how-to addresses that, presenting steps to proper repackage these boxes, adding WinRM support. Additionally configures chocolatey package manager and puppet provisioner.

Pre-requisites

@drk1wi
drk1wi / squid.conf
Created August 9, 2018 10:59 — forked from hpcorona/squid.conf
simple squid3 configuration to allow all to connect to all
#Recommended minimum configuration:
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 0.0.0.0/8 192.168.100.0/24 192.168.101.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher