gquere

BareBox security advisory

Barebox security features

The security features of Barebox are:

• Signed images
• Signed "state variables" (shared with the kernel)

gquere

#!/usr/bin/env python3
import sys
import re
import random
import base64

with open(sys.argv[1], "rb") as f:
    lines = f.readlines()

obfuscated_lines = b""

gquere

Network
=======
DNS                 53
DHCP server         67
DHCP client         68
NTP                 123

Auth
====
TACACS              49

gquere

#!/usr/bin/env python3
# Convert OpenLDAP hashes to a format Hashcat can understand
import sys
import base64

with open(sys.argv[1], 'r') as f:
    lines = f.readlines()

for line in lines:
    line = line.rstrip("\n")

gquere

#!/usr/bin/env python3
# Convert OpenLDAP hashes to a format john the ripper can understand
import sys
import base64

with open(sys.argv[1], 'r') as f:
    lines = f.readlines()

for line in lines:
    line = line.rstrip("\n")

gquere

#!/usr/bin/env python3
import argparse
import urllib3
import requests
import json
import sys


# SUPPRESS WARNINGS ############################################################
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

gquere

#include <stdlib.h>
#include <stdio.h>
#include <stdint.h>
#include <fcntl.h>

#include <linux/i2c-dev.h>


#define READ_SIZE	(256)
#define NB_PAGES	(256)

gquere

#!/usr/bin/env python3
import requests
import json
import urllib3
import sys


# SUPPRESS WARNINGS ############################################################
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

gquere

#!/usr/bin/env python3
import argparse
import requests
import json
import urllib3
from urllib.parse import urlparse
import os
import re
from getpass import getpass

gquere

#!/usr/bin/env python3
import argparse
import requests
import json
import urllib3
from urllib.parse import urlparse
import os
import re
from getpass import getpass