haxxinen

1. Share Internet from macOS to Pi Ethernet port

• System Preferences -> Sharing -> (Unlock Pannel)
• Share your connection from Wi-Fi (example)
• To computers using: USB LAN / Ethernet
• [check] Internet Sharing -> Start

2. Find bridged device using MAC address of Pi

haxxinen

1. Prerequisites

1.1. Account must be enabled (net user Administrator /active:yes)

>net user Administrator | findstr "active"
Account active               Yes

1.2. Info about domain and local host name

haxxinen

1. download and install https://www.xquartz.org/
2. remember to log out after install
3. login via SSH to remote box ssh -X [email protected]
4. make sure rdesktop runs on the remote box
5. run rdesktop and wait for the magic to happen

haxxinen

// ViewController.swift

import UIKit

class ViewController: UIViewController {

    override func viewDidLoad() {
        super.viewDidLoad()
        // Do any additional setup after loading the view, typically from a nib.
        

haxxinen

vcap.me
fuf.me
localtest.me
127-0-0-1.org.uk
yoogle.com
lvh.me
127.0.0.1.xip.io

haxxinen

([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")

haxxinen

# curl -sO https://raw.githubusercontent.com/sleventyeleven/linuxprivchecker/master/linuxprivchecker.py
# pip install 2to3 && 2to3 -w linuxprivchecker.py >/dev/null 2>/dev/null
# apt-get install python-autopep8 -yqq && autopep8 -i linuxprivchecker.py
# sed -i 's/results = out.*/results = out.decode("utf-8").split("\\n")/g' linuxprivchecker.py
# python3 linuxprivchecker.py

haxxinen

println(hudson.util.Secret.fromString("1234").getEncryptedValue())

Output: {AQAAABAAAAAQc//GkWTtyO8B5f1re53AX+8S0yCRKA8h7ean+y/sQig=}

println(hudson.util.Secret.decrypt('{AQAAABAAAAAQc//GkWTtyO8B5f1re53AX+8S0yCRKA8h7ean+y/sQig=}'))

Output: 1234

haxxinen

$ cat SimpleHTTPServerv6.py
import BaseHTTPServer, SimpleHTTPServer, socket

class SimpleHTTPServer6(BaseHTTPServer.HTTPServer):
   address_family=socket.AF_INET6

SimpleHTTPServer.test(ServerClass=SimpleHTTPServer6)
$ SimpleHTTPServerv6.py
$ http http://[::1]:8888

haxxinen

info

• even root can be privileged and unprivileged
• super-user does not always imply root (uid == 0)
• can run a process as root w/o any capabilities (and the other way around)
• process capabilities have been around for a while (file capabilities is something more recent)
• capabilities are enabled by default in all modern Linux distros (nobody uses them :D - "but the man in the box does...")
  • management tools installed by default
• it's really easy to lose file capabilities when moving files around the system (bugs, bugs, bugs...)