ishideo

# This is an expanded gitleaks config based on the default config.
# It adds a few new regular rules and a few composite rules.

title = "gitleaks config"

# TODO: change to [[allowlists]]
[allowlist]
description = "global allow lists"
paths = [
    '''gitleaks\.toml''',

ishideo

# This is the default gitleaks configuration file.
# Rules and allowlists are defined within this file.
# Rules instruct gitleaks on what should be considered a secret.
# Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
title = "gitleaks config"

[allowlist]
description = "global allow lists"
regexes = [
    '''219-09-9999''',

ishideo

Introduction

This Gist aims to centralise the most relevant public sources of information related to the HTTP/2 Rapid Reset vulnerability. This vulnerability has been disclosed jointly by Google, Amazon AWS, and Cloudflare on 10 October 2023 at 12:00 UTC.

Please help us make this page as comprehensive as possible by contributing relevant references, vendor advisories and statements, mitigations, etc.

References

• CVE-2023-44487, CIRCL CVE Search
• How AWS protects customers from DDoS events, AWS

ishideo

#!/usr/bin/env bash

cat cidr_cdn.tsv | paste -d, $(yes '-' | head -10000) | parallel --line-buffer -k -j$(nproc) --bar grepcidr {} ip.tsv | sort -u >ip_cdn.tsv

ishideo

#!/usr/bin/env bash

cat ip_domain.tsv | bb -e '
  (->> (line-seq (java.io.BufferedReader. *in*))
       (map #(str/split % #"\t"))
       (group-by first)
       (map (fn [[ip rows]] (str ip "\t" (str/join ";" (map second rows)))))
       (run! println))
' > ip_domains.tsv

ishideo

🚀 GNU Parallel Mastery: The Ultimate Cheat Sheet

📊 Basic Usage

Command	Description	Example
parallel echo ::: A B C	🔤 Process items in parallel	Output: A, B, C (in any order)
parallel echo {} ::: *.txt	🔍 Use {} as placeholder	Echoes names of all .txt files
cat file.txt | parallel echo	📥 Read input from stdin	Processes each line of file.txt
parallel -j4 command ::: item1 item2 item3	🔢 Limit to 4 jobs at a time	Runs 'command' on items, max 4 parallel

ishideo

                         ╔╦╗╦ ╦  ╔╗ ┬ ┬┌─┐  ╔╗ ┌─┐┬ ┬┌┐┌┬┐┬ ┬  ╦═╗┌─┐┌─┐┌─┐┬ ┬┬─┐┌─┐┌─┐┌─┐
                         ║║║╚╦╝  ╠╩╗│ ││ ┬  ╠╩╗│ ││ │││││ └┬┘  ╠╦╝├┤ └─┐│ ││ │├┬┘│  ├┤ └─┐
                         ╩ ╩ ╩   ╚═╝└─┘└─┘  ╚═╝└─┘└─┘┘└┘┴  ┴   ╩╚═└─┘└─┘└─┘└─┘┴└─└─┘└─┘└─┘
                                          
                                           //
                              ()==========>>======================================--
                                           \\


2FA Bypass

ishideo

#!/usr/bin/env bb
;; Script to search ddg.
;; Takes a search term then asks you to select a bang.

;; Copyright John Cooper
;; This program is free software: you can redistribute it and/or modify it under the terms of the 
;; GNU General Public License as published by the Free Software Foundation, 
;; either version 3 of the License, or (at your option) any later version.
;; This program is distributed in the hope that it will be useful, 
;; but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

ishideo

#!/usr/bin/env bash

cat cert.tsv | bb -e '
  (->> (slurp *in*)
       str/split-lines
       (mapcat #(re-seq #"\\n\s\sCommonName:\s.*?\\n\\n|\\nDNS Names:\\n.*?\\n\\n" %)))' \
| bb -e '
  (->> (slurp *in*)
       str/split-lines
       (mapcat #(str/split % #"\\\\n"))

ishideo

#!/usr/bin/env bash

bb -e '
(let [ips   (str/split-lines (slurp "ip.tsv"))
      table (map #(str/split % #"\t") (str/split-lines (slurp "ip_domain.tsv")))
      idx   (into {} (map (juxt first second) table))]
  (doseq [ip ips]
    (println (get idx ip))))'