Skip to content

Instantly share code, notes, and snippets.

@jfstenuit
jfstenuit / Installing_linux_on_Baytrail_tablet.md
Last active September 21, 2024 06:43
Installing Linux on a Baytrail tablet

Hardware specs

Chinese Brand "ITworks" , Model TW891, distributed in France and Belgium by Darty

  • CPU: Intel(R) Atom(TM) CPU Z3735F @ 1.33GHz
  • Video: Intel® HD Graphics for Intel Atom® Processor Z3700 Series
  • Screen: 1280x800
  • WiFi + BT: Realtek RTL8723BS_BT
  • Disks: mmcblk1: mmc1:0001 DF4032 29.1 GiB
  • RAM: 2GB DDR3 @ 1333 MHz
@jfstenuit
jfstenuit / RHEL_into_CentOS.md
Last active February 9, 2017 13:29
Transform a RHEL into CentOS

Download base packages

  wget http://mirror.centos.org/centos/6/os/x86_64/RPM-GPG-KEY-CentOS-6
  wget http://mirror.centos.org/centos/6/os/x86_64/Packages/centos-release-6-8.el6.centos.12.3.x86_64.rpm
  wget http://mirror.centos.org/centos/6/os/x86_64/Packages/yum-3.2.29-73.el6.centos.noarch.rpm
  wget http://mirror.centos.org/centos/6/os/x86_64/Packages/yum-utils-1.1.30-37.el6.noarch.rpm

Check CentOS mirror for newer files if needed

Erase RHEL specific packages

@jfstenuit
jfstenuit / wannacry-faq-en.md
Created May 13, 2017 10:17
Wannacry ransomware FAQ

What is it ?

Wannacrypt0r is a new strain of ransomware.

Unlike its predecessors, it does not require logged in credentials or email dissemination. As soon as a computer is powered on the LAN and/or the Internet, it can be infected. No user interaction is required.

Why is it so dangerous ?

Because it does not require user interaction to propagate, it was capable of infecting more than 100000 computers in 24 hours. Some high-end victims include the british National Health Service (NHS) and its hospitals, spanish telecom operator Telefonica, french car manufacturer Renault and german railway operator Deutsche Bahn (DB).

@jfstenuit
jfstenuit / Qradar-remove-app.md
Created June 20, 2017 11:20
Remove custom app from qradar

Get all running apps

curl -X GET 'https://172.16.60.10/api/gui_app_framework/applications' -u admin:PASSWORD -k|python -mjson.tool

Caution: this will result in a huge json structure - you need t find the "AppId" of the offending app (numeric value)

Delete offending app

curl -X DELETE -k -u admin:PASSWORD https://172.16.60.10/api/gui_app_framework/applications/1354

@jfstenuit
jfstenuit / saferXMLwebservice.php
Created December 11, 2017 13:34
Safer XML web service call
<?php
function saferXML($url){
// Not bullet-proof
// but already much better than simplexml_load_string(file_get_contents('https://...'))
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$feed_url);
curl_setopt($ch, CURLOPT_PROXY, WP_PROXY_HOST); // your proxy url
curl_setopt($ch, CURLOPT_PROXYPORT, WP_PROXY_PORT); // your proxy port number
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
@jfstenuit
jfstenuit / kali_on_xen.md
Last active April 17, 2018 12:37
Installing Kali on headless Xen system

Get the Kali netinstall ISO

 cd /root/iso
 wget 'http://http.kali.org/dists/kali-rolling/main/installer-amd64/current/images/netboot/mini.iso'

Create storage for the Kali VM

 lvcreate -n kali-disk -L 40G vg
 lvcreate -n kali-swap -L 4G  vg
 mkfs.ext4 /dev/vg/kali-disk
@jfstenuit
jfstenuit / Huawei WWAN.md
Last active November 14, 2023 15:16
Using a Huawei WWAN dongle on Linux

Introduction

Installing Huawei E3531 Surf Stick on Linux

May be a valuable insight for more modern surf sticks like Huawei E8231 and the likes ...

Linux is currently Ubuntu, Debian or Raspbian should be similar

The problem

This Huawei Surf stick has several USB mode. It appears first as CD-ROM-like device, so that Windows users can install their driver, then switches mode to appear as "something else". By defaut, this is a network card (virtually connected to a router),

@jfstenuit
jfstenuit / secure_postfix_mta.md
Last active September 11, 2019 08:57
Secure Postfix install on Debian

Introduction

Configuration files

On Debian (and probably on derivatives like Ubuntu Server), postfix configuration files are spread across several files :

  • transport
  • master.cf
  • transport.cf
  • main.cf

Configuration

main.cf

@jfstenuit
jfstenuit / Plaso forensics on Debian.md
Last active October 27, 2020 08:48
Plaso forensics on Debian Buster

The need

You need to extract a timeline from NTFS MFT and UserJrnl from a disk image on your standard linux workstation

The issue

Either the tools are outdated (analyseMFT, log2timeline.pl, ...), or the up-to-date tools are not compatible with the python libraries installed by default on Debian.

The solution

@jfstenuit
jfstenuit / nginx_rtmp_reference.md
Last active May 16, 2021 11:10
NginX RTMP reference

Core

rtmp

syntax: rtmp { … }

context: root

The block which holds all RTMP settings

server