jfstenuit

Investigate suspicious URL

Get screenshot of suspicious web site

https://screenshot.guru/

So you have an HTML file that starts with <script>eval(function(p,a,c,k,e,d) ...

This is quite heasy to de-obfuscate

Just replace the <script>eval( part with the following HTML code :

<!DOCTYPE html>
<html>
<head><title>debug</title>

The need

You want to run an OpenVPN server on a debian-like system with a dynamic IP address (f.i. behind a consumer cable modem access)

The problem

You need to provide a fixed IP address in the openvpn configuration

The solution

Ensure the OpenVPN configuration is updated with each IP address change and reload the server

In order to run an application upon IP address change, you need to create a hook inside /etc/dhcp/dhclient-exit-hooks.d .

Core

rtmp

syntax: rtmp { … }

context: root

The block which holds all RTMP settings

server

The need

You need to extract a timeline from NTFS MFT and UserJrnl from a disk image on your standard linux workstation

The issue

Either the tools are outdated (analyseMFT, log2timeline.pl, ...), or the up-to-date tools are not compatible with the python libraries installed by default on Debian.

The solution

Introduction

Configuration files

On Debian (and probably on derivatives like Ubuntu Server), postfix configuration files are spread across several files :

transport
master.cf
transport.cf
main.cf

Configuration

main.cf

Introduction

Installing Huawei E3531 Surf Stick on Linux

May be a valuable insight for more modern surf sticks like Huawei E8231 and the likes ...

Linux is currently Ubuntu, Debian or Raspbian should be similar

The problem

This Huawei Surf stick has several USB mode. It appears first as CD-ROM-like device, so that Windows users can install their driver, then switches mode to appear as "something else". By defaut, this is a network card (virtually connected to a router),

Get the Kali netinstall ISO

 cd /root/iso
 wget 'http://http.kali.org/dists/kali-rolling/main/installer-amd64/current/images/netboot/mini.iso'

Create storage for the Kali VM

 lvcreate -n kali-disk -L 40G vg
 lvcreate -n kali-swap -L 4G  vg
 mkfs.ext4 /dev/vg/kali-disk

Get all running apps

curl -X GET 'https://172.16.60.10/api/gui_app_framework/applications' -u admin:PASSWORD -k|python -mjson.tool

Caution: this will result in a huge json structure - you need t find the "AppId" of the offending app (numeric value)

Delete offending app

curl -X DELETE -k -u admin:PASSWORD https://172.16.60.10/api/gui_app_framework/applications/1354

	<?php

	function saferXML($url){
	// Not bullet-proof
	// but already much better than simplexml_load_string(file_get_contents('https://...'))
	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL,$feed_url);
	curl_setopt($ch, CURLOPT_PROXY, WP_PROXY_HOST); // your proxy url
	curl_setopt($ch, CURLOPT_PROXYPORT, WP_PROXY_PORT); // your proxy port number
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);