jkramarz

SNS Secrets Walkthrough

Summary

This is a walkthrough of Capstone Challenge #2: SNS Secrets from Introduction to AWS Pentesting by Tyler Ramsbey. It is based on cloudgoat sns_secrets scenario. You're provided with access to low-privileged user with some SNS privileges.

Exploitation

Initial access and receiving SNS message

jkramarz

Beanstalk Secrets Walkthrough

Summary

This is a walkthrough of Capstone Challenge #1: Beanstalk Secrets from Introduction to AWS Pentesting by Tyler Ramsbey. It is based on cloudgoat beanstalk_secrets scenario. You're provided with access to low-privileged user with some Elastic Beanstalk privileges.

Exploitation

Initial access

jkramarz

Free

Craycle Ranger Mini

• 800mm wingspan
• 235g print weight (+ supports!) PLA
• https://craycle.com/product/ranger-mini-3ch-trainer-plane-stl-files/
• needs to be sliced with Cura

3Dlabprint Piper J-3 Cub

• 1068mm wingspan

jkramarz

#!/usr/bin/env perl
# sends email subject line as zmtrigger command
# can be used to start ZoneMinder recording from non-Onvif capable camera that can send emails on event
use IO::Socket::INET;
use Net::Server::Mail::ESMTP;
use Email::Simple;
my $server = new IO::Socket::INET Listen => 1, LocalPort => 10025;
 
my $conn;
while($conn = $server->accept)

jkramarz

#!/bin/env python3
import subprocess
import re
from functools import reduce
import sys
import argparse

def get_channels(band="GSM900", timeout=60):
    output = subprocess.check_output(['./kal', '-s', band], timeout=timeout)
    match = re.finditer('chan: (?P<channel>[\d]+) \(.*\) power: (?P<power>[\d.]+)', str(output))

jkramarz

#!/usr/bin/env python2
import re
import turtle
import sys
import math

def to_mm(distance):
    return distance * 0.0254;

def to_mils(distance):

jkramarz

Keybase proof

I hereby claim:

• I am jkramarz on github.
• I am jkramarz (https://keybase.io/jkramarz) on keybase.
• I have a public key whose fingerprint is F0A6 047B 425B A22E 516E 8CF2 9E77 454C B474 E5BB

To claim this, I am signing this object:

jkramarz

#include <iostream>
#include <cctype>
#include <cstdlib>
using namespace std;

bool game = false;
string colors[] = {"pink", "blue", "red", "yellow", "green"};
int actual = 0;
int points = 0;

jkramarz

PREFAB IDS
0|1|18|9|9|7|7|41
POSITIONS
0,0,0|0,0,0.5|0,0.4999999,2|0,0.4999999,0|0,0.4999999,0|0.5,0,0|-0.5,0,2|0,0.4999999,0
ROTATIONS
0,0,0,1|0,0,0,1|-0.7071068,0,0,0.7071068|-0.7071068,0,0,0.7071068|-0.7071068,0,0,0.7071068|0,0.7071069,0,0.7071066|0,-0.7071069,0,0.7071066|-0.7071068,0,0,0.7071068
IS BLOCK FLIPPED
0|0|0|0|0|0|0|0
BRACE + SIMILAR BLOCKS - START POSITION
90000,90000,90000|90000,90000,90000|90000,90000,90000|0,0,0|0,0,0|0,0,0|0,0,0|90000,90000,90000

jkramarz

#!/bin/bash
# copyleft 2013 Jakub Kramarz http://hskrk.pl
# based on http://www.jann.cc/2012/12/11/getting_started_with_the_ti_stellaris_launchpad_on_linux.html

set -x
function install_gcc_arm_embedded() {
	sudo yum install glibc.i686
	wget https://launchpad.net/gcc-arm-embedded/4.7/4.7-2013-q2-update/+download/gcc-arm-none-eabi-4_7-2013q2-20130614-linux.tar.bz2
	tar -xf gcc-arm-none-eabi-4_7-2013q2-20130614-linux.tar.bz2 -C $HOME/.local
	rm gcc-arm-none-eabi-4_7-2013q2-20130614-linux.tar.bz2