jvarg

Companies

• Github - Recently started hiring developers in Tokyo
• Heroku - Infrastructure-as-a-service; recently bought by Salesforce
• Pivotal Labs - Recently started hiring developers in Tokyo; nice Mori Tower office
• Google - Consistently ranked best place in Japan to work; nice Mori Tower office
• Amazon - I THINK they now hire some developers
• Microsoft - English-friendly with chances to speak Japanese; apparently have some interesting projects; nice Shinagawa office
• Kaizen Platform - Pretty awesome company developing A/B testint as a service / analytics services; I think most people there speak English; has an office in San Francisco
• [Treasure Data](https://www.treasureda

jvarg

from keras.models import Sequential
from keras.layers import Dense
from keras.utils.io_utils import HDF5Matrix
import numpy as np

def create_dataset():
    import h5py
    X = np.random.randn(200,10).astype('float32')
    y = np.random.randint(0, 2, size=(200,1))
    f = h5py.File('test.h5', 'w')

jvarg

How to pass the OSCP

1. Recon
2. Find vuln
3. Exploit
4. Document it

Recon

Unicornscans in cli, nmap in msfconsole to help store loot in database.

jvarg

#
# README
#
#  Bash script to simplify the running of the AFL (American Fuzzy Loop)
#
# It will:
#   - use AFL_HARDEN=1 to detect simple memory corruption
#   - use libdislocator to detect HEAP memory corruption
#   - use multi-thread AFL with tmux 4-panes splitted to ease viewing

jvarg

#!/bin/bash

objdump -d "${1}" | grep -Eo '\$0x[0-9a-f]+' | cut -c 2- | sort -u | while read const; do echo $const | python -c 'import sys, struct; sys.stdout.write("".join(struct.pack("<I" if len(l) <= 11 else "<Q", int(l,0)) for l in sys.stdin.readlines()))' > testcases/$const; done
i=0; strings "${1}"| while read line; do echo -n "$line" > testcases/string_${i} ; i=$[ $i + 1 ] ; done