kkirsche

# -*- coding: utf-8 -*-
from paddingoracle import BadPaddingException, PaddingOracle
from base64 import b64encode, b64decode
from urllib import quote, unquote
import requests
import socket
import time


class PadBuster(PaddingOracle):

kkirsche

• Open a webpage that uses the CA with Firefox
• Click the lock-icon in the addressbar -> show information -> show certificate
• the certificate viewer will open
• click details and choose the certificate of the certificate-chain, you want to import to CentOS
• click "Export..." and save it as .crt file
• Copy the .crt file to /etc/pki/ca-trust/source/anchors on your CentOS machine
• run update-ca-trust extract
• test it with wget https://thewebsite.org

kkirsche

#!/bin/bash
for file in $(find .)
do 
    if [ -f $file ]; then
        wc -l $file
    fi
done | sort -n

kkirsche

class DictionaryUtility:
    """
    Utility methods for dealing with dictionaries.
    """
    @staticmethod
    def to_object(item):
        """
        Convert a dictionary to an object (recursive).
        """
        def convert(item): 

kkirsche

FROM python:2.7
MAINTAINER Kevin Kirsche

RUN apt-get update && apt-get -y dist-upgrade && apt-get -y install git
RUN git clone https://LaNMaSteR53@bitbucket.org/LaNMaSteR53/recon-ng.git && cd recon-ng && pip install -U pip && pip install -r REQUIREMENTS

ENTRYPOINT ["/bin/bash"]

kkirsche

Red Prompt — Production
STARTCOLOR="\e[0;31m"
ENDCOLOR="\e[0;0m"
PS1="\[$STARTCOLOR\][\u@\h \W]\\$ \[$ENDCOLOR\]"

Yellow Prompt — Staging
STARTCOLOR="\e[0;33m"
ENDCOLOR="\e[0;0m"
PS1="\[$STARTCOLOR\][\u@\h \W]\\$ \[$ENDCOLOR\]"

kkirsche

[defaults]
inventory: ./inventories/production/hosts.yml
remote_user: kkirsche
remote_port: 22
forks: 20
pipelining: True
callback_whitelist: json
retry_files_enabled: False

kkirsche

#!/bin/bash

pat="^[0-9a-zA-Z ]{1,}\.plist"
xml_pat="^<\?xml.*"

if [[ $EUID -ne 0 ]]; then
	echo "[-] Not running as root, you probably won't see any results."
fi

for f in /var/db/dslocal/nodes/Default/users/*

kkirsche

# or use https://docs.python.org/3/library/itertools.html#itertools.permutations
def permutations(string, step = 0):
    # if we've gotten to the end, print the permutation
    if step == len(string):
        print "".join(string)

    # everything to the right of step has not been swapped yet
    for i in range(step, len(string)):

        # copy the string (store as array)

kkirsche

#
sudo grep -rni --exclude-dir={proc,boot,sys} "searchingfor" /