Miles Richardson milesrichardson

Build a Squid transparent proxy from source code

Please note that this whole manual refers to the version 3.5.5 of Squid. You probably would have to adapt some commands to the version you will actually download.

Can NAT traversal be Tor's killer feature?

tl;dr: how about a virtual global flat LAN that maps static IPs to onion addresses?

[We all know the story][1]. Random feature gets unintentionally picked up as the main reason for buying/using a certain product, despite the creator's intention being different or more general. (PC: spreadsheets; Internet: porn; smartphones: messaging.)

Running Docker on two hosts, bridged with Tinc

This Gist is similar to https://gist.github.com/noteed/8656989 which uses Open vSwitch instead of Tinc.

Setup

Download the install.sh script and run it:

> https://gist.githubusercontent.com/noteed/11031504/raw/install.sh

This project has moved to a GitHub repository:

https://github.com/hwdsl2/setup-ipsec-vpn

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000

Intercepts HTTPs Traffic with Python & mitmproxy

Warning

This Gist is created in 2014, and it's highliy outdated now, according to one of mitmproxy's manjor contributor (check his comment below). Thanks for letting us know, @mhils!

Introduction

Modern applications usually make use of back-end API servers to provide their services. With a non-transparent HTTPs proxy, which intercepts the communication between clients and servers (aka the man-in-the-middle scheme), you can easily manipulate both API requests and responses.

	#!/bin/bash
	#
	# Bash script to setup headless Selenium (uses Xvfb and Chrome)
	# (Tested on Ubuntu 12.04)

	# Add Google Chrome's repo to sources.list
	echo "deb http://dl.google.com/linux/chrome/deb/ stable main" \| sudo tee -a /etc/apt/sources.list

	# Install Google's public key used for signing packages (e.g. Chrome)
	# (Source: http://www.google.com/linuxrepositories/)

	#!/bin/bash
	set -ve
	lxc-create -n vpn -t ubuntu

	# ln -s /var/lib/lxc/vpn/config /etc/lxc/auto/vpn.conf
	perl -i -ple 's/#lxc.aa_profile = unconfined/lxc.aa_profile = unconfined/' /etc/lxc/auto/vpn.conf

	perl -i -ple 's/^exit 0/# exit 0/' /etc/rc.local
	cat >>/etc/rc.local <<hello
	mkdir -p /var/lib/lxc/vpn/rootfs/dev/net/

	"""
	Demo of json_required decorator for API input validation/error handling
	"""

	import inspect
	import functools
	import json
	from traceback import format_exception
	from flask import jsonify, request
	import sys

	# Remove every file except "./somefile.txt" and the directory "./somedir".
	# --prune-empty to remove empty commits.
	git filter-branch --tree-filter "find . -not -path './.git' -not -path './.git/' -not -path './somefile.txt' -not -path './somedir/' -not -path './somedir' -delete" --prune-empty