Neeraj Kanhere neerajkanhere

Recon and Attack Vectors from My Logs

This document contains excerpts from my web server logs collected over a period of 7 years that shows various kinds of recon and attack vectors.

There were a total of 37.2 million lines of logs out of which 1.1 million unique HTTP requests (Method + URI) were found.

$ sed 's/^.* - - \[.*\] "\(.*\) HTTP\/.*" .*/\1/' access.log &gt; requests.txt

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

58 bytes of CSS to look great nearly everywhere

When making this website, i wanted a simple, reasonable way to make it look good on most displays. Not counting any minimization techniques, the following 58 bytes worked well for me:

main {
  max-width: 38rem;
  padding: 2rem;
  margin: auto;
}

Create React App does not provide watching build mode oficially (#1070).

This script provides watching build mode for an external tool such as Chrome Extensions or Firebase app.

How to Use

Create a React app.

Put the script into scripts/watch.js.

How to install OpenCV 4.5.2 with CUDA 11.2 and CUDNN 8.2 in Ubuntu 20.04

First of all install update and upgrade your system:

    $ sudo apt update
    $ sudo apt upgrade

Then, install required libraries:

	//
	// ffmpeg_customfilter
	// - base name - ainfoda (audio filter)
	// - base name - vinfoda (video filter)
	//


	// 1. create new filein libavfilter/infoda_af.c
	// use any filters as template, simplest is af_afnull.c
	// filename is arbitrary (all recent named as af_name), but for me all my stuff called with

	<!-- From: https://gist.githubusercontent.com/sorvell/48f4b7be35c8748e8f6db5c66d36ee29/raw/67346e4e8bc4c81d5a7968d18f0a6a8bc00d792e/index.html -->
	<!doctype html>
	<html>
	<head>
	<!-- Polyfills only needed for Firefox and Edge. -->
	<script src="https://unpkg.com/@webcomponents/webcomponentsjs@latest/webcomponents-loader.js"></script>
	</head>
	<body>
	<!-- Works only on browsers that support Javascript modules like
	Chrome, Safari, Firefox 60, Edge 17 -->

	import cv2
	import time

	CONFIDENCE_THRESHOLD = 0.2
	NMS_THRESHOLD = 0.4
	COLORS = [(0, 255, 255), (255, 255, 0), (0, 255, 0), (255, 0, 0)]

	class_names = []
	with open("classes.txt", "r") as f:
	class_names = [cname.strip() for cname in f.readlines()]

	# -- coding: utf-8 --

	"""
	Sessions module for the Tornado framework.
	Milan Cermak <[email protected]>

	This module implements sessions for Tornado. It can store
	session data in files or MySQL databse, Memcached, Redis
	and MongoDB.

	// A small SSH daemon providing bash sessions
	//
	// Server:
	// cd my/new/dir/
	// #generate server keypair
	// ssh-keygen -t rsa
	// go get -v .
	// go run sshd.go
	//
	// Client: