nyxwulf

1. Put tlskeylogger.plist at ~/Library/LaunchAgents/tlskeylogger.plist
2. launchctl load ~/Library/LaunchAgents/tlskeylogger.plist, so it will load on the next restart
3. launchctl start ~/Library/LaunchAgents/tlskeylogger.plist, so it will load the environment variable immediately
4. Restart your browser(s)
5. See how TLS keys are being written to ~/.tlskeyfile via tail -f ~/.tlskeyfile

nyxwulf

history \
| sed "s/^[0-9 ]*//" \
| perl -pe 's/ *\| */\n/g' \
| gawk '{counts[$1] += 1}
END { for (x in counts) { print counts[x],x}}' OFS="\t" \
| column -t \
| sort -k 1,1nr \
| head -100

nyxwulf

#!/usr/bin/env bash
apt-get -y update
apt-get -y install build-essential zlib1g-dev libssl-dev libreadline5-dev libyaml-dev
cd /tmp
wget ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p194.tar.gz
tar -xvzf ruby-1.9.3-p194.tar.gz
cd ruby-1.9.3-p194/
./configure --prefix=/usr/local
make
make install