John Lawrence M. Peñafiel penafieljlm

/********************************************************************
 *   This C program was generated by spl2c, the Shakespeare to C    *
 *          converter by Jon Åslund and Karl Hasselström.           *
 ********************************************************************/

/* libspl definitions and function prototypes */
#include "spl.h"

int main(void)

CISSP Notes

CIA Triad

Confidentiality
- Resources should be protected from unauthorized access
- Prioritized by governments
- Concepts
  - Sensitivity
    - How harmful is disclosure
Discretion

Concepts

Common Instructions
- https://wiki.cdot.senecacollege.ca/wiki/X86_64_Register_and_Instruction_Quick_Start
Value Representation
- Negative Numbers
  - 2s Complement
- Endianess
- Data Structures
Stack Frame Format

Executables
- Linux Native
  - Static Analysis
    - strings: For listing down displayable text
    - objdump: For parsing binaries
    - file: For checking architecture of executable
    - readelf: For parsing ELF Headers
    - checksec: Checks active protection mechanisms for executables
      - https://tk-blog.blogspot.com/search/label/checksec.sh
https://github.com/kholia/checksec

Each user gets symmetric key, private key, and public key
Symmetric key = encrypts the data that only the user needs to see
Private key = decrypts the data shared to the user
Public key = encrypts the data shared to the user
Symmetric key is encrypted by user PBKDF2 of user's password
Private key is encrypted by user's symmetric key
Generate recovery codes for user and encrypt copies of symmetric key using these recovery codes
Encrypt user symmetric key using organization's public key for key backup mechanism
Stroe organization's private key in a password manager or something

	#
	# creditcard.py
	#
	# Author:
	# John Lawrence M. Penafiel (penafieljlm)
	#
	# Python source code attachment for the article at:
	# https://penafieljlm.wordpress.com/2016/10/29/ekoparty-ctf-2016-write-ups/#web-150
	#


	struct Template {
	int64_t data_64;
	int32_t data_32;
	int16_t data_16;
	char data_char;
	} value {
	// the x'es get instructions written onto them
	// notice that those instructions are nops
	//xxxxxx

	<!DOCTYPE html>
	<html>
	<head>
	<title></title>
	<style type="text/css">
	html {
	height: 100%;
	}
	body {
	height: 100%;

	import re
	import tld

	# regex by @diegoperini
	# taken from https://mathiasbynens.be/demo/url-regex
	# modified by @penafieljlm
	RE_DOMAIN = re.compile(
	r'(?:'
	r'\S+'
	r'(?'