RoelDS roelds

Detecting the real IP of a Cloudflare'd Mastodon instance

NB: This will not work for instances that proxy outgoing requests!

Reading the docs

I wanted to find a way to detect the real IP address of a Mastodon/Pleroma/Misskey/etc instance hosted behind Cloudflare. How to do that? Well, it's federated, which means I can probably get it to send a request to a server of mine! And how to do that? I tried reading the ActivityPub spec. The following caught my attention:

Servers should not trust client submitted content, and federated servers also should not trust content received from a server other than the content's origin without some form of verification.

Eject USB Units

Find the culprit that prevents ejection of Flash Drives or any other unit.

CMD

wevtutil qe System /q:"*[System[(EventID=225)]]" /c:5 /f:text /rd:true

It "types" the contents of the clipboard.

Why can't you just paste the contents you ask? Sometimes pasting just doesn't work.

One example is in system password fields on OSX.
Sometimes you're working in a VM and the clipboard isn't shared.
Other times you're working via Remote Desktop and again, the clipboard doesn't work in password boxes such as the system login prompts.
Connected via RDP and clipboard sharing is disabled and so is mounting of local drives. If the system doesn't have internet access there's no easy way to get things like payloads or Powershell scripts onto it... until now.

Windows

The Windows version is written in AutoHotKey and easily compiles to an executable. It's a single line script that maps Ctrl-Shift-V to type the clipboard.

Hello, human (?) ! This document lists various `PGP Public Key Servers` // `GPG Public Key Servers`

have you got literally no idea what I'm talking about ? need not worry! Learn more about PGP keys, asymmetric encryption and RSA here

[name] http://url
[PGP Public Key Server] http://pgp.key-server.io/
[keys.openpgp.org] https://keys.openpgp.org/
[Global Directory Verified Key Service] https://keyserver.pgp.com/vkd/GetWelcomeScreen.event
[Hockeypuck OpenPGP keyserver] http://keyserver.ubuntu.com/

🧰 Data Structs & Algos
⚙️ System Design
🤝 Interviewing
Product Management
Java
Android
<img src="https://raw.githubusercontent.com/github/explore/80688e429a7d4ef2fca1e82350fe8e3517d3494d/topics/python/python.png" width="20" /> Python

	<#

	Prerequisites: PowerShell v5.1 and above (verified; may also work in earlier versions)
	License: MIT
	Author: Michael Klement <[email protected]>

	DOWNLOAD and DEFINITION OF THE FUNCTION:

	irm https://gist.github.com/mklement0/7f2f1e13ac9c2afaf0a0906d08b392d1/raw/Debug-String.ps1 \| iex

	##TCP FLAGS##

	Unskilled Attackers Pester Real Security Folks
	==============================================
	TCPDUMP FLAGS
	Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere)
	Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere)
	Pester = PSH = [P] (Push Data)
	Real = RST = [R] (Reset Connection)
	Security = SYN = [S] (Start Connection)

	<#

	Prerequisites: PowerShell v3+
	License: MIT
	Author: Michael Klement <[email protected]>

	DOWNLOAD and DEFINITION OF THE FUNCTION:

	irm https://gist.github.com/mklement0/eac1f18fbe0fc2798b214229b747e5dd/raw/Debug-NativeInOutput.ps1 \| iex

	<#

	Prerequisites: PowerShell v3+
	License: MIT
	Author: Michael Klement <[email protected]>

	DOWNLOAD and DEFINITION OF THE FUNCTION:

	irm https://gist.github.com/mklement0/ef57aea441ea8bd43387a7d7edfc6c19/raw/Invoke-WithEncoding.ps1 \| iex

	package main

	import (
	"errors"
	"sync"
	)

	func test(i int) (int, error) {
	if i > 2 {
	return 0, errors.New("test error")