Skip to content

Instantly share code, notes, and snippets.

View schrodyn's full-sized avatar

Schrodinger schrodyn

84 followers · 281 following
View GitHub Profile
@schrodyn
schrodyn / optimal_mtu.md
Created January 17, 2024 12:52 — forked from nitred/optimal_mtu.md
Wireguard Optimal MTU

About

  • I faced bandwidth issues between a WG Peer and a WG server. Download bandwidth when downloading from WG Server to WG peer was reduced significantly and upload bandwidth was practically non existent.
  • I found a few reddit posts that said that we need to choose the right MTU. So I wrote a script to find an optimal MTU.
  • Ideally I would have liked to have run all possible MTU configurations for both WG Server and WG Peer but for simplicity I choose to fix the WG Server to the original 1420 MTU and tried all MTUs from 1280 to 1500 for the WG Peer.

Testing

  • On WG server, I started an iperf3 server
  • On WG peer, I wrote a script that does the following:
    • wg-quick down wg0
  • Edit MTU in the /etc/wireguard/wg0.conf file
@schrodyn
schrodyn / rich_header_yara.py
Created January 16, 2024 13:49 — forked from latonis/rich_header_yara.py
Rich Header YARA Rule Generator
#!/usr/bin/env python
import argparse
import binascii
import hashlib
import os
import re
import sys
import traceback
__author__ = "Jeff White [karttoon] @noottrak"
@schrodyn
schrodyn / windbg
Created November 6, 2023 12:57 — forked from kaqq/windbg
windbg
!pe
.exr -1 `last exception
!sos.pe `last clr exception
!dso `dump stack object
.chain
.load sos
@schrodyn
schrodyn / schrodinger.zsh-theme
Created September 14, 2023 13:57
NEWLINE=$'\n'
PROMPT="[%(?:%{$fg_bold[green]%}quack :%{$fg_bold[red]%}quack )%{$reset_color%}(%T) "
PROMPT+='%{$fg[cyan]%}%c%{$reset_color%}$(git_prompt_info)'
PROMPT+="]${NEWLINE}"
PROMPT+="➜ "
ZSH_THEME_GIT_PROMPT_PREFIX=" %{$fg_bold[blue]%}git:(%{$fg[red]%}"
ZSH_THEME_GIT_PROMPT_SUFFIX="%{$reset_color%}"
ZSH_THEME_GIT_PROMPT_DIRTY="%{$fg[blue]%}) %{$fg[yellow]%}✗"
ZSH_THEME_GIT_PROMPT_CLEAN="%{$fg[blue]%})"
@schrodyn
schrodyn / Setting $PATH for zsh on macOS.md
Created August 5, 2023 21:46 — forked from Linerre/Setting $PATH for zsh on macOS.md
Properly setting $PATH for zsh on macOS (fighting with path_helper)
@schrodyn
schrodyn / pxor_string_decrypt_wip.py
Created July 24, 2023 16:38 — forked from oopsmishap/pxor_string_decrypt_wip.py
WIP: pxor string via janky emulation
import time
from typing import List
import pefile
from capstone import *
from capstone.x86 import *
import re
import struct
# SAMPLE_PATH = 'bin/enc_string_test.bin32'
SAMPLE_PATH = 'bin/2cd2f077ca597ad0ef234a357ea71558d5e039da9df9958d0b8bd0efa92e74c9.bin32'
@schrodyn
schrodyn / 0 - get the right version
Created July 17, 2023 18:18 — forked from dlangille/0 - get the right version
librenms reported problems
I run this on my server called 'empty'.
Assuming you've done a git clone or a git pull of the code...
Switch to the release you want to build:
[dan@empty:~/librenms] $ export RELEASE=1.56
[dan@empty:~/librenms] $ git checkout master
[dan@empty:~/librenms] $ git pull
[dan@empty:~/librenms] $ git checkout tags/$RELEASE
@schrodyn
schrodyn / pebase.h
Created July 1, 2023 22:00 — forked from herrcore/pebase.h
PE_BASE struct to help with IDA markup of PE access
union PE_BASE {
PVOID baseAddress;
IMAGE_DOS_HEADER *mz;
IMAGE_NT_HEADERS *pe;
};
union PE_BASE64 {
PVOID baseAddress;
IMAGE_DOS_HEADER *mz;
IMAGE_NT_HEADERS64 *pe;
@schrodyn
schrodyn / make.conf
Created April 16, 2023 16:08
FreeBSD make.conf for poudriere
#!/bin/sh
# only used for ports in poudriere.conf:ALLOW_MAKE_JOBS_PACKAGES
# ALLOW_MAKE_JOBS_PACKAGES="pkg llvm* openjdk*"
MAKE_JOBS_NUMBER=4
DEFAULT_VERSIONS+=ssl=libressl
DEFAULT_VERSIONS+=python=2.7 python2=2.7 python3=3.6
DEFAULT_VERSIONS+=mysql=10.2m
DEFAULT_VERSIONS+=samba=4.6
@schrodyn
schrodyn / ioc_vulnerable_drivers.csv
Created April 8, 2023 14:34 — forked from k4nfr3/ioc_vulnerable_drivers.csv
IOC vulnerable drivers
We can make this file beautiful and searchable if this error is corrected: It looks like row 9 should actually have 4 columns, instead of 2 in line 8.
SHA256,Name,Signer,Description
04A85E359525D662338CAE86C1E59B1D7AA9BD12B920E8067503723DC1E03162,ADV64DRV.sys,"""FUJITSU LIMITED """,
05F052C64D192CF69A462A5EC16DDA0D43CA5D0245900C9FCB9201685A2E7748,Agent64.sys,"""eSupport.com, Inc.""",DriverAgent Direct I/O for 64-bit Windows
4045AE77859B1DBF13972451972EAAF6F3C97BEA423E9E78F1C2F14330CD47CA,Agent64.sys,Phoenix Technologies Ltd,DriverAgent Direct I/O for 64-bit Windows
6948480954137987A0BE626C24CF594390960242CD75F094CD6AAA5C2E7A54FA,Agent64.sys,Phoenix Technologies Ltd,DriverAgent Direct I/O for 64-bit Windows
8CB62C5D41148DE416014F80BD1FD033FD4D2BD504CB05B90EEB6992A382D58F,Agent64.sys,"""eSupport.com, Inc""",DriverAgent Direct I/O for 64-bit Windows
B1D96233235A62DBB21B8DBE2D1AE333199669F67664B107BFF1AD49B41D9414,Agent64.sys,"""eSupport.com, Inc.""",DriverAgent Direct I/O for 64-bit Windows
7196187FB1EF8D108B380D37B2AF8EFDEB3CA1F6EEFD37B5DC114C609147216D,ALSysIO64.sys,Artur Liberman,ALSysIO
7F375639A0DF7FE51E5518CF87C3F513C55BC117DB47D28DA8C615642EB18BFA,ALSys