taikedz

import sys
import re
import argparse

def getargs():
    par = argparse.ArgumentParser()
    par.add_argument("--threshold", "-T", default=14, type=float)
    par.add_argument("--window-size", "-W", default=10, type=int)
    par.add_argument("--verbose", "-V", action="store_true")
    return par.parse_args()

taikedz

sudo nmcli connection show "Wired connection 1" |grep IP4 |tee ip4-old.txt

sudo nmcli connection modify "Wired connection 1" ipv4.addresses 192.168.110.6/24
sudo nmcli connection modify "Wired connection 1" ipv4.gateway 192.168.110.1
sudo nmcli connection modify "Wired connection 1" ipv4.dns "192.168.110.10,192.168.110.11,1.1.1.1"

sudo nmcli connection up "Wired connection 1"

sudo nmcli connection show "Wired connection 1" |grep IP4 |tee ip4-new.txt

taikedz

"""
Quick cheat for tcpdump capture and view

    packetcap.py capture [-I interface] [-P portslist] PCAPFILE
    packetcap.py view [--no-resolve-names|-N] PCAPFILE

To just start capturing packets to a file, run

    python3 packetcap.py capture my-packets.pcap

taikedz

Basic ADO pipline importing

Not covered: the ability to use extends

Given a sub_pipe.yml with

parameters:
  - name: warcry
 type: string

taikedz

An innocuous example of a significant git backdoor.

Expanding the Base64 encoded tarball payload will result in a minimal example git repository.

base64 -di | tar xz

# (paste the base64 data, hit return, then press Ctrl+D)
# You will have a new repo folder called `ouchy`

taikedz

#!/usr/bin/env python3

""" List files in order of time (see default for `ls -t`)

Add a numeric prefix to each file name.

If multiple folders are specified, the count restarts from one for each folder.
"""

import os

taikedz

#!/usr/bin/env python3

import os
import re
import argparse

def download():
    os.system("wget https://dumps.wikimedia.org/kiwix/zim/wikipedia/ -O zim.html")

taikedz

Read 'ip a' and show NIC details

Utility to read the output of ip a and print most pertinent details

Allows filtering on inet/inet6 scope values

By default, prints summarised information from the NIC entries

$> python3 read_ipa/read-ipa.py 

taikedz

Create new things

Quick scriptlets to create new little assets for various scripting and experimentation

taikedz

Directory walk

Piecing together some basic directory walking techniques in Go (golang)

Python's method gives some level of completeness, Go's simpler setup means reaching for other libraries to do path operations.

Not hard, just needed to figure that out...