zbuc

/********************************************************************* * Code created by Carl E. Lindberg - Thanks a ton Carl! * * See his RCDefaultApp and other great Mac Applications at * * http://www.rubicode.com/Software/ * **********************************************************************/
/********************************************************************* * Compile on Tiger: * * cc DUH4Mac.c -o logurls -framework CoreFoundation -framework * * ApplicationServices * ** * Compile on Leopard: * * cc DUH4Mac.c -o logurls -framework CoreFoundation -framework * * CoreServices * *********************************************************************/
/********************************************************************* * To run: * * #>./DUH4Mac * *********************************************************************/
#include <stdio.h>
#include <AvailabilityMacros.h>
#include <CoreFoundation/CoreFoundation.h>

#if !defined(MAC_OS_X_VERSION_10_5) || MAC_OS_X_VERSION_MAX_ALLOWED < MAC_OS_X_VERSION_10_5
#incl

zbuc

from flask import Flask

app = Flask("proxapp")


@app.route('/')
def hello_world():
    return 'Hello World!'

zbuc

diff --git sshmitm.c sshmitm.c
index 60993dd..c570464 100644
--- sshmitm.c
+++ sshmitm.c
@@ -41,7 +41,7 @@ int	 mitm_fd;
 int	 client_fd, server_fd;
 SSH_CTX	*ssh_client_ctx, *ssh_server_ctx;
 SSH	*ssh_client, *ssh_server;
-struct	 sockaddr_in csin, ssin;
+struct	 sockaddr_in csin_, ssin;

zbuc

diff --git sshmitm.c sshmitm.c
index 60993dd..c570464 100644
--- sshmitm.c
+++ sshmitm.c
@@ -41,7 +41,7 @@ int    mitm_fd;
 int     client_fd, server_fd;
 SSH_CTX    *ssh_client_ctx, *ssh_server_ctx;
 SSH    *ssh_client, *ssh_server;
-struct  sockaddr_in csin, ssin;
+struct  sockaddr_in csin_, ssin;

zbuc

--- webmitm.c.orig  2014-10-20 11:45:13.000000000 -0400
+++ webmitm.c   2014-10-20 11:45:38.000000000 -0400
@@ -43,7 +43,7 @@
 int     client_fd, server_fd;
 SSL_CTX    *ssl_client_ctx, *ssl_server_ctx;
 SSL    *ssl_client, *ssl_server;
-struct  sockaddr_in csin, ssin;
+struct  sockaddr_in csin_, ssin;
 int     do_ssl, sig_pipe[2];
 in_addr_t  static_host = 0;

zbuc

--- sshmitm.c.orig  2014-10-20 11:45:13.000000000 -0400
+++ sshmitm.c   2014-10-20 11:45:41.000000000 -0400
@@ -41,7 +41,7 @@
 int     client_fd, server_fd;
 SSH_CTX    *ssh_client_ctx, *ssh_server_ctx;
 SSH    *ssh_client, *ssh_server;
-struct  sockaddr_in csin, ssin;
+struct  sockaddr_in csin_, ssin;
 int     sig_pipe[2];

zbuc

# python subprocess calls using shell=True
# are vulnerable to shellshock...

bash-3.2$ cat test.py
#!/usr/bin/env python

import subprocess

subprocess.call(["/bin/ls"], shell=True)

zbuc

Keybase proof

I hereby claim:

• I am zbuc on github.
• I am zbuc (https://keybase.io/zbuc) on keybase.
• I have a public key whose fingerprint is 93C2 CD7F 3368 0356 5FBA CE2C E2CC 62D7 BDB5 9DA0

To claim this, I am signing this object:

zbuc

import collections

# NOTE requires GitPython>=0.3.2.RC1 for 'blame' support
from git import Repo


def autodict():
    return collections.defaultdict(autodict)

repo = Repo('/path/to/repo')

zbuc

Process:         httpd [92518]
Path:            /usr/sbin/httpd
Identifier:      httpd
Version:         ??? (???)
Code Type:       X86-64 (Native)
Parent Process:  httpd [92504]

PlugIn Path:       /usr/local/lib/libmemcached.10.dylib
PlugIn Identifier: libmemcached.10.dylib
PlugIn Version:    11.0.0 (compatibility 11.0.0)