0xabad1dea

Risk Assessment of GitHub Copilot

0xabad1dea, July 2021

this is a rough draft and may be updated with more examples

GitHub was kind enough to grant me swift access to the Copilot test phase despite me @'ing them several hundred times about ICE. I would like to examine it not in terms of productivity, but security. How risky is it to allow an AI to write some or all of your code?

Ultimately, a human being must take responsibility for every line of code that is committed. AI should not be used for "responsibility washing." However, Copilot is a tool, and workers need their tools to be reliable. A carpenter doesn't have to

d3vilbug

#!/usr/bin/env python3

from __future__ import print_function
import frida
import sys
import json
import time

def on_message(message, payload):
	if(message['type'] == 'send'):

rustymagnet3000

Static / Dynamic iOS app inspection

• Jailbreak in 2023
• Get decrypted IPA off a Jailbroken device
• Get App Store iPAs
• Dump KeyChain
• Inspect files inside ipa
• Inspect sandbox data on Jailbroken device

unfo

How to pass the OSCP

1. Recon
2. Find vuln
3. Exploit
4. Document it

Recon

Unicornscans in cli, nmap in msfconsole to help store loot in database.

apolloclark

Buffer Overflow Tutorial

This tutorial is based on the Computerphile video, made by Dr. Mike Pound

https://www.youtube.com/watch?v=1S0aBV-Waeo

The tutorial will show you how to trigger and exploit a buffer overflow attack against a custom C program, using Kali Linux 32-bit PAE 2016.1.

Torrent Link: https://images.offensive-security.com/virtual-images/Kali-Linux-2016.1-vbox-i686.torrent

atcuno

The purpose of this document is to make recommendations on how to browse in a privacy and security conscious manner. This information is compiled from a number of sources, which are referenced throughout the document, as well as my own experiences with the described technologies.

I welcome contributions and comments on the information contained. Please see the How to Contribute section for information on contributing your own knowledge.

Table of Contents

• Motivation
• Audience
• TL;DR?
• Updates
• Technologies that Affect Security and Privacy

AnimeshShaw

import hashlib

"""
Encrypts given string

Method: md5, sha1, sha224, sha256, sha384, sha512
Supports: Salts

How to use: encrypt('password', 'sha512', '04/16/2010')
"""

yahyaKacem

#!/usr/bin/env python
"""
  Convert camel-case to snake-case in python.
  e.g.: CamelCase  -> snake_case
  e.g.: snake_case -> CamelCase
  e.g.: CamelCase  -> dash-case
  e.g.: dash-case  -> CamelCase
  By:            Jay Taylor [@jtaylor]
  Me<modifier>:  Yahya Kacem <fuj.tyoli@gmail.com>
  Original gist: https://gist.github.com/jaytaylor/3660565

AnimeshShaw

import java.awt.Color;
import java.awt.Graphics;

import javax.swing.JFrame;
import javax.swing.JPanel;
import javax.swing.SwingUtilities;


/**
* @author psychocoder

liuml07

#include <algorithm>
#include <vector>
#include <set>

template <typename Type>
void remove_duplicate(std::vector<Type>& vec) {
  std::sort(vec.begin(), vec.end());
  vec.erase(unique(vec.begin(), vec.end()), vec.end());
}