Supermathie

Keybase proof

I hereby claim:

• I am supermathie on github.
• I am supermathie (https://keybase.io/supermathie) on keybase.
• I have a public key whose fingerprint is B753 BD6B 2F90 7540 0F48 0008 6C07 FB30 07CF 9360

To claim this, I am signing this object:

Supermathie

○ → host -a updates.mailfoundry.net 208.67.220.222
updates.mailfoundry.net. 1245	IN	A	66.18.18.59

○ → host -a updates.mailfoundry.net 208.67.220.220
updates.mailfoundry.net. 402	IN	A	66.18.18.59
updates.mailfoundry.net. 0	IN	AAAA	::ffff:67.215.65.132

Supermathie

#!/bin/bash -e

# This script adds a 512MB swapfile to the system

function get_new_swapfile() {
  for i in `seq 0 99`; do
    if [ ! -e /swapfile.$i ]; then
      echo /swapfile.$i
      return
    fi

Supermathie

#!/usr/bin/env python2
"""
Author: takeshix <takeshix@adversec.com>
PoC code for CVE-2014-0160. Original PoC by Jared Stafford (jspenguin@jspenguin.org).

Supportes all versions of TLS and has STARTTLS support for SMTP,POP3,IMAP,FTP and XMPP.
"""

import sys,struct,socket
from argparse import ArgumentParser

Supermathie

ipc_mode: tcp
master: orchestrator.netdirect.ca
root_dir: c:\salt
pki_dir: /conf/pki/minion
id: win7-salt
multiprocessing: False

Supermathie

Microsoft IVR: "What would you like assistance with?"
Me: "Office Activation"
Microsoft IVR: "I'm sorry, I couldn't hear you." *Goes back to the very beginning*
...
Microsoft IVR: "What would you like assistance with?"
Me: "Penile Dysfunction"
Microsoft IVR: "OK, I'll get someone on the line."

Supermathie

Since the most likely thing I expect to trip up on tomorrow will be selinux, here are some quick notes on it for everyone else as well:

# check selinux audit log
$ sudo seaudit-report /var/log/audit/audit.log
...
Jan 14 14:46:23 (null) (null): audit(1389728783.896:402159): avc: denied { read } for pid=10210 comm=zabbix_server name=SNMPv2-MIB ino=5246 dev=dm-5 scontext=unconfined_u:system_r:zabbix_t:s0 tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file
...

# hmmm zabbix server can't read the SNMP MIBs. What can he read?
$ sesearch --allow -R -s zabbix_t