Alexandre Dulaunoy adulau

## MISP-201909-CIRCL.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                adulau
                / MISP-201909-CIRCL.md
            
            
              Last active Dec 4, 2019
            
              
                MISP OSINT Exercise 
              
          
      View MISP-201909-CIRCL.md
  
    
    MISP Training Wednesday December 4 2019
Evidence and report to add in the MISP instance and share back with the training community

(1) https://mobile.twitter.com/James_inthe_box/status/1195354125950689280
(2) https://mobile.twitter.com/1ZRR4H/status/1201249017549729793
(3) https://twitter.com/Int2e_/status/1192206123451011072
(4) https://www.foo.be/cours/dess-20192020/pub/gru/
(5) https://blog.telsy.com/lazarus-gate/
(6) https://app.any.run/tasks/8286e7e1-710a-4570-805d-8a03395caa31/


## misp-toolset.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                adulau
                / misp-toolset.md
            
            
              Created Sep 20, 2019
            
              
                Toolset for MISP taxonomies, objects and alike
              
          
      View misp-toolset.md
  
    
    a list to a sane default
cat /tmp/lang.txt | awk -F'\\\\n' '{ printf "\"%s\", \n", $1 }'

  
## CCAPP.EXE.openioc
<?xml version="1.0" encoding="us-ascii"?>
<ioc xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" id="fc2d3e44-80a6-4add-ad94-de9f289e62ff" last-modified="2011-10-28T21:00:13" xmlns="http://schemas.mandiant.com/2010/ioc">
  <short_description>CCAPP.EXE</short_description>
  <description>Custom Reverse shell.</description>
  <keywords />
  <authored_by>Mandiant</authored_by>
  <authored_date>2010-12-13T12:49:53</authored_date>
  <links>
    <link rel="grade">Alpha</link>
  </links>

## gist:76f40052c01ca2a182ba38d8ba15b1ce

5d323e196ae9cd8b05c7711538264ebc59f0d690
3c5b1fa5b76033ae9ab6a28af6d495487b509fa7
aacd28512f3e5690c70fcb9018f0da7d94f873a2
6c80fd53423f99bdcff0a1460d0e1b3c7078f58e
4c9bf438d46ca87cfed57d851d69766b017a4aca
28307d491aa8262e09e147fba06a5b2314124c57
179cefa4d2e29d17ec38a7e2c28f0bd847504694
80be5349ebe8ab391303cc4b9045ffbf7c8a4ce2
b642848933f2aae2500d3ad77ccce3d4250d928d

## gist:8719ac1de368c951eb20a963dedf3a2c
[31mScanning for devices...[0m
    Device (new): [37m6c:d9:23:52:61:b4[0m (random), -73 dBm
	Flags: <1a>
	Manufacturer: <4c001005111c67c1fb>
    Device (new): [37m5a:b4:cf:1d:94:50[0m (random), -78 dBm
	Flags: <1a>
	Manufacturer: <c400073302131580>
	Complete 16b Services: <0000feb9-0000-1000-8000-00805f9b34fb>
	0x1b: <00ed908eaa6fa0>
    Device (new): [37m40:fd:ed:6d:c0:45[0m (random), -87 dBm

## exhibition.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                adulau
                / exhibition.md
            
            
              Created Mar 24, 2019
            
              
                Idea for slideshow (photography) 
              
          
      View exhibition.md
  
    
    Tools
feh
feh -B white -Z -z -F -D 4 --hide-pointer -auto-rotate


## ghidra-community.md

      
              1 file
            
          
              4 forks
            
          
              1 comment
            
          
              35 stars
            
          
                adulau
                / ghidra-community.md
            
            
              Last active Jan 19, 2020
            
              
                Ghidra community - collection
              
          
      View ghidra-community.md
  
    
    Introduction
As the Ghidra open source community is growing, trying to document the new projects around Ghidra. Feel free to fork the gist and propose improvements.
CPU support

New 6502 language module for Ghidra
Atmel AVR helpers for Ghidra - ATmega328p
Processor definitions for DMG and CGB in Ghidra - Gameboy CPU (LR35902) (WiP)
ghidra based disassembly of the x68000's IPL.


## ImageHashing.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                adulau
                / ImageHashing.md
            
            
              Created Feb 22, 2019
            
              
                Notes about Image Hashing
              
          
      View ImageHashing.md
  
    
    Theory

In signal processing, cross-correlation is a measure of similarity of two series as a function of the displacement of one relative to the other. 
Manhattan distance 
Bhattacharyya distance measures the similarity of two probability distributions.

Libraries

ImageHash which supports average hashing, perception hashing, difference hashing and wavelet hashing.
dhash is a Python library  which supports  a perceptual hash based on Neal Krawetz’s dHash algorithm in this “Hacker Factor” blog entry.


## gen-uuidv4.sh
od -x /dev/urandom | head -1 | awk '{OFS="-"; print $2$3,$4,4 substr($5, 0, 3),8 substr($6, 0, 3),$7$8$9}'

## biopic.txt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