Skip to content

Instantly share code, notes, and snippets.

View antitree's full-sized avatar

antitree

92 followers · 11 following
View GitHub Profile
@antitree
antitree / poc-list-bypass.yaml
Created November 1, 2020 22:11
POC for setting up an environment with a secret and cluster role.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: poc-list-bypass
rules:
- apiGroups:
- ""
resources:
- secrets
verbs:
@antitree
antitree / ephemeral.sh
Last active August 26, 2020 02:54
#!/usr/bin/env bash
# Ephemeral container deployer
# Author: @antitree
# This patches over a pod to add an ephemeral container, mounts share volumes,
# enters the namespace and some other shit.
function description() {
echo -e "\nDescription: This plugin speeds up the process of patching a Pod with an
ephemeral container. It will automatically mount the PID namespace, secrets, and other volumes
to help with debugging or reviewing the main container. \n\n
@antitree
antitree / resume.json
Last active June 27, 2019 17:02
{
"basics": {
"name": "Mark Manning",
"label": "Security Consultant",
"picture": "https://pbs.twimg.com/profile_images/658038562261069825/jB7pbsiE_400x400.png",
"email": "mark@antitree.com",
"phone": "",
"website": "https://www.antitree.com",
"summary": "Career security consultant with a focus on containerization technologies.",
"location": {
@antitree
antitree / authy.js
Last active February 4, 2019 17:35
Authy iterations
function(t, e, n) {
var r, o;
r = [n(34), n(35)], o = function(t, e) {
var n;
return n = function() {
function n() {}
return n.prototype.changePhone = function(n, r, o, i) {
var s, a;
a = e.get().userId, s = "/json/users/" + a + "/change_phone/request", t.postAuth(s, {
@antitree
antitree / graph.R
Last active February 14, 2017 16:56
library(ggplot2)
load_trace <- function(filename, nickname, proto, n) {
x <- read.csv(filename)
x$ts <- x$ts - min(x$ts)
x$sz <- x$size * ifelse(x$dir=="up", 1, -1)
data.frame(x, nickname=nickname, proto=proto, n=n)
}
# derive nickname, proto, and n columns from the filename.
@antitree
antitree / com.google.android.apps.maps
Created December 11, 2016 21:05
List of Android maps (real) permissions
Packages:
Package [com.google.android.apps.maps] (b364692):
userId=10077
sharedUser=SharedUserSetting{40bb50d com.google.android.apps.maps/10077}
pkg=Package{3cd2ad3 com.google.android.apps.maps}
codePath=/data/app/com.google.android.apps.maps-2
resourcePath=/data/app/com.google.android.apps.maps-2
legacyNativeLibraryDir=/data/app/com.google.android.apps.maps-2/lib
primaryCpuAbi=arm64-v8a
secondaryCpuAbi=null
@antitree
antitree / gist:5f0c2dec75173d3fd382
Created November 23, 2015 21:30
Log output
Nov 23, 2015 21:29:38:984 (freenet.keys.FreenetURI, Datastore checker(11), MINOR): Created from components (USK): USK@JWTT8rDSrYNQkv73wSww6fhYC9Z6AzUREzDO8xJCluI,Lpt8uGZy~y2UtMwMOwTjsdQHbAbjduxFBFFqZI5TGfI,AQACAAE/CENO-signaler/1
Nov 23, 2015 21:29:38:984 (freenet.client.async.ClientRequestScheduler, Datastore checker(11), MINOR): finishRegister for freenet.client.async.USKFetcher$DBRFetcher@7ceceac3 for freenet.client.async.USKFetcher@37c9d2fe for freenet.keys.USK@26ad91e3:USK@JWTT8rDSrYNQkv73wSww6fhYC9Z6AzUREzDO8xJCluI,Lpt8uGZy~y2UtMwMOwTjsdQHbAbjduxFBFFqZI5TGfI,AQACAAE/CENO-signaler/1 anyValid=true persistent=false
Nov 23, 2015 21:29:38:984 (freenet.keys.FreenetURI, Datastore checker(11), MINOR): Created from components (USK): USK@JWTT8rDSrYNQkv73wSww6fhYC9Z6AzUREzDO8xJCluI,Lpt8uGZy~y2UtMwMOwTjsdQHbAbjduxFBFFqZI5TGfI,AQACAAE/CENO-signaler/1
Nov 23, 2015 21:29:38:984 (freenet.keys.FreenetURI, Datastore checker(11), MINOR): Created from components (USK): USK@JWTT8rDSrYNQkv73wSww6fhYC9Z6AzUREzDO8xJCluI,Lpt8uG
@antitree
antitree / Winning v1
Last active August 29, 2015 14:27
First attempt at the script
import requests
import time
import sys
headers = {
'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0',
'Referer': 'http://www.interlockroc.org'
}
#for i in range(1000000):
print("Starting Winning v1")
@antitree
antitree / gist:768e1beb1f2d7d9ee9eb
Last active August 29, 2015 14:23
Simple example of a Tor script that leaks DNS
import requesocks
import BeautifulSoup as bs
base_url = 'http://treebind.antitree.com:8000'
test_url = base_url + '/test'
session = requesocks.session()
session.proxies = {'http': 'socks5://127.0.0.1:9050'}
print("Getting: %s" % test_url)
r = session.get(test_url)
s = bs.BeautifulSoup(r.text)
@antitree
antitree / keybase.md
Last active August 4, 2016 17:37

Keybase proof

I hereby claim:

  • I am antitree on github.
  • I am antitree (https://keybase.io/antitree) on keybase.
  • I have a public key whose fingerprint is 0B2C 9595 A8E0 3683 A81F E3EE 68B1 A274 584F 01E8

To claim this, I am signing this object: