Skip to content

Instantly share code, notes, and snippets.

View azet's full-sized avatar
🔐
hacking audio devices, diving caves, breaking codes

Aaron Zauner azet

🔐
hacking audio devices, diving caves, breaking codes
193 followers · 243 following
View GitHub Profile
@azet
azet / grsec
Last active June 19, 2017 07:24
PaX/grsec log rotation on production systems [file: `/etc/logrotate.d/grsec`] (Debian)
# this: `/etc/logrotate.d/grsec`.
/var/log/messages /var/log/syslog /var/log/kern.log {
daily
rotate 14
missingok
notifempty
compress
}
@azet
azet / Tox_security_model.md
Last active January 13, 2017 19:10
"Tox provides some strong security guarantees. We haven't got to the point where we can enumerate them properly, given the general lack of understanding of the code and specification."

"Tox provides some strong security guarantees. We haven't got to the point where we can enumerate them properly, given the general lack of understanding of the code and specification."

@azet
azet / gist:1276944274f8cd5ac5cc
Last active March 3, 2016 05:02
OpenSSL 1.0.1s finally removes all mention of EXPORT ciphersuites
azet@orpheus ~/test/openssl-1.0.1r/apps % ./openssl ciphers 'ALL' -V | grep EXP
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
0x00,0x14 - EXP-EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH(512) Au=RSA Enc=DES(40) Mac=SHA1 export
0x00,0x11 - EXP-EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH(512) Au=DSS Enc=DES(40) Mac=SHA1 export
0x00,0x19 - EXP-ADH-DES-CBC-SHA SSLv3 Kx=DH(512) Au=None Enc=DES(40) Mac=SHA1 export
0x00,0x08 - EXP-DES-CBC-SHA SSLv3 Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export
0x00,0x06 - EXP-RC2-CBC-MD5 SSLv3 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
0x04,0x00,0x80 - EXP-RC2-CBC-MD5 SSLv2 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
0x00,0x17 - EXP-ADH-RC4-MD5 SSLv3 Kx=DH(512) Au=None Enc=RC4(40) Mac=MD5 export
0x00,0x03 - EXP-RC4-MD5 SSLv3 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
@azet
azet / gist:c597e7c7ce38f7f79ffb
Last active February 12, 2016 19:18
nettle-bin
azet@orpheus ~ % apt-cache show nettle-bin
Package: nettle-bin
Source: nettle
Version: 2.7.1-5
Installed-Size: 91
Maintainer: Magnus Holmgren <holmgren@debian.org>
Architecture: amd64
Replaces: lsh-utils (<< 2.0.4-dfsg-1)
Depends: libc6 (>= 2.4), libhogweed2, libnettle4 (= 2.7.1-5)
Suggests: lsh-doc
@azet
azet / cipher_performance_openssl110-dev
Last active November 3, 2015 23:21
AES-OCB vs AES-CBC vs AES-GCM (AESNI) in OpenSSL 1.1.0-dev
azet@orpheus ~ % lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 8.2 (jessie)
Release: 8.2
Codename: jessie
azet@orpheus ~ % gcc --version
gcc (Debian 4.9.2-10) 4.9.2
Copyright (C) 2014 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
@azet
azet / build_kernel_package_on_debian.md
Last active October 9, 2015 22:46
building a current kernel package on debian

building a current kernel package on debian

apt-get install kernel-package fakeroot
wget kernel; tar xfvz kernel; cd kernel
fakeroot make-kpkg clean
cp ~/mykernelconfig .config
export CONCURRENCY_LEVEL=8; fakeroot make-kpkg --append-to-version -azet --revision 1 --initrd kernel-image kernel-headers
@azet
azet / mykernelconfig_4.2.3
Created October 9, 2015 21:55
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86 4.2.3 Kernel Configuration
#
CONFIG_64BIT=y
CONFIG_X86_64=y
CONFIG_X86=y
CONFIG_INSTRUCTION_DECODER=y
CONFIG_PERF_EVENTS_INTEL_UNCORE=y
CONFIG_OUTPUT_FORMAT="elf64-x86-64"
@azet
azet / get_alexa_1m_mx_rrs
Last active September 6, 2017 08:55
Retrieves MX and A records for 'Alexa Top 1 Million' hosts and prints them as pretty formatted JSON objects to stdout.
#!/usr/bin/env bash
#
# Retrieves MX and A records for 'Alexa Top 1 Million' hosts
# and prints them as pretty formatted JSON objects to stdout.
#
# *Optional* parallelism support with GNU Parallel (recommended):
# $ sudo apt-get install parallel
#
# Authors: Aaron Zauner <azet@azet.org>
# License: CC0 1.0 (https://creativecommons.org/publicdomain/zero/1.0)
@azet
azet / btusb_broadcom_BCM20702A0.patch
Created July 11, 2015 01:06
Broadcom BCM20702A0 Bluetooth Driver Linux Kernel Patch
--- btusb.c.old 2015-05-06 22:04:23.000000000 +0200
+++ btusb.c 2015-07-11 03:05:28.690816736 +0200
@@ -112,6 +112,8 @@
{ USB_DEVICE(0x0b05, 0x17b5) },
{ USB_DEVICE(0x0b05, 0x17cb) },
{ USB_DEVICE(0x413c, 0x8197) },
+ { USB_DEVICE(0x413c, 0x8143),
+ .driver_info = BTUSB_BCM_PATCHRAM },
{ USB_DEVICE(0x13d3, 0x3404),
.driver_info = BTUSB_BCM_PATCHRAM },
@azet
azet / extract_rsa_moduli.py
Last active July 28, 2018 13:03
Extracts RSA moduli for Fast-GCD (factorable.net) from masscan collected X.509 Certificates. Input needs to be stripped of non-X.509 entries first [use the power of grep(1)!].
#!/usr/bin/env python
#
# Parsing of `masscan` collected X.509 certificates
# to extract RSA moduli for Fast-GCD (factorable.net).
# ..threaded Python version.
#
# Authors: Aaron Zauner <azet@azet.org>
# License: CC0 1.0 (https://creativecommons.org/publicdomain/zero/1.0)
#
from __future__ import print_function