azet

--- btusb.c.old	2015-05-06 22:04:23.000000000 +0200
+++ btusb.c	2015-07-11 03:05:28.690816736 +0200
@@ -112,6 +112,8 @@
 	{ USB_DEVICE(0x0b05, 0x17b5) },
 	{ USB_DEVICE(0x0b05, 0x17cb) },
 	{ USB_DEVICE(0x413c, 0x8197) },
+       { USB_DEVICE(0x413c, 0x8143),
+         .driver_info = BTUSB_BCM_PATCHRAM },
 	{ USB_DEVICE(0x13d3, 0x3404),
 	  .driver_info = BTUSB_BCM_PATCHRAM },

azet

#!/usr/bin/env python
#
# Parsing of `masscan` collected X.509 certificates
# to extract RSA moduli for Fast-GCD (factorable.net).
# ..threaded Python version.     
#
# Authors: Aaron Zauner <azet@azet.org>
# License: CC0 1.0 (https://creativecommons.org/publicdomain/zero/1.0)
#
from __future__ import print_function

azet

So this happened: phrack changed it's format and posted a nice analysis of the 
(nowadays missing) hacker community and societal behaviour of hackers in 
general: http://phrack.org/papers/fall_of_groups.html
 
This article reflects a lot of thoughts I've had over the last couple of 
months. In a very positive way.
 
 
Yea sure, the scene we grew up in changed to what has now become a bullshit 
business like any other. Originality is scarce and every time I see SQLi or 

azet

#!/usr/bin/env bash

sshuser="meister"

iodinepwd="pwdpwd"
iodinehost="dnsfakepool.cool.systems"

# exit 1 if we're not uid 0 e.g. superuser
[ `id -u ` -ne 0 ] && exit 1

azet

#!/usr/bin/env bash
#
# Retrieves MX and A records for 'Alexa Top 1 Million' hosts
# and prints them as pretty formatted JSON objects to stdout.
#
# *Optional* parallelism support with GNU Parallel (recommended):
#     $ sudo apt-get install parallel
#
# Authors: Aaron Zauner <azet@azet.org>
# License: CC0 1.0 (https://creativecommons.org/publicdomain/zero/1.0)

azet

%% PoC* by:   Karo Kawalle
%% PoC* URL:  https://twitter.com/a_z_e_t/status/898274928515874816
%% Author:    Aaron Zauner <azet@azet.org> [Theorem: Pierre de Fermat]
%% Date:      17.08.2017 [18.10.1640]
%% License:   CC0 1.0 Universal [Public Domain Dedication]
%% Depends:   `texlive-full latexmk` [on deb/apt based distros]
%% Build:     `latexmk -pdf tattoo.tex`
%% * PoC = "Proof of Concept" (abbreviation) [i.e. implementation]
\documentclass[a4paper]{letter}
\usepackage{quattrocento, microtype, mathtools}

azet

 static void fast_mix(struct fast_pool *f)
{
        __u32 a = f->pool[0],   b = f->pool[1];
        __u32 c = f->pool[2],   d = f->pool[3];

        a += b;                 c += d;
        b = rol32(b, 6);        d = rol32(d, 27);
        d ^= a;                 b ^= c;

        a += b;                 c += d;

azet

IPv4-wide Scans @ SHA2017

What? -- Outline & General Information

We're setting up infrastructure to utilize the available bandwidth at the SHA2017 hacker camp in the Netherlands. Participation is more than welcome! This doesn't mean you have to be at the camp physically -- you may suggest scanning proposals/ideas (see below) & do your research remotely via ssh(1) or have someone implement and run your idea at the camp. There will be a workshop on internet-wide scanning - we'll present our results and teach willing participants what we know, have learned scanning the internet in the past, from others and during the camp. We will also let the participants run their own scans -- if we feel they're valuable, ethical and non-disruptive.

*Full attribution (professional, academic & otherwise) will go to the original authors of ideas and implementers of scans run d

azet

ntopng Cheat Sheet

• sudo ntopng -v2 -i any -n1 -w 8080 -ue
• -e = daemon
• -u = no promiscous mode
• -i zc:eth0 = PF_RING zerocopy
• -n1 = DNS: full name resolution, everywhere

/etc/ntopng/ntopng.conf

/etc/ntopng/ntopng.conf 

azet

\documentclass[11pt, a4paper]{scrlttr2}
\usepackage{gentium}
\usepackage[utf8]{inputenc}
\usepackage[T1]{fontenc}
\usepackage{microtype}
\usepackage[english]{babel}
\usepackage[english=usenglishmax]{hyphsubst}
\usepackage{mathtools}
\usepackage{cryptocode}
\usepackage{algorithmic}