cedriczirtacic

[1] 17/07/2017: Contacted Equifax via @AskEquifax.
[2] 22/07/2017: After no response, the issue was made public.
[3] XX/09/2017: Issue fixed after "Equihax" breach.

cedriczirtacic

#!/usr/bin/perl -w
use strict;
use warnings;

use Net::ARP;

my $source = "10.0.2.15";
my $dev = "enp0s3";

WHILE: print "\$ ";

cedriczirtacic

// gcc -o get_orig_hwaddr get_orig_hwaddr.c
#include <stdio.h>
#include <errno.h>
#include <string.h>

#include <net/if.h>
#include <sys/ioctl.h>
#include <sys/socket.h>

char *get_addr (int fd, struct ifreq *ifrq) {

cedriczirtacic

// To try it in i386:
// as --32 -o cs.o cs.S && ld -melf_i386 -o cs cs.o
.section .text
.global _start
_start:
    movw %cs, %cx
    shr $4, %cx

    cmpb $3, %cl
    je x86_64

cedriczirtacic

==========================================          ==========================================
             TMUX COMMAND                                        WINDOW (TAB)
==========================================          ==========================================

List    tmux ls                                     List         ^b w
New          -s <session>                           Create       ^b c
Attach       att -t <session>                       Rename       ^b , <name>
Rename       rename-session -t <old> <new>          Last         ^b l               (lower-L)
Kill         kill-session -t <session>              Close        ^b &

cedriczirtacic

//as -o rot13.o rot13.S && ld -o rot13 rot13.o
.section .data
string:
    .asciz "Hello World.\n"
.section .text
.global _start
_start:
    leaq string, %rdi
    call rot13

cedriczirtacic

.section .text
.global _start
_start:
    pushq %rbp
    movq %rsp, %rbp
    subq $1, %rbp

// call sys_getrandom
    movl $318, %eax
    leaq -1(%rbp), %rdi

cedriczirtacic

--- main.c.old  2017-10-11 11:00:46.980000015 -0600
+++ main.c      2017-10-11 11:09:21.803333352 -0600
@@ -152,7 +152,8 @@
         printf("recover from file `%s'.\n", optarg);
        break;
       case 'c': /* command */
-        startup_commands[startup_commands_n++] = optarg;
+        if (startup_commands_n <= HEXER_MAX_STARTUP_COMMANDS)
+          startup_commands[startup_commands_n++] = optarg;
        break;

cedriczirtacic

// like: otool -h <binary>
#include <stdio.h>
#include <stdlib.h>
#include <fcntl.h>
#include <unistd.h>

#include <mach-o/loader.h>

int main(int argc, char *argv[]) {
    struct mach_header_64 *hdr;

cedriczirtacic

#!/bin/env node
// https://gist.github.com/cedriczirtacic

var argv = process.argv;
if (argv.length < 3) {
    console.info("%s <url>", argv[1]);
    process.exit(1);
}

var url = argv[2];