Skip to content

Instantly share code, notes, and snippets.

View cji's full-sized avatar

Craig Ingram cji

View GitHub Profile
@tin-z
tin-z / VR_roadmap.md
Last active June 29, 2024 14:29
Becoming a Vulnerability Researcher roadmap: my personal experience
@SeanHeelan
SeanHeelan / aeg.bib
Created January 29, 2020 21:14
Bibliography for an AEG talk
@inproceedings{avgerinos_aeg:_2011,
title = {{AEG}: {Automatic} {Exploit} {Generation}},
booktitle = {Network and {Distributed} {System} {Security} {Symposium}},
author = {Avgerinos, Thanassis and Cha, Sang Kil and Hao, Brent Lim Tze and Brumley, David},
month = feb,
year = {2011},
keywords = {MyPHDThesis}
}
@inproceedings{brumley_automatic_2008,
@IanColdwater
IanColdwater / twittermute.txt
Last active May 23, 2024 18:37
Here are some terms to mute on Twitter to clean your timeline up a bit.
Mute these words in your settings here: https://twitter.com/settings/muted_keywords
ActivityTweet
generic_activity_highlights
generic_activity_momentsbreaking
RankedOrganicTweet
suggest_activity
suggest_activity_feed
suggest_activity_highlights
suggest_activity_tweet
#include <stdlib.h>
#include <stdio.h>
#include <stdint.h>
int
main(void) {
int ii;
uint8_t buf[8192] = { 0 };
// Worlds most impressive exploit
@bgeesaman
bgeesaman / kphcme.sh
Last active March 21, 2021 00:45
GKE/Kube-proxy host command execution via kubectl exec
#!/usr/bin/env bash
# Credit: https://twitter.com/_fel1x
# poc: https://twitter.com/_fel1x/status/1151487051986087936
# Adapted to GKE/kube-proxy by: https://twitter.com/bradgeesaman
# and to avoid detection by Falco's default rules
read -r -d '' ESCAPE <<'EOF'
#!/bin/sh
{
"mode": "patterns",
"proxySettings": [
{
"address": "127.0.0.1",
"port": 8080,
"username": "",
"password": "",
"type": 1,
"title": "127.0.0.1:8080",
@rhowe-gds
rhowe-gds / generate-gpg-yubikey.sh
Last active April 30, 2019 17:41
Generate GPG keys and put them on a Yubikey
#!/bin/bash
set -euo pipefail
GNUPGHOME=$(mktemp -d)
cleanup() {
echo rm -rf "$GNUPGHOME"
killall gpg-agent || :
}
// gets uid 0 (iOS 11)
// add patchfinder and you should be good
// Abraham Masri @cheesecakeufo
/*
* Purpose: iterates over the procs and finds our proc
*/
uint64_t get_our_proc() {
@acolyer
acolyer / jessfraz.md
Created November 19, 2017 13:39
Containers, operating systems and other fun things from The Morning Paper
@tallclair
tallclair / restricted-psp.yaml
Last active April 16, 2024 07:46
Restricted PodSecurityPolicy
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
name: restricted
annotations:
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default'
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
spec: