Dan Lenski dlenski

## filter_messages_from_pidgin_log.py
#/usr/bin/env python2

from __future__ import print_function
from sys import stdin, stderr, stdout
import re

message = []
message_started = message_ended = None

for line in stdin:

## lookup_entities.py
"""Example of using hangups to lookup contacts by id."""

import sys

import asyncio

import hangups


# Path where OAuth refresh token is saved, allowing hangups to remember your

## gist:3adcdd3dd5ed897a8e8c4f172726aaca
# generate your private key, put the public key on the server you will be connecting to
ssh-keygen -t rsa -f ./my_key

# generate the password/secret you will store encrypted in the .travis.yml and use to encrypt your private key
cat /dev/urandom | head -c 10000 | openssl sha1 > ./secret

# encrypt your private key using your secret password
openssl aes-256-cbc -pass "file:./secret" -in ./my_key -out ./my_key.enc -a

# download your Travis-CI public key via the API. eg: https://api.travis-ci.org/repos/travis-ci/travis-ci/key

## fake_PAN_GlobalProtect_server.py
#!/usr/bin/env python3

# This is used for testing openconnect's (https://github.com/dlenski/openconnect).
# handling of the atrocious XML+JavaScript mess used for
# authenticating to a PAN GlobalProtect VPN.
#
# Requires a recent version of Flask and Python 3.x, and a server.pem
#
# Should be fairly easy to tweak to fit various authentication scenarios.

## jun_ssl_log.py
#!/usr/bin/python3

# Run like this with mitmproxy v4.0.4:
#    mitmdump --script jun_ssl_log.py --tcp-hosts JUNIPER.SERVER.COM
#
# It will dump the TCP flows with the server in a raw-ish format to /tmp/TCPFlow*,
# and will replace the MD5 hash of the "real" server certificate with that of the
# MITM'ed server certificate (as provided to the client) anywhere it appears in the
# TCP flows' content.

## robopool.py
#!/usr/bin/env python3

'''
Exhaustive solution to
    https://fivethirtyeight.com/features/the-robot-invasion-has-come-for-our-pool-halls/

Consider 15 standard pool balls arranged in a triangle (7 solids, 7 stripes, one 8-ball).
- Solids are all equivalent to each other
- Stripes are all equivalent to each other
- Robot can perform one of three operations: rotate 120° CW, rotate 120° CCW, swap 2 balls

## make_RSA_token.sh
#!/bin/bash

# Takes SN, EXPIRATION, and SEED environment variables
# (SEED must be 32 hex digits) and converts them to
# an RSA SecurID token in CTF format.
#
# Requires:
#   stoken >=v0.9
#   perl5
#   base64

## geoclue.py
#!/usr/bin/env python

# old, Python 2.x only :-(
# https://github.com/freedesktop/python-geoclue

from __future__ import print_function
import Geoclue
from datetime import datetime

print("Geoclue version %s" % Geoclue.VERSION)

## jwt-parse.sh
#!/bin/bash

# Parses JSON Web Tokens (https://en.wikipedia.org/wiki/JSON_Web_Token)
# and pretty-prints their content.
#
# © 2021 Daniel Lenski <dlenski@gmail.com>, MIT License

jq=$(which jq || echo cat)

for jwt in "$@"; do

## fakeserver.py
#!/usr/bin/env python3

# Needs: Python 3.5+, Flask, PyCryptoDome
#        server.pem, rsapubkey.pem + rsaprivkey.pem (1024-bit) in the current directory
#
# What it does:
#   Pretends to be the "CT-KIP" web service (https://tools.ietf.org/html/rfc3948) that
#   RSA SecurID Token for Windows v5.0.x talks to to set up a new token, using an
#   authentication code.
#
	#/usr/bin/env python2

	from __future__ import print_function
	from sys import stdin, stderr, stdout
	import re

	message = []
	message_started = message_ended = None

	for line in stdin:
	"""Example of using hangups to lookup contacts by id."""

	import sys

	import asyncio

	import hangups


	# Path where OAuth refresh token is saved, allowing hangups to remember your
	# generate your private key, put the public key on the server you will be connecting to
	ssh-keygen -t rsa -f ./my_key

	# generate the password/secret you will store encrypted in the .travis.yml and use to encrypt your private key
	cat /dev/urandom \| head -c 10000 \| openssl sha1 > ./secret

	# encrypt your private key using your secret password
	openssl aes-256-cbc -pass "file:./secret" -in ./my_key -out ./my_key.enc -a

	# download your Travis-CI public key via the API. eg: https://api.travis-ci.org/repos/travis-ci/travis-ci/key
	#!/usr/bin/env python3

	# This is used for testing openconnect's (https://github.com/dlenski/openconnect).
	# handling of the atrocious XML+JavaScript mess used for
	# authenticating to a PAN GlobalProtect VPN.
	#
	# Requires a recent version of Flask and Python 3.x, and a server.pem
	#
	# Should be fairly easy to tweak to fit various authentication scenarios.
	#!/usr/bin/python3

	# Run like this with mitmproxy v4.0.4:
	# mitmdump --script jun_ssl_log.py --tcp-hosts JUNIPER.SERVER.COM
	#
	# It will dump the TCP flows with the server in a raw-ish format to /tmp/TCPFlow*,
	# and will replace the MD5 hash of the "real" server certificate with that of the
	# MITM'ed server certificate (as provided to the client) anywhere it appears in the
	# TCP flows' content.
	#!/usr/bin/env python3

	'''
	Exhaustive solution to
	https://fivethirtyeight.com/features/the-robot-invasion-has-come-for-our-pool-halls/

	Consider 15 standard pool balls arranged in a triangle (7 solids, 7 stripes, one 8-ball).
	- Solids are all equivalent to each other
	- Stripes are all equivalent to each other
	- Robot can perform one of three operations: rotate 120° CW, rotate 120° CCW, swap 2 balls
	#!/bin/bash

	# Takes SN, EXPIRATION, and SEED environment variables
	# (SEED must be 32 hex digits) and converts them to
	# an RSA SecurID token in CTF format.
	#
	# Requires:
	# stoken >=v0.9
	# perl5
	# base64
	#!/usr/bin/env python

	# old, Python 2.x only :-(
	# https://github.com/freedesktop/python-geoclue

	from __future__ import print_function
	import Geoclue
	from datetime import datetime

	print("Geoclue version %s" % Geoclue.VERSION)
	#!/bin/bash

	# Parses JSON Web Tokens (https://en.wikipedia.org/wiki/JSON_Web_Token)
	# and pretty-prints their content.
	#
	# © 2021 Daniel Lenski <dlenski@gmail.com>, MIT License

	jq=$(which jq \|\| echo cat)

	for jwt in "$@"; do
	#!/usr/bin/env python3

	# Needs: Python 3.5+, Flask, PyCryptoDome
	# server.pem, rsapubkey.pem + rsaprivkey.pem (1024-bit) in the current directory
	#
	# What it does:
	# Pretends to be the "CT-KIP" web service (https://tools.ietf.org/html/rfc3948) that
	# RSA SecurID Token for Windows v5.0.x talks to to set up a new token, using an
	# authentication code.
	#