emory

# cached packages

homebrew for macOS caches in `~/Library/Caches/Homeberw` and i figure the pkcs11 tooling i use being compromised would be a huge problem for me and everyone else using it?

```
~/Library/Caches/Homebrew
% ls -la p11-kit*
lrwxr-xr-x  1 rlundb811  staff  118 Nov 20 11:23 p11-kit--0.25.3 -> downloads/1f29fbea9391e33f2bcc01c320d960dc11721363dd6fe42aafcef6dd194f2e05--p11-kit--0.25.3.arm64_sonoma.bottle.tar.gz
lrwxr-xr-x  1 rlundb811  staff  111 Oct 30 13:22 p11-kit_bottle_manifest--0.25.1 -> downloads/ad55f3d64397404e6a67b1f9518d6863ab14da4b812a227ba3cce37449c7c90c--p11-kit-0.25.1.bottle_manifest.json
lrwxr-xr-x  1 rlundb811  staff  111 Nov 20 11:23 p11-kit_bottle_manifest--0.25.3 -> downloads/cc547bf2f72da03680090015f5b720aff280ce33de9c33783a69c24fe97a4246--p11-kit-0.25.3.bottle_manifest.json

emory

tap "archivebox/archivebox"
tap "homebrew/bundle"
tap "homebrew/cask"
tap "homebrew/cask-drivers"
tap "homebrew/cask-versions"
tap "homebrew/core"
tap "homebrew/services"
tap "mysticlgbt/made"
tap "xwmx/taps"
brew "ack"

emory

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\.iso]

[-HKEY_CLASSES_ROOT\Windows.IsoFile\shell\mount\command]

[-HKEY_CLASSES_ROOT\.img]

[-HKEY_CLASSES_ROOT\.vhdx]

emory

emory@debut:/volume1/docker$ sudo nvme smart-log /dev/nvme0
Smart Log for NVME device:nvme0 namespace-id:ffffffff
critical_warning                    : 0x4
temperature                         : 18 C
available_spare                     : 100%
available_spare_threshold           : 10%
percentage_used                     : 104%
data_units_read                     : 1,097,736,246
data_units_written                  : 526,487,556
host_read_commands                  : 32,712,112,528

emory

BitDefender is really concerned about the DirectHW binary in DarwinDumper.app

so I passed it along to virusTotal and this is the current analysis of my DirectHW binary,

MD5 (./DirectHW) = 66b3fd953675de8906dff4f69a89fb4c

emory@ICON ~ % vt analysis NjZiM2ZkOTUzNjc1ZGU4OTA2ZGZmNGY2OWE4OWZiNGM6MTY3MzQ0NTg5Nw== | grep malicious -B1 -A5
    ALYac:
      category: "malicious"

emory

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>EnvironmentVariables</key>
	<dict>
		<key>PATH</key>
		<string>/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/share/dotnet:/opt/X11/bin:/Applications/Wireshark.app/Contents/MacOS:/usr/local/sbin:/opt/local/bin</string>
	</dict>
	<key>KeepAlive</key>

emory

panic(cpu 0 caller 0xffffff80058c5b68): m_free: freeing an already freed mbuf @uipc_mbuf.c:4817
Panicked task 0xffffff85a63f96a0: 580 threads: pid 0: kernel_task
Backtrace (CPU 0), panicked thread: 0xffffff85abcbb580, Frame : Return Address
0xffffffd14675ba60 : 0xffffff800529c00d 
0xffffffd14675bab0 : 0xffffff80053f5d85 
0xffffffd14675baf0 : 0xffffff80053e5763 
0xffffffd14675bb40 : 0xffffff800523ba60 
0xffffffd14675bb60 : 0xffffff800529c3dd 
0xffffffd14675bc80 : 0xffffff800529bb96 
0xffffffd14675bce0 : 0xffffff8005b18649 

emory

Read (noncache) = 160
	Average = 827.9 MB/s
	20% trimmed mean = 833.1 MB/s (466.6 MB/s - 1.08 GB/s)
	Theil-Sen regressed rate = 754.7 MB/s (603.2 MB/s - 1.17 GB/s)
	Linear regressed rate = 708.3 MB/s latency = -0.021377247120773823 s

Write = 16
	Average = 2.51 GB/s
	20% trimmed mean = 2.51 GB/s (1.05 GB/s - 4.02 GB/s)
	Theil-Sen regressed rate = 3.62 GB/s (1.35 GB/s - 6.62 GB/s)

emory

UniFi Tunnelbroker Configuration

This GitHub Gist details the manual configuration needed on a UniFi controller to enable IPv6 tunneling with Hurricane Electric's Tunnelbroker service.

Setup

This is what works for me personally. Stuff you'll need to do to adapt this to your ends:

• Replace "local-ip" with your USG's public IPv4 address.
• Replace "remote-ip" with the address of your Tunnelbroker tunnel server.
• Replace "address" with the IPv6 address that your are allocated.

emory

Learning Aid - Top Base64 Encodings Table

MITRE ATT4CK - T1132 - Data Encoding

Base64 Code	Mnemonic Aid	Decoded*	Description
JAB	🗣 Jabber	$.	Variable declaration (UTF-16)
TVq	📺 Television	MZ	MZ header
UEs	🏬 Upper East Side	PK	ZIP, Office documents
SUVY	🚙 SUV	IEX	PowerShell Invoke Expression