iagox86

i

iagox86

set from="ron@skullsecurity.net"
set folder_format = "[$from] *PERCENT*2C *PERCENT*t *PERCENT*N *PERCENT*F *PERCENT*2l *PERCENT*-8.8u *PERCENT*-8.8g *PERCENT*8s *PERCENT*d *PERCENT*f"
set status_format = "[$from (*PERCENT*f) {M:*PERCENT*m*PERCENT*?n?|N:*PERCENT*n?*PERCENT*?o?|O:*PERCENT*o?*PERCENT*?d?|D:*PERCENT*d?*PERCENT*?t?|T:*PERCENT*t?*PERCENT*?p?|P:*PERCENT*p?}"
#set signature = ~/.mutt/sig_ron.sig

# Set the SMTP server
source ~/.auth/mutt-nepharia.auth

# vim: set ft=muttrc

iagox86

set from="ron@skullsecurity.net"
set folder_format = "[$from] %252C %25t %25N %25F %252l %25-8.8u %25-8.8g %258s %25d %25f"
set status_format = "[$from (%25f) {M:%25m%25?n?|N:%25n?%25?o?|O:%25o?%25?d?|D:%25d?%25?t?|T:%25t?%25?p?|P:%25p?}"
#set signature = ~/.mutt/sig_ron.sig

# Set the SMTP server
source ~/.auth/mutt-nepharia.auth

# vim: set ft=muttrc

iagox86

set from="ron@skullsecurity.net"
set folder_format = "[$from] 2C t N F 2l -8.8u -8.8g 8s d f"
set status_format = "[$from (f) {M:m?n?|N:n??o?|O:o??d?|D:d??t?|T:t??p?|P:p?}"
#set signature = ~/.mutt/sig_ron.sig

# Set the SMTP server
source ~/.auth/mutt-nepharia.auth

# vim: set ft=muttrc

iagox86

function! SyntaxCheckers_lua_GetLocList()
    let makeprg = 'luac -p ' . shellescape(expand(''))
    let errorformat =  'luac: #f:l: m'

    return SyntasticMake({ 'makeprg': makeprg,
                         \ 'errorformat': errorformat,
                         \ 'defaults': { 'bufnr': bufnr(''), 'type': 'E' } })

endfunction

iagox86

action = function(host)
  a = 0x11223344
  b = 0x55667788
  c = bit.bor(bit.lshift(a, 32), b)

	return string.format("x", c)
end

iagox86

action = function(host)
  pos, a = bin.unpack("<L", "\x11\x22\x33\x44\x55\x66\x77\x88")

	return string.format("x", a)
end

iagox86

Hello Ron,

one day i stumbled upon your blog searching for some dns tunnel stuff. I
found it really interesting. You write what is essential about security,
speak out the warnings and also talk about fun things to do. Despite the
fact I am not an Sec.-Specialist, I like to read stuff about it and what
all can be done. I will definitely try your tools when I have free time.

While various scenarios go through my head and reading some articles about
nbns (the MS article about max. NB names and so on)  i experimented a

iagox86

2012-08-22 10:49:18 /orders count=10&lat=37.351&user_id=1&long=-119.827&waffle=eggo|sig:986788d156981a1398a489638bc4b529abb9dd63
2012-08-22 10:49:18 /orders count=2&lat=37.351&user_id=1&long=-119.827&waffle=chicken|sig:e8c57bb7cbb6fa98d116ed06622d6000ee431d49
2012-08-25 08:20:55 /ordersers count=2&lat=37.351&user_id=1&long=-119.827&waffle=chicken|sig:e8c57bb7cbb6fa98d116ed06622d6000ee431d497bb7cbb6fa98d116ed06622d6000ee431d49

ron@ankh ~/Downloads $ python sha-padding.py 14 'e8c57bb7cbb6fa98d116ed06622d6000ee431d49' 'count=2&lat=37.351&user_id=1&long=-119.827&waffle=chicken' '&waffle=liege'

iagox86

#include <stdio.h>
#include <openssl/sha.h>
#include <arpa/inet.h>
#include <string.h>

int main()
{
  SHA_CTX c;
  unsigned char buffer[200];
  int i;