The figure below calls out
- The netfilter hooks
- The order of table traversal
rule ELF_Methodology_RareEquities_Pcap | |
{ | |
meta: | |
author = "@stvemillertime" | |
description = "This is a wide catchall rule looking for executables with pcap equities. Matches on this rule may have built-in pcap collection, sniffing capability such as in MESSAGETAP, RATSNIF, etc." | |
ref_md5 = "8d3b3d5b68a1d08485773d70c186d877" | |
strings: | |
$a1 = "pcap_" | |
condition: | |
(uint32(0) == 0x464c457f) and int8(0x10) == 0x02 and $a1 |
#!/bin/bash | |
TIMING=$1 | |
SCRIPT=$2 | |
W=$WINDOWID | |
rm -rf /tmp/script-replay-gifs/ | |
mkdir /tmp/script-replay-gifs/ | |
t=$(mktemp) |
package main | |
import ( | |
"fmt" | |
"github.com/codegangsta/negroni" | |
"github.com/julienschmidt/httprouter" | |
"net/http" | |
) | |
func main() { |
Some things takes much less time and stress once you know the right tool. Below, there is a community edited list of software for scientists.
in General purpose text/code editors. It may be better to have a good editor for everything, than different ones for different languages, scripts, notes.
#!/bin/bash | |
# ssh-multi | |
# D.Kovalov | |
# Based on http://linuxpixies.blogspot.jp/2011/06/tmux-copy-mode-and-how-to-control.html | |
# a script to ssh multiple servers over multiple tmux panes | |
starttmux() { | |
if [ -z "$HOSTS" ]; then |
This article is now published on my website: Prefer Subshells for Context.