Skip to content

Instantly share code, notes, and snippets.

View jemacom's full-sized avatar

Chokri jemacom

View GitHub Profile
@jemacom
jemacom / Blockchain security research.md
Created March 23, 2018 09:42 — forked from TheHackerDev/Blockchain security research.md
Open-source blockchain security research (contributions welcome!)

What is a blockchain?

  • Distributed ledger system; for tracking the transfer of tokens (currency, data of any type).
  • A cross between economics, cryptography, and the internet.
    • Side note- if you ever wanted a financial incentive to get involved in cryptography, this is it.
  • A blockchain is literally a chain of blocks, where each block contains a list of transactions that everyone agrees have occurred.
    • Each block builds upon all the ones before it.

A blockchain is literally a chain of blocks

input {
syslog {
type => "pfsense"
}
}
filter {
if [type] == "pfsense" {
grok {
patterns_dir => "/opt/logstash/patterns"
@jemacom
jemacom / pfsense2-2-grok-pattern
Last active September 2, 2015 15:20
Grok pfsense pattern
PFSENSE <%{NUMBER:evtid}>%{SYSLOGTIMESTAMP:date} %{PROG:prog}: %{GREEDYDATA:msg}
LOG_DATA (%{INT:rule}),(%{INT:sub_rule}),,(%{INT:tracker}),(%{WORD:iface}),(%{WORD:reason}),(%{WORD:action}),(%{WORD:direction}),(%{INT:ip_ver}),
IP_SPECIFIC_DATA (%{IPv4_SPECIFIC_DATA}|%{IPv6_SPECIFIC_DATA})
IPv4_SPECIFIC_DATA (%{BASE16NUM:tos}),,(%{INT:ttl}),(%{INT:id}),(%{INT:offset}),(%{WORD:flags}),(%{INT:proto_id}),(%{WORD:proto}),
IPv6_SPECIFIC_DATA (%{BASE16NUM:class}),(%{DATA:flow_label}),(%{INT:hop_limit}),(%{WORD:proto}),(%{INT:proto_id}),
@jemacom
jemacom / pfsense2-2.conf
Created September 2, 2015 15:19
Logstash conf file to parse pfsense logs
input {
syslog {
type => "pfsense"
}
}
filter {
if [type] == "pfsense" {
grok {
patterns_dir => "/opt/logstash/patterns"