Joshua Wright joswr1ght

## netshportforward.cmd
netsh interface portproxy add v4tov4 listenport=8001 listenaddress=192.168.0.10 connectport=80 connectaddress=192.168.0.10

## checkAndroidAppStore.java
public static boolean checkGooglePlayStore(Context context) {
	String installerPackageName = context.getPackageManager().getInstallerPackageName(context.getPackageName());
	return installerPackageName != null && installerPackageName.startsWith(" com.google.android");
}

## vboxmanage-convert-vhd.sh
VBoxManage clonehd --format vhd "disk1.vmdk" "disk1.vhd"

## watchiptables.sh
watch -d -n 2 iptables -nvL # Add -t nat for PREROUTING hits

## zunzip.py
#!/usr/bin/env python
import zlib, sys

if len(sys.argv) != 2:
    print "Usage: %s <zlib-compressed-file>"%sys.argv[0]
    print "Produces decompressed file with \".out\" filename suffix."
    sys.exit(0)

indata=open(sys.argv[1], "rb").read()
outdata=zlib.decompress(indata)

## msfwrapper-stop-warn.sh
sed -i 's/find \$FRAMEWORK\/\$cmd -mmin +20160/true/' /path/to/msfwrapper.erb'

## convert-onesafe-to-1password.py
#!/usr/bin/env python3
# 2019-06-14 Joshua Wright, josh@wr1ght.net
import csv
import sys

OV = '\x1b[0;33m' # verbose
OR = '\x1b[0;36m' # routine
OE = '\x1b[1;31m' # error
OM = '\x1b[0m'    # mischief managed
LOGINFILE="1password-login.csv"

## uninstall-windowsdefender.ps1
Uninstall-WindowsFeature -Name Windows-Defender

## brojsonnormaltime.sh
bro -r $1 -e 'redef LogAscii::use_json=T; redef LogAscii::json_timestamps = JSON::TS_ISO8601;'

## disablekibanadatareporting.sh
curl --silent -d '{"doc":{"telemetry":{"enabled":false}}}' -H 'content-type: application/json' http://localhost:9200/.kibana/_update/telemetry%3Atelemetry | jq
	public static boolean checkGooglePlayStore(Context context) {
	String installerPackageName = context.getPackageManager().getInstallerPackageName(context.getPackageName());
	return installerPackageName != null && installerPackageName.startsWith(" com.google.android");
	}
	#!/usr/bin/env python
	import zlib, sys

	if len(sys.argv) != 2:
	print "Usage: %s <zlib-compressed-file>"%sys.argv[0]
	print "Produces decompressed file with \".out\" filename suffix."
	sys.exit(0)

	indata=open(sys.argv[1], "rb").read()
	outdata=zlib.decompress(indata)
	#!/usr/bin/env python3
	# 2019-06-14 Joshua Wright, josh@wr1ght.net
	import csv
	import sys

	OV = '\x1b[0;33m' # verbose
	OR = '\x1b[0;36m' # routine
	OE = '\x1b[1;31m' # error
	OM = '\x1b[0m' # mischief managed
	LOGINFILE="1password-login.csv"