Skip to content

Instantly share code, notes, and snippets.

Avatar
[hip, hip]

Leon Jacobs leonjza

[hip, hip]
View GitHub Profile
@leonjza
leonjza / README.md
Last active May 29, 2022
Forward a remote iOS device, locally.
View README.md

fwd_ios.sh

Forwards a remote iOS device, exposed via usbmuxd on Linux to a local macOS client.
The inverse (aka ssh -R) is left as an excercise to the reader, but shouldn't be too hard :)

This is basically a simple usbfluxd that only depends on socat.

install

Copy the bash script to a local file, say fwd_ios.sh and make it executable with chmod +x fwd_ios.sh.

@leonjza
leonjza / enable_vnc.sh
Created May 28, 2022
macOS enable vnc remotely via ssh
View enable_vnc.sh
#!/bin/bash
# simple script to enable remote management via an ssh
set -e
if [ "$EUID" -ne 0 ]
then echo "please run as root (eg: sudo $0)"
exit
fi
@leonjza
leonjza / DOCKER-IN-AN-HOUR.md
Last active Jun 12, 2022
Docker in an hour Workshop
View DOCKER-IN-AN-HOUR.md

docker-in-an-hour

@leonjza

Welcome to docker-in-an-hour! This is a "JIT" for docker, with many explanations being just enough to defend yourself. It is highly recommended that you go and at least Google some of the stuff here after doing the workshop. Read the official docs with real explanations.

toc

@leonjza
leonjza / picker.patch
Created Jan 30, 2022
objection boot target picker poc
View picker.patch
diff --git a/objection/console/cli.py b/objection/console/cli.py
index f9738d1..4814eff 100644
--- a/objection/console/cli.py
+++ b/objection/console/cli.py
@@ -3,6 +3,8 @@ import time
from pathlib import Path
import click
+from prompt_toolkit import prompt
+from prompt_toolkit.completion import FuzzyCompleter, WordCompleter
@leonjza
leonjza / clone-and-write.ps1
Created Oct 29, 2021
Cobalt Strike Clone Executable Signature for code-signer Malleable Profile block
View clone-and-write.ps1
# clone the certificate for SysInternals TCPView.exe and save
# it as cert.pfx
$o = Get-PfxCertificate -FilePath .\tcpview.exe
$cl = New-SelfSignedCertificate -CloneCert $o
$p = ConvertTo-SecureString -String "password" -Force -AsPlainText
Export-PfxCertificate -FilePath cert.pfx -Cert $cl -Password $p
@leonjza
leonjza / README.md
Created Sep 23, 2021
SenseCon '21 Announce Challenge
View README.md

Hello world!

This was the internal @sensepost SenseCon 2021 announcement email (stripped), together with the supporting challenge.

Have phun!

@leonjza
leonjza / README.md
Last active Jul 6, 2021
A PHP eval() reverse shell.
View README.md

php eval shell

A reverse shell that lets you evaluate PHP.
This is not an OS command reverse shell per-se but you could eval a function like system("id") for that if you wanted to.

Useful to poison an existing PHP file and explore the currently loaded environment.

example

@leonjza
leonjza / README.md
Last active Dec 5, 2020
Traefik docker-compose with Trauth, Wildcard Certs & Metrics
View README.md

traefik service docker-compose example

Traefik docker-compose with Trauth, Wildcard Certs & Metrics

Ref:

@leonjza
leonjza / dump.sh
Last active May 18, 2020
Dump iOS executable content headers using radare2
View dump.sh
#!/usr/bin/env bash
#
# Dump headers for binaries in an extracted iOS applications'
# Payload folder using radare2.
dumpdir="headers/"
mkdir -p $dumpdir
find . -perm +111 -type f | grep -iv "libswift" | while read -r bin; do
echo "< Processing -> $bin"
@leonjza
leonjza / rename.patch
Last active Jul 19, 2021
frida-server remove frida references from /proc/<pid>/maps | apply to frida-core
View rename.patch
diff --git a/server/server.vala b/server/server.vala
index d3fc39f9..3e4d11b3 100644
--- a/server/server.vala
+++ b/server/server.vala
@@ -3,7 +3,7 @@ namespace Frida.Server {
private const string DEFAULT_LISTEN_ADDRESS = "127.0.0.1";
private const uint16 DEFAULT_LISTEN_PORT = 27042;
- private const string DEFAULT_DIRECTORY = "re.frida.server";
+ private const string DEFAULT_DIRECTORY = "re.freeda.server";