Skip to content

Instantly share code, notes, and snippets.

View marcinantkiewicz's full-sized avatar

Marcin Antkiewicz marcinantkiewicz

View GitHub Profile
marcinantkiewicz / broken_set_cookie
Created July 27, 2012 21:05
broken Set-Cookie headers from
marcinantkiewicz / gist:3204349
Created July 30, 2012 04:03
pathod example
Query -
200: // return 200
b@100: // generate 100 random chars in the body
h@1k,ascii_letters=@10,digits: // 1k random chars in header name,
//10 random digits in the value
h"Transfer-Encoding"="chunked": // add T-E Chunked header
// 100 chars in the body added the C-L header already
l"data:text/html;base64,PHNjc..." // and a suspicious Location header
HTTP/1.1 200 OK
* cofnig origin ref:
* epmd stays up after rabbitmq-server is stopped. It's shared amond all Erlang instances, so maintainers feel not one packake should kill it.
* Erlang has a bug requiring ERL_EPMD_ADDRESS to be specified as IPv6. It seems that, if epmd is built with ipv6, it looses ability to bind with ipv4. Fix traversing from upstream.
We run R16B03-1/3.2.4-1
Download page:
USB image - 2g uncompressed:
Model: Lexar USB Flash Drive (scsi)
Disk /dev/sdb: 16.0GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags:
marcin@behemoth:~$ cd ~/src && git clone
Cloning into 'binwalk'...
remote: Counting objects: 6364, done.
remote: Total 6364 (delta 0), reused 0 (delta 0), pack-reused 6364
Receiving objects: 100% (6364/6364), 6.97 MiB | 3.40 MiB/s, done.
Resolving deltas: 100% (3664/3664), done.
Checking connectivity... done.
marcin@behemoth:~$ mkvirtualenv binwalk
New python executable in /home/marcin/.venvs/binwalk/bin/python
1) DHCP - iptables rules are not reuqired to make DHCP work.
Linux kernel will not send traffic via ethernet interface untill it has an IP address assigned. DHCP client uses raw sockets to
communicate with the DHCP server, which happens before Iptables have change to process the traffic.
2) iptables rule = classifier (iptable match) + action (iptables target)
Chains in which rules are applied:
- mangle - used to control TOS attributes, MARKs, TTL. Single table.
- filter - policy decision take place here. Tables: forward (target behind firewall, input (traffic to firewall), output (return, or originating traffic).
- nat - changes to src/dst IPs. Tables:
# Author: Marcin Antkiewicz
# @deciban
# Use:
#find_chrome_extensions -OutputDir "c:\"
#idea ref:
#PS 2.o has no convertfrom-json, 2.0 helper from

On Twitter the other day, I was lamenting the state of OCSP stapling support on Linux servers, and got asked by several people to write-up what I think the requirements are for OCSP stapling support.

  1. Support for keeping a long-lived (disk) cache of OCSP responses.

    This should be fairly simple. Any restarting of the service shouldn't blow away previous responses that were obtained. This doesn't need to be disk, just stable - and disk is an easy stable storage for most server

# Disable the NMI watchdog
echo '0' > '/proc/sys/kernel/nmi_watchdog';
# Runtime power management for I2C devices
for i in /sys/bus/i2c/devices/*/device/power/control ; do
echo auto > ${i}
Movign a bootable ISO to USB drive on OSX:
- Insert the USB drive. For portability, format as FAT
- The drive will mount, unmount the volume (but do not "eject")
user $ sudo diskutil unmountDisk /dev/disk2
Unmount of all volumes on disk2 was successful
- I need a GPT partition, in place of some junk here, so OSX formating tools will work just fine: