Skip to content

Instantly share code, notes, and snippets.

View morimolymoly's full-sized avatar

mmmly morimolymoly

View GitHub Profile
fd 3, addr: 0x55a7fdabb5c8
GET / HTTP/1.1
Host: 192.168.200.56:1919
User-Agent: curl/7.58.0
Accept: */*
package main
import (
"fmt"
)
type helloObject struct {
Otakebi string
Name string
}
adab2c77653a2ee0cbef752f72ffa0e7a10985f3

現在のパーティション

root@yayoi:/home/moly# pvdisplay
  --- Physical volume ---
  PV Name               /dev/sda3
  VG Name               ubuntu-vg
  PV Size               <9.00 GiB / not usable 0
  Allocatable           yes
  PE Size               4.00 MiB
  Total PE              2303

Scam Details

steal account credentials

Scammer(https://steamcommunity.com/profiles/76561198378304894) send messages to victims for inviting to exchange in-game items. He let you to connect to legit trading website. (e.g. csmoney, bitskins) And also, he introduce fake website(https://suffinfo.com/) to check item's price.

fakewebsite do picture-in-picture attack. It steals victim's account ID and password and also 2FA code.

Login window is totally fake(with picture-in-picture attack, it seems totally legit)

依存パッケージインストール

sudo apt install build-essential \
 bcc bin86 gawk bridge-utils iproute2 libcurl4 \
 libcurl4-openssl-dev bzip2 module-init-tools transfig tgif \
 texinfo texlive-latex-base texlive-latex-recommended \
 texlive-fonts-extra texlive-fonts-recommended pciutils-dev mercurial \
 make gcc libc6-dev zlib1g-dev python python-dev python-twisted \
 libncurses5-dev patch libvncserver-dev libsdl-dev libjpeg-dev \
 iasl libbz2-dev e2fslibs-dev git-core uuid-dev ocaml ocaml-findlib libx11-dev bison flex xz-utils libyajl-dev \
trait A {
fn fn_a(&self) {
println!("fna");
}
}
trait B {
fn fn_b(&self) {
println!("fnb");
}
use std::any::Any;
struct A {
value: Box<dyn Any>
}
struct B<T> {
value: T
}
fn main() {

環境

Linux mya 5.4.0-48-generic #52-Ubuntu SMP Thu Sep 10 10:58:49 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

環境構築

rtsp serverを立てるためのパッケージをインストールする

% sudo apt search gst-rtsp-server       
Sorting... Done
Full Text Search... Done
gir1.2-gst-rtsp-server-1.0/focal 1.16.2-3 amd64
import java.beans.beancontext.BeanContext;
import java.security.Key;
import java.security.SecureRandom;
import java.security.AlgorithmParameters;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.Cipher;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESKeySpec;