Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

@nusenu
nusenu / show-expiredate.py
Created February 3, 2016 22:07
When pointed to one ore more tor datadirs (NOT files) it will show the expire dates of ed25519 certs
#!/usr/bin/python
import time
import sys
files = sys.argv[1:]
for fi in files:
f = open(fi+'/keys/ed25519_signing_cert', 'rb')
x = f.read()
@nusenu
nusenu / 2016-02_myfamily.txt
Last active February 18, 2016 12:51
potentially misconfigured relays (no proper MyFamily setting)
+----------------------------------------------------------------------------------+-----------------+----------+--------------+
| contact | IP | efamsize | contactcount |
+----------------------------------------------------------------------------------+-----------------+----------+--------------+
| torpids AT yahoo dot com - 1JYHfzVFVD7n2Sezz3DEHDFgGYjQWpDjqF | 217.12.203.46 | 3 | 35 |
| Evan Graham <luaktt AT gmail DOT com> | 172.93.107.196 | 20 | 21 |
| infoipworkdotcodotkr | 39.119.165.3 | 0 | 16 |
| 0x6F6D60C1 Security Dept <hello@brasshorncommunications.uk> | 185.86.151.102 | 14 | 16 |
| Nicholas Merrill <nick AT calyx dot com> 14wntQ8cBdnhUVfYmDjXz6PbpSSX8nCtkr | 162.247.72.213 | 6 |
+------+------+---------------------+-----------------+----------------+------+-----------------------------------------------------------+----------+------+------+------+----------------------------------------------------------+
| up | cw | first_seen | IP | nickname | cc | as_name | ver | ORp | DirP | exit | contact |
+------+------+---------------------+-----------------+----------------+------+-----------------------------------------------------------+----------+------+------+------+----------------------------------------------------------+
| 1 | 20 | 2016-03-07 14:00:00 | 179.35.168.234 | torxrelay05269 | br | Tim Celular S.A. | 0.2.4.27 | 8443 | 8444 | 1 | donate to: 1Kyq6iG6TTuqYK1LBexXD2BSSuzX7qteWK |
| 1 | 20 | 2016-03-07 14:00:00 | 98.126.23.99 | putangina32038 | us | Krypt Technologies
+------------------------------------------+-------+-------+---------------------+-----------------+-------------+---------+----------+
| fingerprint | hsdir | cw | last_restarted | IP | tor_version | or_port | dir_port |
+------------------------------------------+-------+-------+---------------------+-----------------+-------------+---------+----------+
| AE0F040BDF69606177F28654DE68F1E7789EEE8B | 1 | 4720 | 2016-03-07 17:38:17 | 82.211.31.247 | 0.2.6.10 | 443 | 80 |
| 0269165034C5586D6551CCCFA8940D2305948754 | 1 | 8820 | 2016-03-07 17:38:36 | 146.0.43.126 | 0.2.6.10 | 443 | 80 |
| DFF552D4D2BD921E6ABA20CDC9CA272FB49A18D8 | 1 | 1290 | 2016-03-07 17:39:05 | 89.207.129.150 | 0.2.6.10 | 443 | 80 |
| 982A103489DF8410585B8077B7FD813217093EB4 | 1 | 6720 | 2016-03-07 17:39:55 | 185.77.129.35 | 0.2.6.10 | 443 | 80 |
| B67E8AB9F674C78DC66F8C2900F2C8A9EB4F0909 | 1 | 6260 | 2016-03-07
+------------------------------------------+-------+------+---------------------+----------------+-------------+---------+----------+-----------+
| fingerprint | hsdir | cw | last_restarted | IP | tor_version | or_port | dir_port | nickname |
+------------------------------------------+-------+------+---------------------+----------------+-------------+---------+----------+-----------+
| 62B210B5517E467399C240BD1FD49E08DB3B8418 | 1 | 134 | 2016-03-18 19:47:56 | 111.90.146.220 | 0.2.6.10 | 443 | 80 | tyzack |
| 739B80EA04B1D1B007EA612EEB0A8E5D3AC595B1 | 0 | 684 | 2016-03-18 19:49:18 | 41.77.136.178 | 0.2.6.10 | 443 | 80 | heidemann |
| C7AE7642E9F9BE4E3CDD117C123CB18A9DFA7FD5 | 1 | 1070 | 2016-03-18 19:49:55 | 146.0.74.160 | 0.2.6.10 | 443 | 80 | mazzone |
| 513C8E36869C5D32B80FC7E5F4DF8102698CD862 | 1 | 31 | 2016-03-18 19:50:32 | 188.42.253.7 | 0.2.6.10 | 443 | 80 | oginome |
|
+---------+---------------------+---------------------+-------+-----------------+----------+----------------------+-------------+---------+----------+----------+------------------------------+
| running | first_seen | last_restarted | cw | IP | FP | as_name | tor_version | or_port | dir_port | nickname | exit_policy_summary |
+---------+---------------------+---------------------+-------+-----------------+----------+----------------------+-------------+---------+----------+----------+------------------------------+
| 0 | 2016-04-28 04:00:00 | 2016-04-28 03:36:27 | 1380 | 163.44.113.107 | D4B08432 | GMO Internet,Inc | 0.2.7.6 | 9011 | 9040 | Unnamed | {u'accept': [u'80', u'443']} |
| 0 | 2016-04-28 04:00:00 | 2016-04-28 03:36:27 | 1340 | 163.44.113.107 | 018B453C | GMO Internet,Inc | 0.2.7.6 | 9001 | 9030 | Unnamed | {u'accept': [u'80', u'443']} |
| 0 | 2016-04-28 04:00:00 | 2016-04-28 03:21:44 | 13
+------+---------------------+-------+-----------------+-------------------------------------+----------+---------+-------+------+-------+----------+
| up | first_seen | cw | IP | AS | FP8 | country | hsdir | Ext | guard | measured |
+------+---------------------+-------+-----------------+-------------------------------------+----------+---------+-------+------+-------+----------+
| 1 | 2016-06-22 17:00:00 | 12200 | 139.162.141.102 | AS63949 Linode, LLC | 95C66445 | de | 1 | 0 | 0 | 1 |
| 1 | 2016-06-23 04:00:00 | 1310 | 74.207.230.38 | AS17025 Abovenet Communications, In | B25313DA | us | 1 | 0 | 0 | 1 |
| 1 | 2016-06-23 04:00:00 | 867 | 173.230.142.174 | AS17025 Abovenet Communications, In | 3D87EEF4 | us | 1 | 0 | 0 | 1 |
| 1 | 2016-06-23 05:00:00 | 1140 | 72.14.182.98 | AS36351 SoftLayer Technologies Inc. | 1FDC356E | us | 0 |
@nusenu
nusenu / resolverAS_FP.maxmind.txt
Created July 28, 2016 17:36
based on phw's pcap 2016-05-15-09:46:17-0600-tor-dns-requests-clean.pcap
AS10143 Exetel Pty Ltd 910ADC04E1AA773E7BB059EBB647CCFB50FF506C
AS1102 SMEERBOEL BV 10FDA609624925659622F89107C8494B6033A7FA
AS1103 SURFnet, The Netherlands 6DFEB41C04CCE846871338E85DD5ACF5CFB6C1DD
AS1103 SURFnet, The Netherlands 844AE9CAD04325E955E2BE1521563B79FE7094B7
AS1103 SURFnet, The Netherlands B204DE75B37064EF6A4C6BAF955C5724578D0B32
AS1103 SURFnet, The Netherlands D665C959571041972EA8C0DD77559EF5579BA112
AS111 Boston University 94C4B7B8C50C86A92B6A20107539EE2678CF9A28
AS11594 APUA 9A5542C88524A4DF13AD8A944A068D738888CCC5
AS11878 tzulo, inc. FC7543F28780DEF9CF71D60BEB00ADF6CF3C75EC
AS1205 University Linz 01A9258A46E97FF8B2CAC7910577862C14F2C524
+------+--------------------------------------------------------------------------------------------------------+-------------------+-----------------------------------------------------------------+
| FP | contact | tor_version | as_name |
+------+--------------------------------------------------------------------------------------------------------+-------------------+-----------------------------------------------------------------+
| C793 | 0x02225522 Frenn vun der Enn (FVDE) <info AT enn DOT lu> | 0.2.9.9 | BENESTRA, s.r.o. |
| B84F | 0x02225522 Frenn vun der Enn (FVDE) <info AT enn DOT lu> | 0.2.9.9 | BENESTRA, s.r.o. |
| DAB9 | 0x02225522 Fren
@nusenu
nusenu / show-expiredate.py
Created February 24, 2017 20:41
given a list of datadir folders this short script will print the foldername followed by the timestamp the key in that folder will expire
#!/usr/bin/python
import time
import sys
files = sys.argv[1:]
for fi in files:
f = open(fi+'/keys/ed25519_signing_cert', 'rb')
x = f.read()