Ofer Chen oferchen

## final_code_eBPF_dns.py
#!/usr/bin/env python3

from struct import unpack
from bcc import BPF
from socket import if_indextoname


C_BPF_KPROBE = """
#include <net/sock.h>

## ubuntu-MBP-16.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                oferchen
                / ubuntu-MBP-16.md
            
            
              Created
              February 5, 2022 13:08
                — forked from gbrow004/ubuntu-MBP-16.md
            
              
                Ubuntu on Apple Macbook Pro 16-inch (2019)
              
          
    Update!

This gist is out of date and I can no longer help much, as I got rid of my Mac.
Acknowledgements

This gist is just a compilation of the hard work that others have put in. I'm not a software developer, so if there are any mistakes or better ways of doing things, I'd appreciate any suggestions. Here's a list of the real heroes who made this possible:
Kernel Patches: aunali
(https://github.com/aunali1/)
T2 security chip bypass to allow access to the SSD, keyboard, and trackpad: MCMrARM

  
## puller.py
#!/usr/bin/env python

import getopt
import sys
from sqlalchemy import create_engine, MetaData, Table
from sqlalchemy.dialects.mysql.base import TINYINT
from sqlalchemy.orm import sessionmaker
from sqlalchemy.ext.declarative import declarative_base
from sqlalchemy.exc import ProgrammingError

## config_dict.py
''' Dumps a config file of the type readable by ConfigParser
into a dictionary
Ref: http://docs.python.org/library/configparser.html
'''

import sys
import ConfigParser

class GetDict:


## detect_inode_moves.py
#!/usr/bin/env python
# -*- coding: utf-8 -*-

'''Detects renamed and/or moved files by tracking inodes.

Creates a shell script to replay similar changes.  Make sure to use relative
paths if you want to replay changes in a different absolute location. Does not
follow symbolic links. Inode numbers must be identical (do not cross
filesystems)!
'''

## detect_inode_moves.py
#!/usr/bin/env python
# -*- coding: utf-8 -*-

'''Detects renamed and/or moved files by tracking inodes.

Creates a shell script to replay similar changes.  Make sure to use relative
paths if you want to replay changes in a different absolute location. Does not
follow symbolic links. Inode numbers must be identical (do not cross
filesystems)!
'''

## detect_inode_moves.py
#!/usr/bin/env python
# -*- coding: utf-8 -*-

'''Detects renamed and/or moved files by tracking inodes.

Creates a shell script to replay similar changes.  Make sure to use relative
paths if you want to replay changes in a different absolute location. Does not
follow symbolic links. Inode numbers must be identical (do not cross
filesystems)!
'''

## tiny_IRremote.cpp
/*
 * tiny_IRremote
 * Version 0.2 July, 2016
 * Christian D'Abrera
 * Fixed what was originally rather broken code from http://www.gammon.com.au/Arduino/
 * ...itself based on work by Ken Shirriff.
 *
 * This code was tested for both sending and receiving IR on an ATtiny85 DIP-8 chip.
 * IMPORTANT: IRsend only works from PB4 ("pin 4" according to Arduino). You will need to
 * determine which physical pin this corresponds to for your chip, and connect your transmitter
	#!/usr/bin/env python3

	from struct import unpack
	from bcc import BPF
	from socket import if_indextoname


	C_BPF_KPROBE = """
	#include <net/sock.h>
	#!/usr/bin/env python

	import getopt
	import sys
	from sqlalchemy import create_engine, MetaData, Table
	from sqlalchemy.dialects.mysql.base import TINYINT
	from sqlalchemy.orm import sessionmaker
	from sqlalchemy.ext.declarative import declarative_base
	from sqlalchemy.exc import ProgrammingError
	''' Dumps a config file of the type readable by ConfigParser
	into a dictionary
	Ref: http://docs.python.org/library/configparser.html
	'''

	import sys
	import ConfigParser

	class GetDict:
	#!/usr/bin/env python
	# -- coding: utf-8 --

	'''Detects renamed and/or moved files by tracking inodes.

	Creates a shell script to replay similar changes. Make sure to use relative
	paths if you want to replay changes in a different absolute location. Does not
	follow symbolic links. Inode numbers must be identical (do not cross
	filesystems)!
	'''
	/*
	* tiny_IRremote
	* Version 0.2 July, 2016
	* Christian D'Abrera
	* Fixed what was originally rather broken code from http://www.gammon.com.au/Arduino/
	* ...itself based on work by Ken Shirriff.
	*
	* This code was tested for both sending and receiving IR on an ATtiny85 DIP-8 chip.
	* IMPORTANT: IRsend only works from PB4 ("pin 4" according to Arduino). You will need to
	* determine which physical pin this corresponds to for your chip, and connect your transmitter