Dmitriy Polyakov pessom

## about.txt
Okay so here's the setup:

[-] The primary server API is exposed via Flask (Python) and all static files, including all html, css, js is served by nginx.
[-] Python is exposing an API at url http://domain.com/api/download/<file_id>, where file_id is a database id for the file that we're interested in downloading.

1. User wants to download a file, so we spawn a new window with the url '/api/download/<file_id>'
2. Nginx intercepts the request, sees that it starts with /api/, and then forwards the request to Flask, which is being served on port 5000.
3. Flask routes the request to its download method, retrieves the pertinent data from the file_id, and constructs additional header settings to make nginx happy and to force the browser to see the file stream as a download request instead of the browser just trying to open the file in a new window. Flask then returns the modified header stream to nginx
4. Nginx is finally ready to do some work. While parsing the headers for the incoming request, it encounters "X

## lxml example
# coding: utf8

xml = '''<?xml version="1.0" encoding="UTF-8"?>
<soft>
    <os>
        <item name="linux" dist="ubuntu">
            This text about linux
        </item>
        <item name="mac os">
            Apple company

## pedantically_commented_playbook.yml
This playbook has been removed as it is now very outdated.

## Documentation.md

      
              2 files
            
          
              170 forks
            
          
              81 comments
            
          
              960 stars
            
          
                KartikTalwar
                / Documentation.md
            
            
              Last active
              June 25, 2024 10:55
            
              
                Rsync over SSH - (40MB/s over 1GB NICs)
              
          
    The fastest remote directory rsync over ssh archival I can muster (40MB/s over 1gb NICs)

This creates an archive that does the following:

rsync
(Everyone seems to like -z, but it is much slower for me)

a: archive mode - rescursive, preserves owner, preserves permissions, preserves modification times, preserves group, copies symlinks as symlinks, preserves device files.
H: preserves hard-links
A: preserves ACLs


## check-ssl-expire.py
#!/usr/bin/env python
# -*- coding: utf-8 -*-

__author__ = "Adrien Pujol - http://www.crashdump.fr/"
__copyright__ = "Copyright 2013, Adrien Pujol"
__license__ = "Mozilla Public License"
__version__ = "0.3"
__email__ = "adrien.pujol@crashdump.fr"
__status__ = "Development"
__doc__ = "Check a TLS certificate validity."

## NC-MySQLDUMP.sh
#####
# You'll be needing two machines, the target machine and source one (makes sense, right)?

#####
# On the target machine
nc -l 55555 | gzip -d -c | mysql <database name> -u<user> -p<password> [ | <decrypt> ]

#####
# On the source machine
mysqldump -u<user> -p<password> <database name> | gzip | nc <ip of target server> 55555 [ | <encrypt> ]

## openldap_passwd.py
#!/usr/bin/env python
"""
http://www.openldap.org/faq/data/cache/347.html

As seen working on Ubuntu 12.04 with OpenLDAP 2.4.28-1.1ubuntu4

Author: Roberto Aguilar <roberto@baremetal.io>
"""
import hashlib
import os

## tcp_flags.txt
##TCP FLAGS##

Unskilled Attackers Pester Real Security Folks
==============================================
                     TCPDUMP FLAGS
Unskilled =  URG  =  (Not Displayed in Flag Field, Displayed elsewhere)
Attackers =  ACK  =  (Not Displayed in Flag Field, Displayed elsewhere)
Pester    =  PSH  =  [P] (Push Data)
Real      =  RST  =  [R] (Reset Connection)
Security  =  SYN  =  [S] (Start Connection)

## teamspeak.service
[Unit]
Description=Teamspeak

[Service]
User=teamspeak
Type=oneshot
ExecStart=/home/teamspeak/teamspeak/ts3server_startscript.sh start
ExecStop=/home/teamspeak/teamspeak/ts3server_startscript.sh stop
RemainAfterExit=yes

## onvif_request.py
#!/usr/bin/env python3

import hashlib
import os
import base64
from datetime import datetime

username = "admin"
password = "12345"
# created = datetime.now().strftime("%Y-%m-%dT%H:%M:%S.000Z")
	Okay so here's the setup:

	[-] The primary server API is exposed via Flask (Python) and all static files, including all html, css, js is served by nginx.
	[-] Python is exposing an API at url http://domain.com/api/download/<file_id>, where file_id is a database id for the file that we're interested in downloading.

	1. User wants to download a file, so we spawn a new window with the url '/api/download/<file_id>'
	2. Nginx intercepts the request, sees that it starts with /api/, and then forwards the request to Flask, which is being served on port 5000.
	3. Flask routes the request to its download method, retrieves the pertinent data from the file_id, and constructs additional header settings to make nginx happy and to force the browser to see the file stream as a download request instead of the browser just trying to open the file in a new window. Flask then returns the modified header stream to nginx
	4. Nginx is finally ready to do some work. While parsing the headers for the incoming request, it encounters "X
	# coding: utf8

	xml = '''<?xml version="1.0" encoding="UTF-8"?>
	<soft>
	<os>
	<item name="linux" dist="ubuntu">
	This text about linux
	</item>
	<item name="mac os">
	Apple company
	#!/usr/bin/env python
	# -- coding: utf-8 --

	__author__ = "Adrien Pujol - http://www.crashdump.fr/"
	__copyright__ = "Copyright 2013, Adrien Pujol"
	__license__ = "Mozilla Public License"
	__version__ = "0.3"
	__email__ = "adrien.pujol@crashdump.fr"
	__status__ = "Development"
	__doc__ = "Check a TLS certificate validity."
	#####
	# You'll be needing two machines, the target machine and source one (makes sense, right)?

	#####
	# On the target machine
	nc -l 55555 \| gzip -d -c \| mysql <database name> -u<user> -p<password> [ \| <decrypt> ]

	#####
	# On the source machine
	mysqldump -u<user> -p<password> <database name> \| gzip \| nc <ip of target server> 55555 [ \| <encrypt> ]
	#!/usr/bin/env python
	"""
	http://www.openldap.org/faq/data/cache/347.html

	As seen working on Ubuntu 12.04 with OpenLDAP 2.4.28-1.1ubuntu4

	Author: Roberto Aguilar <roberto@baremetal.io>
	"""
	import hashlib
	import os
	##TCP FLAGS##

	Unskilled Attackers Pester Real Security Folks
	==============================================
	TCPDUMP FLAGS
	Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere)
	Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere)
	Pester = PSH = [P] (Push Data)
	Real = RST = [R] (Reset Connection)
	Security = SYN = [S] (Start Connection)
	[Unit]
	Description=Teamspeak

	[Service]
	User=teamspeak
	Type=oneshot
	ExecStart=/home/teamspeak/teamspeak/ts3server_startscript.sh start
	ExecStop=/home/teamspeak/teamspeak/ts3server_startscript.sh stop
	RemainAfterExit=yes
	#!/usr/bin/env python3

	import hashlib
	import os
	import base64
	from datetime import datetime

	username = "admin"
	password = "12345"
	# created = datetime.now().strftime("%Y-%m-%dT%H:%M:%S.000Z")