jpmens

# arpaname.py, (C)2022 by Jan-Piet Mens <jp@mens.de>
# Convert an IPv4 or IPv6 address in textual form into a string whose value is
# the reverse-map domain name of the address.
#
#     - debug: msg="{{ "192.168.1.3" | arpaname }}"
#           "3.1.168.192.in-addr.arpa."
#
#     - debug: msg="{{ "2001:DB8::7" | arpaname }}"
#           "7.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa."

LAripping

Security BSides Athens 2022 - OSINT Challenge Writeup

Intro

The OSINT challenge was released during the live-stream of the Security BSides Athens 2022 event, as part of the talk "Baby, Don't Forget My Number: OSINT using your phone's address book" [^1].

The description was simple, a simple trick discussed in the talk should be used to uncover as much information as possible from social media and instant messaging services for a given "target", for whom we only know the phone number: +30 694 942 2024. When enough information would be revealed, the challenge's goal -cryptically described as "the three wills"- would make sense. All of this was summarised in the slide below:

Note that a short video of this challenge description was played right after the talk and has also been uploaded on YouTube [^2]

pojntfx

# Create and start the VM
qemu-img create -f qcow2 disk.qcow2 64G
qemu-system-x86_64 -enable-kvm -m 4096 -smp $(nproc) -cpu host -device ac97 -audiodev alsa,id=snd0,out.buffer-length=500000,out.period-length=726 -usb -device usb-tablet -device virtio-keyboard-pci -net nic -net user -vga virtio -display spice-app,gl=on -drive file=disk.qcow2,index=0,media=disk -drive file=distro.img,index=1,media=disk -bios /usr/share/edk2/ovmf/OVMF_CODE.fd

# Upgrade the system
syspatch
reboot
pkg_add -u

# Enable doas

pojntfx

Boot Linux or OpenBSD on the PowerBook G4 (PowerPC/ppc32)

Creating the USB sticks

Use an older USB 2.0 stick, newer ones will most certainly not work.

sudo dd if=debian-11.0.0-powerpc-NETINST-1.iso of=/dev/sda1 status=progress # Or use GNOME Disks, Etcher etc.
sync

0xmachos

• Sarah Edwards (@iamevltwin)

  • mac4n6.com
  • SANS FOR518: Mac and iOS Forensic Analysis and Incident Response
  • Apple Pattern of Life Lazy Output'er

• Unified Log

  • Howard Oakley @howardnoakley
    • Unified log: 1 why, what and how
    • Unified log: 2 content and extraction

• Unified log: 3 finding your way

kovetskiy

#!/bin/bash
###
### my-script — does one thing well
###
### Usage:
###   my-script <input> <output>
###
### Options:
###   <input>   Input file to read.
###   <output>  Output file to write. Use '-' for stdout.

alexanderilyin

For example your latest image with semantic versioning looks like this:

${DOCKER_HUB_ORG}/${DOCKER_HUB_REPO}:v1.20.0

Example provided above will do the folowing:

1. Generate token using your github username and password.
2. Get list of all tags from repository.

bmarston

<?php
class InitialDbMigrationCommand extends CConsoleCommand
{

    public function run($args) {
        $schema = $args[0];
        $tables = Yii::app()->db->schema->getTables($schema);

        $addForeignKeys = '';
        $dropForeignKeys = '';

shimondoodkin

/**
 * Module dependencies.
 */
var io = require('socket.io')
  , sio, sio_client_on
  , express = require('express')
  , MemoryStore = express.session.MemoryStore
  , routes = require('./routes')
  , sessionStore = new MemoryStore();