Skip to content

Instantly share code, notes, and snippets.

View roycewilliams's full-sized avatar
💭
:cheeeeeese:

Royce Williams roycewilliams

💭
:cheeeeeese:
View GitHub Profile
@osy
osy / tpm-rant.md
Last active April 14, 2024 06:02
TPM provides zero practical security

TPM provides zero practical security

TPM (Trusted Platform Module) is as useful for preventing real attackers as the TSA is at preventing real terrorists. The architecture is fundamentally flawed and most existing implementations are completely broken. I thought this argument was settled decades ago[1] when "trusted computing" was introduced mostly as a way to provide DRM and ownership capabilities to organizations. It has largely failed to impact the consumer market when it was introduced back in the early 2000s. However, recently there seems to be a movement by certain parties to reintroduce this failed product back to the market. Microsoft argues that in order to use Windows 11, you need TPM 2.0 compatible hardware because[2]:

The Trusted Platform Module(TPM) requirement ena

@singe
singe / mirror.sh
Created August 18, 2023 09:18
A quick 'n dirty website mirror script
#!/bin/sh
# A quick 'n dirty website mirror script
# by @singe
# Ideally, wget -r should mirror a site, but modern websites are complex, this
# tries to fix the gaps of what is typically mixed.
# It's been tested on 3 or 4 sites, and likely needs more tricks added.
sourcedomain="$1"
depth="$2"
@atoponce
atoponce / word-lists.md
Last active April 4, 2024 23:58
A list of notable and primarily English word lists that can be used for building passphrases.

Passphrase Word Lists

Introduction

This document outlines a number of different word lists for passphrase generation, encoding of binary data, and other uses. This document is grouped and sorted by the number of unique words in each word list, fewest unique words first.

Licensing Note

Some of these word lists are placed in the public domain, others are copyrighted with various licenses. Please refer to the license of each word

@Chick3nman
Chick3nman / H100_PCIe_v6.2.6.Benchmark
Last active May 17, 2023 23:04
Hashcat v6.2.6 benchmark on the Nvidia H100 PCIe
Nvidia Driver Version: 525.85.12 CUDA Version: 12.0
This is the PCIe variant of the H100, which is limited to 350W TDP and has a more limited clock speed than the SXM5 H100.
Hashcat was built from the github master branch at the time of running. 1 mode failed to benchmark due to a thread count issue.
The H100 PCIe was added to the tuning Alias file for this run.
hashcat (v6.2.6-514-gbf1d7d078) starting in benchmark mode
Benchmarking uses hand-optimized kernel code by default.
@singe
singe / hashcat_maskgen.sh
Created April 17, 2023 11:16
Generate a list of hashcat masks from a wordlist
#!/bin/bash
# hashcat mask generator
# by @singe
infile="$1"
outfile="$1.freq.masks"
outfile2="$1.length.masks"
tmp=$(mktemp)
.log
0
1
1234
12345
123456
18Renmeng
2
ACrenshaw
AGorg
@Chick3nman
Chick3nman / Nintendo_Switch_Tegra_X1_v6.2.6.Benchmark
Created April 11, 2023 18:05
Hashcat v6.2.6 benchmark on a Nintendo Switch Tegra X1
CUDA: 10.0
First generation Nintendo Switch featuring the NVIDIA Tegra X1 running a compatible version of L4T(Linux 4 Tegra).
Credit: Allan from the Hashcat Discord - https://discord.gg/HFS523HGBT
Command: `hashcat -b -O -w 4 --benchmark-all`
hashcat (v6.2.6) starting in benchmark mode
hashcat (v6.2.6) starting in benchmark mode
Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.
* Device #1: WARNING! Kernel exec timeout is not disabled.
This may cause "CL_OUT_OF_RESOURCES" or related errors.
To disable the timeout, see: https://hashcat.net/q/timeoutpatch
@m0rb
m0rb / pbash64.sh
Last active May 5, 2023 05:01
pure bash bash64.sh
#!/bin/bash
B=({A..Z} {a..z} {0..9});p=printf\ ;I=$(B=$@
for((;i<${#B};i++)){ for y in {31..128};{
[[ ${B:i:1} = "$($p\\x`$p%x $y`)" ]]&&(a()((q=y/2,r=y%2));a;o=$r
for((;q;)){ y=$q;a;o=$r$o;};$p%08d $o)} })
for((;e<${#I};e+=6)){ y=${I:e:6}0000;O+=${B[2#${y::6}]};}
for((;${#O}%4;)){ O+=\=;}
$p$O