Tian Xie shinvdu

## README.md

      
              2 files
            
          
              337 forks
            
          
              68 comments
            
          
              1183 stars
            
          
                oodavid
                / README.md
            
            
              Last active
              April 6, 2024 18:45
                — forked from aronwoost/README.md
            
              
                Deploy your site with git
              
          
    Deploy your site with git

This gist assumes:

you have a local git repo
with an online remote repository (github / bitbucket etc)
and a cloud server (Rackspace cloud / Amazon EC2 etc)

your (PHP) scripts are served from /var/www/html/
your webpages are executed by apache


apache's home directory is /var/www/


## Naive-VPN.md

      
              1 file
            
          
              73 forks
            
          
              12 comments
            
          
              226 stars
            
          
                klzgrad
                / Naive-VPN.md
            
            
              Created
              November 17, 2014 00:43
            
              
                朴素VPN：一个纯内核级静态隧道
              
          
    朴素VPN：一个纯内核级静态隧道

由于路由管控系统的建立，实时动态黑洞路由已成为最有效的封锁手段，TCP连接重置和DNS污染成为次要手段，利用漏洞的穿墙方法已不再具有普遍意义。对此应对方法是多样化协议的VPN来抵抗识别。这里介绍一种太简单、有时很朴素的“穷人VPN”。
朴素VPN只需要一次内核配置（Linux内核），即可永久稳定运行，不需要任何用户态守护进程。所有流量转换和加密全部由内核完成，原生性能，开销几乎没有。静态配置，避免动态握手和参数协商产生指纹特征导致被识别。并且支持NAT，移动的内网用户可以使用此方法。支持广泛，基于L2TPv3标准，Linux内核3.2+都有支持，其他操作系统原则上也能支持。但有两个局限：需要root权限；一个隧道只支持一个用户。
朴素VPN利用UDP封装的静态L2TP隧道实现VPN，内核XFRM实现静态IPsec。实际上IP-in-IP隧道即可实现VPN，但是这种协议无法穿越NAT，因此必须利用UDP封装。内核3.18将支持Foo-over-UDP，在UDP里面直接封装IP，与静态的L2TP-over-UDP很类似。
创建一个朴素VPN


## tun-ping-linux.py
import fcntl
import os
import struct
import subprocess


# Some constants used to ioctl the device file. I got them by a simple C
# program.
TUNSETIFF = 0x400454ca
TUNSETOWNER = TUNSETIFF + 2

## nginx.conf
# This is example contains the bare mininum to get nginx going with
# Unicorn or Rainbows! servers.  Generally these configuration settings
# are applicable to other HTTP application servers (and not just Ruby
# ones), so if you have one working well for proxying another app
# server, feel free to continue using it.
#
# The only setting we feel strongly about is the fail_timeout=0
# directive in the "upstream" block.  max_fails=0 also has the same
# effect as fail_timeout=0 for current versions of nginx and may be
# used in its place.

## gist:11203573

      
              1 file
            
          
              21 forks
            
          
              2 comments
            
          
              60 stars
            
          
                allex
                / gist:11203573
            
            
              Last active
              December 5, 2023 07:27
            
              
                Ubuntu 安装中文字体
              
          
    环境 (Environment)

版本：Ubuntu 14.04 LTS
默认语言：English(United States)
安装 (Setup)

Debian 和 Ubuntu 下对中文支持比较好的字体有： fonts-droid、ttf-wqy-zenhei 和 ttf-wqy-microhei 等，除了文泉驿系列字体外，比较流行的免费中文字体还有文鼎提供的楷体和上海宋，包名分别是： fonts-arphic-ukai 和 fonts-arphic-uming。

  
## uri.js
var parser = document.createElement('a');
parser.href = "http://example.com:3000/pathname/?search=test#hash";

parser.protocol; // => "http:"
parser.hostname; // => "example.com"
parser.port;     // => "3000"
parser.pathname; // => "/pathname/"
parser.search;   // => "?search=test"
parser.hash;     // => "#hash"
parser.host;     // => "example.com:3000"

## OpenVPN-2.2.2-obfs.patch
--- openvpn-2.2.2.orig/options.c 2011-12-14 00:58:56.000000000 +0800
+++ openvpn-2.2.2/options.c	2012-12-21 10:44:57.683130505 +0800
@@ -54,6 +54,10 @@

 #include "memdbg.h"

+extern char* _socket_obfs_salt;
+extern int _socket_obfs_salt_len;
+extern int _socket_obfs_padlen;
+

## somehost.conf
upstream your-app {
  # fail_timeout=0 means we always retry an upstream even if it failed
  # to return a good HTTP response (in case the Unicorn master nukes a
  # single worker for timing out).
  server unix:/tmp/your_app.socket fail_timeout=0;
}

server {
  listen       80;

## gist:1381374
目前网上有不少的实现QQ机器人的方法，都不太稳定甚至都已经失效了，而且我们还要冒着QQ号被盗用的风险。其实我们可以自己实现一个QQ自动应答的机器人，思路非常简单：通过模拟登录3G版QQ，来实现相关的操作：

    一、首先我们得看看3GQQ的相关协议
    为此，我们需要一个支持WAP的浏览器，可以使用Firefox的wmlbrowser插件，打开FF后，访问地址：https://addons.mozilla.org/zh-CN/firefox/search/?q=wmlbrowser&cat=all&x=17&y=11

    二、进入3GQQ的进行协议分析
    3GQQ的地址是：http://pt.3g.qq.com/s?aid=nLogin3gqq 用安装了wmlbrowser插件的FF打开页面后，启用firebug，即可监视提交的数据。


    三、源代码

## websock.sh
#!/bin/bash
# WebSocket shell, start & browse to http://<Host>:6655/
# Requires bash 4.x, openssl.
# Author: rootshell@corelogics.de (which isn't me, apk)
coproc d { nc -l -p 6656 -q 0; }
nc -l -p 6655 -q 1 > /dev/null <<-ENDOFPAGE
	HTTP/1.1 200 OK

	<html><head><script language="javascript">
	  var url = location.hostname + ':' + (parseInt(location.port) + 1);
	import fcntl
	import os
	import struct
	import subprocess


	# Some constants used to ioctl the device file. I got them by a simple C
	# program.
	TUNSETIFF = 0x400454ca
	TUNSETOWNER = TUNSETIFF + 2
	# This is example contains the bare mininum to get nginx going with
	# Unicorn or Rainbows! servers. Generally these configuration settings
	# are applicable to other HTTP application servers (and not just Ruby
	# ones), so if you have one working well for proxying another app
	# server, feel free to continue using it.
	#
	# The only setting we feel strongly about is the fail_timeout=0
	# directive in the "upstream" block. max_fails=0 also has the same
	# effect as fail_timeout=0 for current versions of nginx and may be
	# used in its place.
	var parser = document.createElement('a');
	parser.href = "http://example.com:3000/pathname/?search=test#hash";

	parser.protocol; // => "http:"
	parser.hostname; // => "example.com"
	parser.port; // => "3000"
	parser.pathname; // => "/pathname/"
	parser.search; // => "?search=test"
	parser.hash; // => "#hash"
	parser.host; // => "example.com:3000"
	--- openvpn-2.2.2.orig/options.c 2011-12-14 00:58:56.000000000 +0800
	+++ openvpn-2.2.2/options.c 2012-12-21 10:44:57.683130505 +0800
	@@ -54,6 +54,10 @@

	#include "memdbg.h"

	+extern char* _socket_obfs_salt;
	+extern int _socket_obfs_salt_len;
	+extern int _socket_obfs_padlen;
	+
	upstream your-app {
	# fail_timeout=0 means we always retry an upstream even if it failed
	# to return a good HTTP response (in case the Unicorn master nukes a
	# single worker for timing out).
	server unix:/tmp/your_app.socket fail_timeout=0;
	}

	server {
	listen 80;
	目前网上有不少的实现QQ机器人的方法，都不太稳定甚至都已经失效了，而且我们还要冒着QQ号被盗用的风险。其实我们可以自己实现一个QQ自动应答的机器人，思路非常简单：通过模拟登录3G版QQ，来实现相关的操作：

	一、首先我们得看看3GQQ的相关协议
	为此，我们需要一个支持WAP的浏览器，可以使用Firefox的wmlbrowser插件，打开FF后，访问地址：https://addons.mozilla.org/zh-CN/firefox/search/?q=wmlbrowser&cat=all&x=17&y=11

	二、进入3GQQ的进行协议分析
	3GQQ的地址是：http://pt.3g.qq.com/s?aid=nLogin3gqq 用安装了wmlbrowser插件的FF打开页面后，启用firebug，即可监视提交的数据。


	三、源代码
	#!/bin/bash
	# WebSocket shell, start & browse to http://<Host>:6655/
	# Requires bash 4.x, openssl.
	# Author: rootshell@corelogics.de (which isn't me, apk)
	coproc d { nc -l -p 6656 -q 0; }
	nc -l -p 6655 -q 1 > /dev/null <<-ENDOFPAGE
	HTTP/1.1 200 OK

	<html><head><script language="javascript">
	var url = location.hostname + ':' + (parseInt(location.port) + 1);