Skip to content

Instantly share code, notes, and snippets.

@shoeper
shoeper / vulnerabilities.txt
Created August 5, 2019 13:11
Vulnerabilities in docker.seadrive.org/seafileltd/seafile-pro:latest scanned with Clair Scanner
2019/08/05 10:43:15 [WARN] ▶ Image [docker.seadrive.org/seafileltd/seafile-pro:latest] contains 325 total vulnerabilities
2019/08/05 10:43:15 [ERRO] ▶ Image [docker.seadrive.org/seafileltd/seafile-pro:latest] contains 325 unapproved vulnerabilities
+------------+-----------------------------+---------------------+-------------------------------+------------------------------------------------------------------+
| STATUS | CVE SEVERITY | PACKAGE NAME | PACKAGE VERSION | CVE DESCRIPTION |
+------------+-----------------------------+---------------------+-------------------------------+------------------------------------------------------------------+
| Unapproved | High CVE-2018-16865 | systemd | 237-3ubuntu10.3 | An allocation of memory without limits, that could result |
| | | | | in the stack
@shoeper
shoeper / vpn.md
Created December 4, 2019 15:55 — forked from joepie91/vpn.md
Don't use VPN services.

Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.

Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.

A Russian translation of this article can be found here, contributed by Timur Demin. There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.

Why not?

@shoeper
shoeper / diceware10-openthesaurus.sh
Created November 23, 2020 19:24 — forked from buchnema/diceware10-openthesaurus.sh
Creating German diceware wordlist from Open Thesaurus for ten-sided dice
#!/bin/bash
: <<'COMMENT'
This script takes the dataset from the Open Thesaurus project and
transforms it to a wordlist comparable to the original diceware list.
I thought the original list contains too much lines which just don't
make any sense and/or are hard to memorize. So my goal was to
automatically generate a list containing only memorable words, which
can then be used to add your own special characters or variations.
@shoeper
shoeper / diceware6-openthesaurus.sh
Created November 23, 2020 19:27 — forked from buchnema/diceware6-openthesaurus.sh
Creating German diceware wordlist from Open Thesaurus for six-sided dice
#!/bin/bash
: <<'COMMENT'
This script takes the dataset from the Open Thesaurus project and
transforms it to a wordlist comparable to the original diceware list.
I thought the original list contains too much lines which just don't
make any sense and/or are hard to memorize. So my goal was to
automatically generate a list containing only memorable words, which
can then be used to add your own special characters or variations.
@shoeper
shoeper / fix-windows-search-permissions.md
Last active November 26, 2020 22:06
Fix Windows Search permissions

Run cmd.exe as Administrator and execute the following command:

When your search doesn't work and Windows troubleshooting says the permissions are wrong, but cannot fix it, run the following command to fix the permissions and your search probably works, again (immediately).

takeown.exe /R /F C:\ProgramData\Microsoft\Search\

if it still doesn't work run

takeown.exe /R /F C:\ProgramData\Microsoft\
@shoeper
shoeper / fuzzing-bgpd-afl.md
Created May 3, 2021 20:39 — forked from qlyoung/fuzzing-bgpd-afl.md
fuzzing frr bgpd with afl

You Will Need

  • A local copy of AFL with Doug Birdwell's networking patch
  • A binary dump of a BGP OPEN packet
  • Latest copy of Free Range Routing
  • Patience

Acquiring Resources

A local copy of AFL with Doug Birdwell's networking patch

#!/bin/bash
echo -n Password:
read -s password
echo
hash="$(echo -n $password | openssl sha1)"
upperCase="$(echo $hash | tr '[a-z]' '[A-Z]')"
prefix="${upperCase:0:5}"
response=$(curl -s https://api.pwnedpasswords.com/range/$prefix)
while read -r line; do
@shoeper
shoeper / clean_pdf.sh
Created January 26, 2022 10:13 — forked from sneakers-the-rat/clean_pdf.sh
Strip PDF Metadata
# --------------------------------------------------------------------
# Recursively find pdfs from the directory given as the first argument,
# otherwise search the current directory.
# Use exiftool and qpdf (both must be installed and locatable on $PATH)
# to strip all top-level metadata from PDFs.
#
# Note - This only removes file-level metadata, not any metadata
# in embedded images, etc.
#
# Code is provided as-is, I take no responsibility for its use,
@shoeper
shoeper / README.md
Last active March 21, 2022 13:08 — forked from felipemeamaral/README.md
GNUStep

Objective-C on Linux

Just run: -> doesn't work (anymore)

apt-get update && apt-get install wget vim -y && wget -O - https://gist.github.com/shoeper/8be35cf2b7c4bdf9ae423b260f43ab3d/raw/install.sh | bash -
@shoeper
shoeper / README.md
Created March 22, 2022 20:25 — forked from Nosskirneh/README.md
Logging without syslog – Tweak development

The iOS syslog was removed in iOS 13.3. Prior to that, you could still view the deprecated syslog if you compiled your tweaks using an iOS 9 or lower SDK. Apple introduced oslog in iOS 10.

  1. Clone https://github.com/theos/theos/ to $THEOS/sdks.
  2. Change $THEOS/vendor/logos/bin/lib/Logos/Generator/Base/Method.pm:73 from HBLogDebug(... or NSLog(..., depending on theos version, to log(... .
  3. Add the following to $THEOS/include/HBLog.h:
    • #define log(...) HBLogWarn(@"<NOSS>: %@", [NSString stringWithFormat:__VA_ARGS__]); on line 19, ie if you're running os_log / iOS 10+ SDK.

    • #define log(...) HBLogDebug(__VA_ARGS__); on line 41, ie when not running an iOS 10+ SDK.

  4. On your iDevice, add alias debug="oslog | awk 'f; /\)/{f=0} /:/{print; f=/\(/}'" to /etc/profile.d/profile.sh and source it afterwards. You may need to create the file if you haven't already.