webframp

• There is debate around whether Kyber-512 provides adequate security compared to the AES-128 benchmark. NIST claims it meets this level factoring in memory access costs, but others argue the analysis is uncertain.

• NIST's analysis added 40 bits of estimated security to Kyber-512's post-quantum security level due to memory costs, bringing it above the AES-128 threshold. Critics question this calculation.

• NTRU provides greater flexibility than Kyber in supporting a wider range of security levels. At some levels it also has better performance and security than Kyber options.

• The security of lattice-based cryptosystems like Kyber and NTRU is not fully understood, and there is a risk of better attacks being discovered in the future.

• Standardizing a system like Kyber-512 that may have limited security margin could be reckless given lattice cryptanalysis uncertainties.

webframp

{
  description = "some nix based tooling";

  inputs = {
    # Default to nixpkgs unstable channel - ensure we have access to latest tools
    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";

    # Pure Nix flake utility functions, can simplify some tasks
    flake-utils.url = "github:numtide/flake-utils";
  };

webframp

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

webframp

{ config, lib, pkgs, ... }:

{
  # Enable User Setup
  # https://rycee.gitlab.io/home-manager/index.html#sec-install-nix-darwin-module
  imports = [ <home-manager/nix-darwin> ];
  home-manager.useGlobalPkgs = true;

  networking.hostName = "megatron";

webframp

{ config, lib, pkgs, ... }:

{
  # Enable User Setup
  # https://rycee.gitlab.io/home-manager/index.html#sec-install-nix-darwin-module
  imports = [ <home-manager/nix-darwin> ];
  home-manager.useGlobalPkgs = true;

  # System settings
  # Explained: https://gist.github.com/MatthewEppelsheimer/2269385

webframp

Reset root/admin password

Lost the root/admin password? You can reset it using the command-line. Recipe adapted from gitlab issue #308.

# start the console
sudo gitlab-rails console

webframp

CVE-2019-19781 Response steps - Have I been compromised?

Critical Exposure in Citrix ADC (NetScaler) – Unauthenticated Remote Code Execution

Credit: Suggested steps taken from twitter post by @darkQuassar

Just converted to copy/pastable gist for easy access

Check the root user command history

webframp

;;; ~/.doom.d/config.el -*- lexical-binding: t; -*-

;; To modify or add binding for existing modules use add-hook! or after! macros
;; https://github.com/hlissner/doom-emacs/wiki/Customization#reconfigure-packages

;; HOTFIX for Emacs 26.1 and gnutls 3.6 - no longer needed?
;; https://www.reddit.com/r/emacs/comments/cdf48c/failed_to_download_gnu_archive/
;; (setq gnutls-algorithm-priority "NORMAL:-VERS-TLS1.3")

;;; UI

webframp

Title

Subheading

a url A site was established by CNAME record domain DNS.

A list of long items

• Create: a really long command line tool example that goes to far past the 80 character limit

webframp

import os
import re


def zsh_to_fish(cmd):
    return (cmd.replace('&&', '; and ')
               .replace('||', '; or '))


def is_valid_fish(cmd):