Skip to content

Instantly share code, notes, and snippets.

View ziozzang's full-sized avatar

Jioh L. Jung ziozzang

View GitHub Profile
@ziozzang
ziozzang / get-letsencrypt-wildcard-cert.sh
Created May 5, 2018 06:29
This docs show how to issuing wildcard cert(by Let's Encrypt) with docker.
EMAIL="foo@barcom"
DOMAINS="example.com"
###################################################################
# Renewing
docker run \
-it --rm \
-v /opt/letsencrypt/:/etc/letsencrypt/ \
-v /opt/letsencrypt/logs/:/var/log/letsencrypt/ \
@ziozzang
ziozzang / get-letsencrypt-wildcard-cert.sh
Last active May 8, 2018 02:16
This docs show how to issuing wildcard cert(by Let's Encrypt) with docker and DNS challenge. no need to install any software.
EMAIL="foo@barcom"
DOMAINS="example.com"
###################################################################
# Renewing
docker run \
-it --rm \
-v /opt/letsencrypt/:/etc/letsencrypt/ \
-v /opt/letsencrypt/logs/:/var/log/letsencrypt/ \
SESSION_PAGE="https://streamza.com/api/sessions/_login"
COOKIE_FILE="wget-cookies.txt"
USERNAME="USERNAME"
PASSWORD="PASSWORD"
FILE_URL="FILE_TO_DOWNLOAD"
if [[ ! -f $COOKIE_FILE ]]; then
@ziozzang
ziozzang / docker-compose.yml
Created March 15, 2018 23:12
Source Graph with Docker-compose
version: '2'
services:
sourcegraph:
image: sourcegraph/server
restart: always
volumes:
- ./config:/etc/sourcegraph
- ./data:/var/opt/sourcegraph
ports:

Basic

  • if you use android tethering, masquerade makes client device's TTL decrease.

    • so Telco can detect what packet is used with tethering.
  • this means that if your kernel doesn't decrease TTL with hop, telco can't detect tethering packet by TTL value.

    • but, there's another way to detect. however, I think that TTL is enough to use. maybe, maybe...

Logic

  • bascially tethering use 'masquerade' and it use 'ip_forward'. and it is linux's net function.
  • and, it count one hop. so ip_forward must obey ip specification. this means that decrease ttl with passing hop.
@ziozzang
ziozzang / README.md
Last active January 28, 2019 23:42
DNS server with whitelist/blacklist.

TL;DR

  • DNSP is very simple and useful tool to setup whitelisted or blacklisted dns proxy server.
  • if you want to use with dockered image, this script will be a good starting point.

Author

@ziozzang
ziozzang / smtp_test.sh
Last active January 29, 2019 06:38
Simple SMTP test with shell script(bash)
#!/bin/bash
EMAIL_BODY="Test from telnet - $(LANG=c date)"
EMAIL_SUBJECT="Telnet test - $(LANG=c date)"
SMTP_SERVER="smtp.some.server"
SMTP_PORT="25"
MAIL_TO="asdf@foo.com"
MAIL_FROM="asdf@bar.com"
echo ">> ${my_email_subject}"
@ziozzang
ziozzang / README.md
Last active February 11, 2019 01:44
안드로이드 테더링에 대한 리서치
 Below are commands that Android talking to netd to start/stop tethering.

1. Start tethering
"softap fwreload wlan0 AP"
"softap start wlan0"
"softap set wlan0 wl0.1 hotspot456 open null 6 0 8"
@ziozzang
ziozzang / huawei-e5885-backup.md
Last active February 11, 2019 02:18 — forked from ValdikSS/huawei-e5885-backup.md
How to backup current firmware on Huawei E5885

Huawei E5885 current firmware backup manual.

  1. Download modified usbloader, which will copy proper busybox into /system/busybox and enable telnetd on your device (will add additional line into /system/autorun.sh). Use it only on E5885, not on other device!
  2. Load it using balong-usbdload. Refer to this disassembling manual.
  3. After loading, wait about one minute, disconnect device from the computer and power off the device holding power button for ~15 seconds.
  4. Insert MicroSD card to the device and power it on.
  5. telnet 192.168.8.1 2323
/system/busybox sh
@ziozzang
ziozzang / SNIProxy.Test.Result.md
Created February 17, 2019 23:59
Korean SNI Censorship avoid Testing with https://github.com/ziozzang/SimpleSNIProxy

Notice

  • This code is over 4years. and works well in recent blocking issue. :)
  • This is for testing only. about techincal issue.
  • I masked URL from result. :)

TL;DR

  • Testing Result via Simple SNI Proxy Server by me.
  • This server is not intended to by-pass SNI censorship in korea. as you see, this code is 4 years old.