I was building some jar’s for a Jenkins shared pipeline and trying to validate what files/folders were included in the result. Normally I use the tree command to inspect directories like this, as it makes more visual sense to me. However to view the contents of a zip we have to do something like unzip -l filename.zip which gives us a pretty verbose and difficult to understand result (at least to…
When writing a discord bot, even if only for your own server, you need to use oauth to validate it. I wrote the following script to make it easy on myself, since i’m more than likely to do it again and forget how in the future. Make sure you have bottle , requests and discordpy (the bot framework i was writing in) runt hen simply browse to http://localhost:8080 Note that this requests…
Basic guidelines to setup acme.sh with your dnsapi $ ./acme.sh --install --home /config/auth/.acme.sh --config-home # see https://github.com/acmesh-official/acme.sh/wiki/dnsapi $ ./acme.sh --issue --dns ... your dns here ... -d router.your.domain $ sudo chown root.root /config/auth/.acme.sh/router.your.domain/ * $ cat /config/auth/.acme.sh/router.your.domain/router.your.domain.key >>…
Many security features in Java rely on endpoint pattern matching which allow for URL pattern matching bypasses if not careful. Additionally Spring MVC and Spring Security together introduces are a few gotcha’s during implementation. Security Constraint Matching The most basic form of authentication within Java is using the <security-constraint/> tag. The following is an example constraint…
If you want to compile a shared library for iOS, particularly for Mobile Substrate, here are some easy enough steps to do it all via CLI. Setup You need Theos installed, normally into /opt/theos. Follow the getting started guide http://iphonedevwiki.net/index.php/Theos/Getting_Started Then create a new Theo project. The following is named SampleCrack user@myhost> $THEOS/bin/nic.pl NIC 2.0 - New…
Summary These are the steps needed to crack (method patch the jailbreak function) an iOS application to work on a rooted iOS device. This example uses “Sample.app” from within OSX Lion. Mileage may vary. Requirements iOS Physical device rooted with cydia and some basic tools: syslogd - See all console output in /var/log/ openssh adv-cmds - Tools like ps, kill, etc GNU debugger - (If GDB is working…
Put this python file in your path to get the following: #!/usr/bin/env python """ Command-line tool to validate and pretty-print XML. Based on `pjson` but without the crap. Usage:: $ echo ' <bunk atr= " hello " >world</bunk> ' | pxml <?xml version= " 1.0 " ?> <bunk atr= " hello " > world </bunk> Original Author: Igor Guerrero <igfgt1@gmail.com>, 2012 Contributor: Matthew Gill, 2012 """ import…
This was one of my favorite challenges at this year’s CTF. Thanks to the guys who put it on, it was a load of fun and I appreciate all the hard work I know that goes into this sort of thing. The Challenge Posted on one of the websites was the file fu2.zip contained the following files: zoidberg% unzip fu2.zip -d ./fu2 zoidberg% cd fu2 zoidberg% file ./ * ./BouncyCastle.Crypto.dll: PE32 executable…