Snehan Kekre snehankekre

YubiKey 4 series GPG and SSH setup guide

Written for fairly adept technical users, preferably of Debian GNU/Linux, not for absolute beginners.

You'll probably be working with a single smartcard, so you'll want only one primary key (1. Sign & Certify) and two associated subkeys (2. Encrypt, 3. Authenticate). I've published a Bash function which automates this slightly special key generation process.

This notes is written by Sheldon. You can find me with #iOSBySheldon in Github, Youtube, Facebook, etc.

Need

Convert .mov/.MP4 to .gif

Reason

As a developer, I feel better to upload a short video when I create the pull request to show other viewers what I did in this PR. I tried .mov format directly got after finishing recording screen using Quicktime, however, gif offers preview in most web pages, and has smaller file size.

This is not limited to developer, anyone has this need can use this method to convert the files.

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

	import streamlit as st
	import concurrent.futures # We'll do computations in separate processes!
	import mymodule # This is where you'll do the computation

	# Your st calls must go inside this IF block.
	if __name__ == '__main__':
	st.write("Starting a long computation on another process")

	# Pick max number of concurrent processes. Depends on how heavy your computation is, and how
	# powerful your machine is.

	#!/usr/bin/env bash
	function gdrive_download () { # credit to https://github.com/ethanjperez/convince
	CONFIRM=$(wget --quiet --save-cookies /tmp/cookies.txt --keep-session-cookies --no-check-certificate "https://docs.google.com/uc?export=download&id=$1" -O- \| sed -rn 's/.confirm=([0-9A-Za-z_]+)./\1\n/p')
	wget --load-cookies /tmp/cookies.txt "https://docs.google.com/uc?export=download&confirm=$CONFIRM&id=$1" -O $2
	rm -rf /tmp/cookies.txt
	}

	mkdir -p colab_inputs_video
	if [ $1 = "fixed" ]
	then

	#!/bin/bash
	# ~/.bashrc: executed by bash(1) for non-login shells.
	# kevin gallagher (@ageis) <kevingallagher@gmail.com>
	# normally I divide this into separate files: .bashrc, .bash_profile, .bash_aliases and .bash_functions (also .bash_logout), but it's all concatenated here.

	ulimit -s unlimited
	export MYUID=$(id -u)
	export USER="$(id -un)"

	if [[ "$TILIX_ID" ]] \|\| [[ "$VTE_VERSION" ]]; then