Theodoros Symeonidis tur11ng

Zimperium zShield RE Notes

Newer versions of the Rabbit R1's APK are protected by https://www.zimperium.com/zshield/ (I don't know this for certain, somebody told me it is but I haven't really seen any identifying marks in the code yet)

Interesting assets within the APK:

lib/arm64-v8a/liboptipkawfn.so    ~3MB packed/encrypted ELF
assets/optipkawfn/0.odex          only 41 bytes (EDIT: I think this is part of an asset obfuscation scheme, the real file contents are likely elsewhere - inside the .szip maybe?)
assets/optipkawfn.szip ~8MB - I predict containing encrypted+compressed bytecode

ELF Format Cheatsheet

Introduction

Executable and Linkable Format (ELF), is the default binary format on Linux-based systems.

Compilation

Wordpress Security Checklist

Wordpress Security Checklist

WordPress Development Checklist

WordPress Setup Checklist

First things first. This first WordPress checklist will help you start out on the right foot when you start to create a WordPress website.

Purchase a domain name.
Purchase a hosting plan from a reputable hosting company that specializes in WordPress hosting.
Install the latest version of the WordPress software on your server.

Basic WordPress Development Checklist

The following developer WordPress checklist is a brief starting point. While there are a number of specific tasks that have to be done, everyone has their own way of doing things. Add to this list as you develop your own workflow.

Set up new domain in cPanel

Major Tools

foo@bar:~$ sudo -- sh -c "timedatectl set-timezone Australia/Sydney && date" && \
sudo -- sh -c "apt-get update && apt-get upgrade -y && apt-get dist-upgrade -y && apt-get autoremove -y" && \
sudo -- sh -c "apt-get install -y vim-nox && wget --output-document=/etc/vim/vimrc.local https://git.io/JvpS2" && \
sudo -- sh -c "apt-get install -y curl direnv exa git lnav mosh tig tree vifm watchman" && \
sudo -- sh -c "apt-get install -y python3-pip python3-testresources python3-pywatchman"

Introduction

As the Ghidra open source community is growing, trying to document the new projects around Ghidra. Feel free to fork the gist and propose improvements.

CPU support

New 6502 language module for Ghidra
Atmel AVR helpers for Ghidra - ATmega328p
Processor definitions for DMG and CGB in Ghidra - Gameboy CPU (LR35902) (WiP)
ghidra based disassembly of the x68000's IPL.

Create a Wi-Fi hotspot on Linux using `nmcli`

Original post : https://unix.stackexchange.com/a/310699

nmcli con add type wifi ifname wlan0 con-name Hostspot autoconnect yes ssid Hostspot
nmcli con modify Hostspot 802-11-wireless.mode ap 802-11-wireless.band bg ipv4.method shared
nmcli con modify Hostspot wifi-sec.key-mgmt wpa-psk
nmcli con modify Hostspot wifi-sec.psk "veryveryhardpassword1234"

How to Build a Successful Information Security Career (Daniel Miessler)
- https://danielmiessler.com/blog/build-successful-infosec-career/#gs.DtVCbbw
The First Steps to a Career in Information Security (Errata Security - Marisa Fagan)
- http://blog.erratasec.com/2010/04/first-steps-to-career-in-information.html#.WFrbofkrIuU
Hiring your first Security Professional (Peerlyst - Dawid Balut)
- https://www.peerlyst.com/posts/hiring-your-first-security-professional-dawid-balut
How to Start a Career in Cyber security
- https://www.concise-courses.com/security/how-to-start-your-career/
How to Get Into Information Security (ISC^2)
https://www.isc2.org/how-to-get-into-information-security.aspx

	------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
	# PS : ChatGPT makes mistakes, consider "trust but verify" principle
	------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
	#Events to Monitor
	https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/appendix-l--events-to-monitor
	------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
	#run
	eventvwr.msc Event viewer
	------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
	Event Viewer(Local)-Windows Logs (shutdown / restart )

	' ASR rules bypass creating child processes
	' https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/enable-attack-surface-reduction
	' https://www.darkoperator.com/blog/2017/11/11/windows-defender-exploit-guard-asr-rules-for-office
	' https://www.darkoperator.com/blog/2017/11/6/windows-defender-exploit-guard-asr-vbscriptjs-rule

	Sub ASR_blocked()
	Dim WSHShell As Object
	Set WSHShell = CreateObject("Wscript.Shell")
	WSHShell.Run "cmd.exe"
	End Sub

Theodoros Symeonidis tur11ng

Zimperium zShield RE Notes

ELF Format Cheatsheet

Introduction

Compilation

Wordpress Security Checklist

Recommended

WordPress Development Checklist

WordPress Setup Checklist

Basic WordPress Development Checklist

Major Tools

Introduction

CPU support

Create a Wi-Fi hotspot on Linux using nmcli

Create a Wi-Fi hotspot on Linux using `nmcli`