Home on Mark Esler

We recommend that you only use self-hosted runners with private repositories.

Configs for Ubuntu Server 24.04 Noble and wlroots (sway). apt config Avoid cruft and possibly break things.

Overview Secure Boot is a UEFI feature which ensures that only trusted software is loaded during boot.

Stable Release Upgrades balance risks and benefits.

Description RSA PKCS#1 1.5 is used to pad and encrypt secrets. e.g., in TLS 1.2 the first two bytes are 00 02, followed by at least 8 bytes of non-zero padding, a 00 delimiter, two bytes to indicate the TLS 1.2 version (03 03), and finally followed by the…

Encryption and Decryption gpg --encrypt --recipient <email-address> --output <file>.gpg <file> gpg --decrypt --output <file> <file>.gpg Receive Key gpg --keyserver keyserver.ubuntu.com --recv-keys 407260f7616ece4d9d12462798e9740dc34539e0 Send Key gpg --ke…

This is an informal info dump on how to perform coordinated vulnerability disclosures.

CVE CVEs (or Common Vulnerabilities and Exposures) are a communication tool.

From SUSE Support’s How to remove CTRL-M (^M) characters from a file in Linux.

An attack is a class of vulnerabilities.

References Article SMTP Smuggling - Spoofing E-Mails Worldwide by Timo Longin Presentation SMTP Smuggling – Spoofing E-Mails Worldwide by Timo Longin smtpsmuggling.com by Timo Longin SMTP-Smuggling-Tools by Timo Longin smtpsmug by Hanno Böck SMTP Smuggling

via mutliple authors on Stackoverflow: Find and replace with sed in directory and sub directories in BSD find ./ -type f -exec sed -i -e '' 's/apple/orange/g' {} \; in GNU find ./ -type f -exec sed -i -e 's/apple/orange/g' {} \; faster grep -rl 'apples' /…

References OpenSSF’s Compiler Options Hardening Guide for C and C++ by Thomas Nyman, David A.

Format defined between the policy manual and the dh suite of tools.

dfuzzer GitHub: dbus-fuzzer/dfuzzer The authors of “Dfuzzer: A D-Bus Service Fuzzing Tool” (10.1109/ICSTW.2014.51) describe finding many security holes in projects which use D-Bus since these projects poorly sanitized input data from D-Bus.

inventory local hosts for a class C network nmap 192.168.1.0/24

via nakkaya.com send and receive with netcat receiver: nc -l -p 1337 > file-to-save sender: # host1 is a hostname/ip nc -w 3 host1 1337 < file-to-send send and receive with netcat and compression receiver: nc -l -p 1337 | uncompress -c | tar xvfp - sender: