|
@@ -10,7 +10,6 @@
|
|
body {
|
|
body {
|
|
color: #FFFFFF;
|
|
color: #FFFFFF;
|
|
display: block;
|
|
display: block;
|
|
- font-family: "Comic Sans MS", "sans-serif";
|
|
|
|
margin: 0 auto;
|
|
margin: 0 auto;
|
|
overflow: auto;
|
|
overflow: auto;
|
|
overflow-x: hidden;
|
|
overflow-x: hidden;
|
|
@@ -20,125 +19,144 @@
|
|
background-attachment: fixed;
|
|
background-attachment: fixed;
|
|
background-position: top center;
|
|
background-position: top center;
|
|
background-repeat: no-repeat;
|
|
background-repeat: no-repeat;
|
|
|
|
+ font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
|
|
|
|
+ font-size: 16px;
|
|
|
|
+ line-height: 1.8;
|
|
|
|
+ text-shadow: 0 1px 0 #ffffff;
|
|
}
|
|
}
|
|
- img {
|
|
|
|
- border: 0;
|
|
|
|
- height: auto;
|
|
|
|
- max-width: 100%;
|
|
|
|
- outline: none;
|
|
|
|
- padding-left: 5em;
|
|
|
|
- padding-right: 5em;
|
|
|
|
- }
|
|
|
|
- hr {
|
|
|
|
- border: 0;
|
|
|
|
- border-top: 1px solid #E0E0E0;
|
|
|
|
- width: 70%;
|
|
|
|
- }
|
|
|
|
- h2 {
|
|
|
|
- color: #707070;
|
|
|
|
- padding: 3em 0em 0em 0em;
|
|
|
|
- }
|
|
|
|
- h3 {
|
|
|
|
- color: #606060;
|
|
|
|
- padding: 3em 0em 0em 0em;
|
|
|
|
- }
|
|
|
|
- p {
|
|
|
|
- padding: 1em 0em 0.5em 0em;
|
|
|
|
|
|
+ a {
|
|
|
|
+ border-bottom: 1px solid #444444;
|
|
|
|
+ color: #444444;
|
|
|
|
+ text-decoration: none;
|
|
}
|
|
}
|
|
- ul li {
|
|
|
|
- padding: 0em 0em 0.5em 0em;
|
|
|
|
|
|
+ a:hover {
|
|
|
|
+ border-bottom: 0;
|
|
}
|
|
}
|
|
- .boxiconbottom {
|
|
|
|
- padding: 10% 0% 15% 0%;
|
|
|
|
|
|
+ footer {
|
|
|
|
+ padding: 5% 10% 5% 10%;
|
|
text-align: center;
|
|
text-align: center;
|
|
- background: #FFFFFF;
|
|
|
|
}
|
|
}
|
|
- .boxcenter {
|
|
|
|
|
|
+ table {
|
|
|
|
+ overflow-x: auto;
|
|
|
|
+ margin-left: auto;
|
|
|
|
+ margin-right: auto;
|
|
|
|
+ }
|
|
|
|
+ .main {
|
|
background-color: #FFF;
|
|
background-color: #FFF;
|
|
color: #303030;
|
|
color: #303030;
|
|
font-size: 100%;
|
|
font-size: 100%;
|
|
line-height: 1.5;
|
|
line-height: 1.5;
|
|
margin: 45% auto 0% auto;
|
|
margin: 45% auto 0% auto;
|
|
- padding: 0% 10% 5% 10%;
|
|
|
|
|
|
+ padding: 5% 25% 5% 25%;
|
|
word-wrap: break-word;
|
|
word-wrap: break-word;
|
|
}
|
|
}
|
|
- .boxcenter a:link {
|
|
|
|
- color: #505050;
|
|
|
|
- text-decoration: none;
|
|
|
|
- }
|
|
|
|
- .boxcenter a:hover {
|
|
|
|
- color: #0000FF;
|
|
|
|
- text-decoration: underline;
|
|
|
|
- }
|
|
|
|
- .column {
|
|
|
|
- display: inline-block;
|
|
|
|
- text-align: left;
|
|
|
|
- }
|
|
|
|
- .container {
|
|
|
|
- margin: auto;
|
|
|
|
- text-align: center;
|
|
|
|
- }
|
|
|
|
|
|
+
|
|
</style>
|
|
</style>
|
|
</head>
|
|
</head>
|
|
|
|
|
|
<body>
|
|
<body>
|
|
-<div style="text-align:left" class="boxcenter">
|
|
|
|
-<h3 style="text-align:center; color:#707070; padding:5em 0em 0em 0.6em; letter-spacing: 0.4em;">lsd.cat</h3>
|
|
|
|
-<hr>
|
|
|
|
-<h3 style="text-align:center; color:#707070; padding:0em 0em 4em 0em; letter-spacing: 0.1em;">Security and other stuff</h3>
|
|
|
|
-<div class="container">
|
|
|
|
- <div class="column">
|
|
|
|
- <b>Identity</b>
|
|
|
|
- <ul>
|
|
|
|
- <li>mail: <a href="mailto:g@lsd.cat">g@lsd.cat</a></li>
|
|
|
|
- <li>signal: @giulio.99</li>
|
|
|
|
- <li>git: <a href="https://git.lsd.cat/g" target="_blank">g@git.lsd.cat</a> - <a href="https://github.com/lsd-cat" target="_blank">lsd-cat@GitHub</a></li>
|
|
|
|
- </ul>
|
|
|
|
- <b>Notes</b>
|
|
|
|
|
|
+ <div class="main">
|
|
|
|
+ <h4>Identity</h4>
|
|
|
|
+ <ul>
|
|
|
|
+ <li>mail: <a href="mailto:g@lsd.cat">g@lsd.cat</a></li>
|
|
|
|
+ <li>signal: <a href="https://signal.me/#eu/pQJe47pHLt3tIdGyBO6960HHe5T9AnSu2lk2hnzTtH8feVG9RU9Oko85P0yMDERS">@giulio.99</a></li>
|
|
|
|
+ <li>git: <a href="https://git.lsd.cat/g" target="_blank">g@git.lsd.cat</a> - <a href="https://github.com/lsd-cat" target="_blank">lsd-cat@GitHub</a></li>
|
|
|
|
+ </ul>
|
|
|
|
+ <h4>Stuff</h4>
|
|
<ul>
|
|
<ul>
|
|
- <li><a href="https://github.com/freedomofpress/securedrop-protocol" target="_blank">SecureDrop Protocol</a> - <a href="https://securedrop.org/news/future-directions-for-securedrop/" target="_blank">Part 1</a> - <a href="https://securedrop.org/news/anatomy-of-a-whistleblowing-system/" target="_blank">Part 2</a> - <a href="https://securedrop.org/news/how-to-research-your-own-cryptography-and-survive/" target="_blank">Part 3</a> - <a href="https://securedrop.org/news/introducing-securedrop-protocol/" target="_blank">Part 4</a></li>
|
|
|
|
- <li><a href="https://github.com/mabarger/bonky-boot" target="_blank">Toy RISC-V secure boot</a> with <a href="https://pingu.gay/" target="_blank">Max</a> - <a href="https://github.com/mabarger/bonky-boot/blob/main/src/sha256.S" target="_blank">Pure rv32imac assembly sha256</a></li>
|
|
|
|
- <li><a href="https://git.lsd.cat/Qubes/gsoc" target="_blank">Google Summer of Code 2021 for Qubes OS</a> - Simplified external and internal port forwarding</li>
|
|
|
|
- <li><a href="https://molteniluca.github.io/posts/homerooter/" target="_blank">home_r00ter</a> - CyberChallenge 2020 Finals IOT/Hybrid Challenge development</li>
|
|
|
|
- <li><a href="https://git.lsd.cat/g/pax-pwn" target="_blank">PAX POS Prolin OS RCE</a> - CVE-2020-28044, CVE-2020-28045, CVE-2020-28046</li>
|
|
|
|
- <li><a href="https://git.lsd.cat/g/websphere-portal-pt" target="_blank">WebSphere Portal Security Intro</a></li>
|
|
|
|
- <li><a href="https://git.lsd.cat/g/nokia-keygen" target="_blank">Nokia/ALU CPE Keygen</a> - CVE-2020-12694</li>
|
|
|
|
|
|
+ <li>SecureDrop Protocol - <a href="https://securedrop.org/news/future-directions-for-securedrop/" target="_blank">Part 1</a> - <a href="https://securedrop.org/news/anatomy-of-a-whistleblowing-system/" target="_blank">Part 2</a> - <a href="https://securedrop.org/news/how-to-research-your-own-cryptography-and-survive/" target="_blank">Part 3</a> - <a href="https://securedrop.org/news/introducing-securedrop-protocol/" target="_blank">Part 4</a></li>
|
|
|
|
+ <li><a href="https://github.com/mabarger/bonky-boot" target="_blank">Toy RISC-V secure boot</a> with <a href="https://pingu.gay/" target="_blank">Max</a> - <a href="https://github.com/mabarger/bonky-boot/blob/main/src/sha256.S" target="_blank">Pure rv32imac asm sha256</a></li>
|
|
|
|
+ <li><a href="https://git.lsd.cat/Qubes/gsoc" target="_blank">Google Summer of Code for Qubes OS</a> - Simplified external and internal port forwarding</li>
|
|
|
|
+ <li><a href="https://molteniluca.github.io/posts/homerooter/" target="_blank">home_r00ter</a> - CyberChallenge 2020 Finals IOT/Hybrid development</li>
|
|
|
|
+ </ul>
|
|
|
|
+ <h4>Notes</h4>
|
|
|
|
+ <ul>
|
|
<li><a href="https://git.lsd.cat/g/openwrt-cpe46b" target="_blank">Porting OpenWrt</a> - <a href="https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=b108ed0ab09492d8d5a1775714da1ee34ce475ee" target="_blank">Upstream merge</a></li>
|
|
<li><a href="https://git.lsd.cat/g/openwrt-cpe46b" target="_blank">Porting OpenWrt</a> - <a href="https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=b108ed0ab09492d8d5a1775714da1ee34ce475ee" target="_blank">Upstream merge</a></li>
|
|
- <li><a href="https://git.lsd.cat/g/omnivista-rce" target="_blank">Alcatel OmniVista RCE</a> - CVE-2019-20047, CVE-2019-20048, CVE-2019-20049</li>
|
|
|
|
- <li><a href="https://git.lsd.cat/g/pulse-host-checker-rce" target="_blank">PCS Host Checker RCE</a> - CVE-2020-11580, CVE-2020-11581, CVE-2020-11582 - <a href="https://media.cert.europa.eu/static/SecurityAdvisories/2020/CERT-EU-SA2020-023.pdf" target="_blank">EU CERT Advisory</a></li>
|
|
|
|
|
|
+ <li><a href="https://git.lsd.cat/g/websphere-portal-pt" target="_blank">WebSphere Portal Security Intro</a></li>
|
|
<li><a href="https://git.lsd.cat/g/thinkpad-coreboot-qubes" target="_blank">Coreboot+Qubes on ThinkPads</a></li>
|
|
<li><a href="https://git.lsd.cat/g/thinkpad-coreboot-qubes" target="_blank">Coreboot+Qubes on ThinkPads</a></li>
|
|
<li><a href="https://git.lsd.cat/g/lazypivot" target="_blank">Windows/Linux intranet pivoting</a></li>
|
|
<li><a href="https://git.lsd.cat/g/lazypivot" target="_blank">Windows/Linux intranet pivoting</a></li>
|
|
<li><a href="https://git.lsd.cat/g/oracle-101" target="_blank">Oracle SQL 101</a></li>
|
|
<li><a href="https://git.lsd.cat/g/oracle-101" target="_blank">Oracle SQL 101</a></li>
|
|
<li><a href="https://git.lsd.cat/g/writeups" target="_blank">Old CTF Writeups</a></li>
|
|
<li><a href="https://git.lsd.cat/g/writeups" target="_blank">Old CTF Writeups</a></li>
|
|
</ul>
|
|
</ul>
|
|
- <b>Links</b>
|
|
|
|
- <ul>
|
|
|
|
- <li><a href="https://tumpicon.org" target="_blank">TumpiCon</a></li>
|
|
|
|
- <li><a href="https://osservatorionessuno.org" target="_blank">Osservatorio Nessuno</a></li>
|
|
|
|
- <li><a href="https://autistici.org/underscore" target="_blank">_TO * hacklab</a> - <a href="https://radioblackout.org/shows/stakka-stakka/" target="_blank">stakkastakka</a> - <a href="https://cisti.org" target="_blank">cisti.org</a></li>
|
|
|
|
- <li><a href="https://scusette.it" target="_blank">Scusette</a> - <a href="https://t.me/scusettebot" target="_blank">@scusettebot</a></li>
|
|
|
|
- <li><a href="https://www.antiwarsongs.org/">Antiwar Songs</a> - <a href="https://aws.lsd.cat/" target="_blank">Archive</a></li>
|
|
|
|
- <li><a href="https://jbz.team" target="_blank">JBZ Team</a></li>
|
|
|
|
- </ul>
|
|
|
|
- <b>TOR Exit Nodes</b>
|
|
|
|
- <ul>
|
|
|
|
- <li>punki.lsd.cat - <a href="https://metrics.torproject.org/rs.html#details/E43244684E0C924EC082B8ECC735FAF2F8CF1C45" target="_blank"><small>E43244684E0C924EC082B8ECC735FAF2F8CF1C45</small></a></li>
|
|
|
|
- <li>pengy.lsd.cat - <a href="https://metrics.torproject.org/rs.html#details/08394C4873C8A71BE9F53593F9B4AD694BFCDB90" target="_blank"><small>08394C4873C8A71BE9F53593F9B4AD694BFCDB90</small></a></li>
|
|
|
|
- <li>pingj.lsd.cat - <a href="https://metrics.torproject.org/rs.html#details/B9B267EF3716498DACF5D79CEDD7D025876398A1" target="_blank"><small>B9B267EF3716498DACF5D79CEDD7D025876398A1</small></a></li>
|
|
|
|
- <li>pingg.lsd.cat - <a href="https://metrics.torproject.org/rs.html#details/4EA257865C25F9450CC31E90FDE42AB07602944C" target="_blank"><small>4EA257865C25F9450CC31E90FDE42AB07602944C</small></a></li>
|
|
|
|
- <li>penpen.lsd.cat - <a href="https://metrics.torproject.org/rs.html#details/C13FBE4703EEDC82FEF5C2EDE9050E41003D2EB6" target="_blank"><small>C13FBE4703EEDC82FEF5C2EDE9050E41003D2EB6</small></a></li>
|
|
|
|
- <li>sacco.osservatorionessuno.org - <a href="https://metrics.torproject.org/rs.html#details/6E02FDEA15122A492A799A58C4C11D02637B145A" target="_blank"><small>6E02FDEA15122A492A799A58C4C11D02637B145A</small></a></li>
|
|
|
|
- <li>vanzetti.osservatorionessuno.org - <a href="https://metrics.torproject.org/rs.html#details/9253912D900505F77C8EFE81F7A38FC273E2ECD7" target="_blank"><small>9253912D900505F77C8EFE81F7A38FC273E2ECD7</small></a></li>
|
|
|
|
- <li>salsedo.osservatorionessuno.org - <a href="https://metrics.torproject.org/rs.html#details/15C2FFABEB99D34AEA28EF01DF34D7BF00938D38" target="_blank"><small>15C2FFABEB99D34AEA28EF01DF34D7BF00938D38</small></a></li>
|
|
|
|
- <li>pinelli.osservatorionessuno.org - <a href="https://metrics.torproject.org/rs.html#details/0B1DF900D338DD168C836306DFAA9855FE6A0AE0" target="_blank"><small>0B1DF900D338DD168C836306DFAA9855FE6A0AE0</small></a></li>
|
|
|
|
- <li>galleani.osservatorionessuno.org - <a href="https://metrics.torproject.org/rs.html#details/6542E37FBA0E4A7864854A8D37BDB64D33ADD40F" target="_blank"><small>6542E37FBA0E4A7864854A8D37BDB64D33ADD40F</small></a></li>
|
|
|
|
|
|
+ <h4>CVEs</h4>
|
|
|
|
+ <ul>
|
|
|
|
+ <li><a href="https://git.lsd.cat/g/pax-pwn" target="_blank">PAX POS Prolin OS RCE</a> - CVE-2020-28044, CVE-2020-28045, CVE-2020-28046</li>
|
|
|
|
+ <li><a href="https://git.lsd.cat/g/nokia-keygen" target="_blank">Nokia/ALU CPE Keygen</a> - CVE-2020-12694</li>
|
|
|
|
+ <li><a href="https://git.lsd.cat/g/pulse-host-checker-rce" target="_blank">PCS Host Checker RCE</a> - <a href="https://media.cert.europa.eu/static/SecurityAdvisories/2020/CERT-EU-SA2020-023.pdf" target="_blank">EU CERT</a> - CVE-2020-11580, CVE-2020-11581, CVE-2020-11582</li>
|
|
|
|
+ <li><a href="https://git.lsd.cat/g/omnivista-rce" target="_blank">Alcatel OmniVista RCE</a> - CVE-2019-20047, CVE-2019-20048, CVE-2019-20049</li>
|
|
|
|
+
|
|
|
|
+ </ul>
|
|
|
|
+ <h4>Links</h4>
|
|
|
|
+ <ul>
|
|
|
|
+ <li><a href="https://osservatorionessuno.org" target="_blank">Osservatorio Nessuno</a> - Italian NGO for privacy, digital rights and activism</li>
|
|
|
|
+ <li><a href="https://tumpicon.org" target="_blank">TumpiCon</a> - Invite-only hacking conference</li>
|
|
|
|
+ <li><a href="https://autistici.org/underscore" target="_blank">_TO * hacklab</a> - Turin hacklab</li>
|
|
|
|
+ <li><a href="https://radioblackout.org/shows/stakka-stakka/" target="_blank">stakkastakka</a> - <a href="https://cisti.org" target="_blank">cisti.org</a></li>
|
|
|
|
+ <li><a href="https://scusette.it" target="_blank">Scusette</a> - <a href="https://t.me/scusettebot" target="_blank">@scusettebot</a></li>
|
|
|
|
+ <li><a href="https://www.antiwarsongs.org">Antiwar Songs</a>
|
|
|
|
+ <li><a href="https://jbz.team" target="_blank">JBZ Team</a></li>
|
|
</ul>
|
|
</ul>
|
|
- </div>
|
|
|
|
- <hr>
|
|
|
|
- <div>%%location%% - <u>%%host%%</u></div>
|
|
|
|
- <div><a href="http://l4frkgv5uxwrcjv2nmuegnnf33nz4dicvlnukdkouxsehzkv7xpfysqd.onion"><small><i>http://l4frkgv5uxwrcjv2nmuegnnf33nz4dicvlnukdkouxsehzkv7xpfysqd.onion</i></small></a></div>
|
|
|
|
- <div><small><a href="https://git.lsd.cat/g/lsd.cat/commits/master/index.html" target="_blank">Changes history</a></small></div>
|
|
|
|
|
|
+ <h4>TOR Exit Nodes</h4>
|
|
|
|
+ <div class="table">
|
|
|
|
+ <table>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>punki.lsd.cat</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/E43244684E0C924EC082B8ECC735FAF2F8CF1C45" target="_blank"><small>E43244684E0C924EC082B8ECC735FAF2F8CF1C45</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>pengy.lsd.cat</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/08394C4873C8A71BE9F53593F9B4AD694BFCDB90" target="_blank"><small>08394C4873C8A71BE9F53593F9B4AD694BFCDB90</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>pingj.lsd.cat</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/B9B267EF3716498DACF5D79CEDD7D025876398A1" target="_blank"><small>B9B267EF3716498DACF5D79CEDD7D025876398A1</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>pingg.lsd.cat</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/4EA257865C25F9450CC31E90FDE42AB07602944C" target="_blank"><small>4EA257865C25F9450CC31E90FDE42AB07602944C</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>penpen.lsd.cat</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/C13FBE4703EEDC82FEF5C2EDE9050E41003D2EB6" target="_blank"><small>C13FBE4703EEDC82FEF5C2EDE9050E41003D2EB6</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>sacco.osservatorionessuno.org</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/6E02FDEA15122A492A799A58C4C11D02637B145A" target="_blank"><small>6E02FDEA15122A492A799A58C4C11D02637B145A</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>vanzetti.osservatorionessuno.org</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/9253912D900505F77C8EFE81F7A38FC273E2ECD7" target="_blank"><small>9253912D900505F77C8EFE81F7A38FC273E2ECD7</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>salsedo.osservatorionessuno.org</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/15C2FFABEB99D34AEA28EF01DF34D7BF00938D38" target="_blank"><small>15C2FFABEB99D34AEA28EF01DF34D7BF00938D38</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>pinelli.osservatorionessuno.org</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/0B1DF900D338DD168C836306DFAA9855FE6A0AE0" target="_blank"><small>0B1DF900D338DD168C836306DFAA9855FE6A0AE0</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ <tr>
|
|
|
|
+ <td></td>
|
|
|
|
+ <td>galleani.osservatorionessuno.org</td>
|
|
|
|
+ <td><a href="https://metrics.torproject.org/rs.html#details/6542E37FBA0E4A7864854A8D37BDB64D33ADD40F" target="_blank"><small>6542E37FBA0E4A7864854A8D37BDB64D33ADD40F</small></a></td>
|
|
|
|
+ </tr>
|
|
|
|
+ </table>
|
|
|
|
+ </div>
|
|
|
|
+ <hr>
|
|
|
|
+ <footer>
|
|
|
|
+ <div>%%location%% - <u>%%host%%</u></div>
|
|
|
|
+ <div><a href="http://l4frkgv5uxwrcjv2nmuegnnf33nz4dicvlnukdkouxsehzkv7xpfysqd.onion"><small><i>http://l4frkgv5uxwrcjv2nmuegnnf33nz4dicvlnukdkouxsehzkv7xpfysqd.onion</i></small></a></div>
|
|
|
|
+ <div><small><a href="https://git.lsd.cat/g/lsd.cat/commits/master/index.html" target="_blank">Changes history</a></small></div>
|
|
|
|
+ </footer>
|
|
</div>
|
|
</div>
|
|
-</div>
|
|
|
|
</body>
|
|
</body>
|
|
</html>
|
|
</html>
|