Commit graph

1045 commits

Author SHA1 Message Date
Jonathan Hodgson
bd7337926e BIN: Small adjustments to verifySSL
The script now prepends the command that is echoed with a $ in order to
indicate it is a command that is run

Also stops the script showing each cipher that is tested
2021-01-13 16:30:33 +00:00
Jonathan Hodgson
064b53f2bf BIN: adds sweet32 test to verifySSL 2021-01-13 16:27:59 +00:00
Jonathan Hodgson
dd4b8e5161 BIN: makes the verifySSL print progress messages to stderr
I chose to do this because I want to be able to pipe stdout to a file
and use it as evidence. I don't need the progress for that
2021-01-13 16:21:01 +00:00
Jonathan Hodgson
74f433ccb1 ALIAS: makes verifySSL use the chacha ssl if it's available 2021-01-13 16:11:50 +00:00
Jonathan Hodgson
995b2a516e BIN: starts verifySSL script
This will evolve to become a script that can be used to verify the
findings of a tool like testssl

Currently only supports "beast"
2021-01-13 16:09:28 +00:00
Jonathan Hodgson
349963cdad BIN: fix csp check in analyse-headers
the csp function didn't correctly return 1 when a missconfigured csp was
found
2021-01-11 14:09:40 +00:00
Jonathan Hodgson
3f01926ab6 Improve handling of CSP
Although I'd like to re-do the csp handling, this change fixes the
detection of unsafe-inline and unsafe-eval.
2021-01-11 12:16:18 +00:00
Jonathan Hodgson
e77aa36e70 Makes detection of x-frame-options value case insensitive
In other words, sameorigin == SAMEORIGIN == saMeOriGIN

This is in line with the spec for the header:

https://tools.ietf.org/html/rfc7034
2021-01-11 12:07:07 +00:00
Jonathan Hodgson
f5d78bfb9c Update events 2021-01-06 16:26:37 +00:00
Jonathan Hodgson
94c2ee72f0 Update events 2021-01-06 16:25:42 +00:00
Jonathan Hodgson
1620da7d87 Update events 2021-01-06 16:25:16 +00:00
Jonathan Hodgson
92de12d1a8 VIM: adds firevim config
Does 2 thing:
* sets up my setting for editing text (spell checking etc)
* Sets the content type to html for domains starting with mail.
2020-12-21 16:16:37 +00:00
Jonathan Hodgson
34b1b0be20 VIM: make filename in statusline 30 chars (maximum) 2020-12-21 16:15:30 +00:00
Jonathan Hodgson
36b268a1ba Alias: changes kb to keys
I would like to use kb for a new tool I'm making.
2020-12-18 20:12:02 +00:00
Jonathan Hodgson
c83bb775b4 aliases: adds enum4linux -> enum4linux-ng
This is a newer re-write with additional features and written in python

https://github.com/cddmp/enum4linux-ng
2020-12-17 09:42:13 +00:00
Jonathan Hodgson
fd6d4258df aliases: fixes check for a couple of commands
I had forgotten to put the -p flag on type when checking for the
existence of commands
2020-12-17 09:41:09 +00:00
Jonathan Hodgson
a4a520aa02 VIM: Hides git branch "blob" on status line if not in a git project 2020-12-14 11:27:14 +00:00
Jonathan Hodgson
e95aef3c0d SH: adds bash shebang to shared dotfiles for syntax highlighting 2020-12-14 09:23:38 +00:00
Jonathan Hodgson
741dc650df VIM: Adds lsp bindings for more languages 2020-12-13 20:58:19 +00:00
Jonathan Hodgson
f1c2c3fcb2 VIM: Significant style changes to statusline
I have used colour and powerline symbols to differentiate different
parts of my status line.

Inspiration came from this:
https://www.reddit.com/r/vimporn/comments/kbtu74/my_theme_called_humanoid_and_my_statusbar/
2020-12-13 20:55:06 +00:00
Jonathan Hodgson
909a6e5e3c BIN: analyse-headers: improve expect-ct description 2020-12-11 15:38:28 +00:00
Jonathan Hodgson
b49d000408 BIN: analyse-headers: Checks the access-control-allow-origin header
Another suggestion by <Dom Ingram>.

For more details on the null issue, read here:
https://w3c.github.io/webappsec-cors-for-developers/#avoid-returning-access-control-allow-origin-null
2020-12-11 15:26:32 +00:00
Jonathan Hodgson
f669880037 BIN: analyse-headers: fix most shellcheck warnings
The only checks I haven't fixed are the unused variables for colours. I
may use them in the future so haven't removed them
2020-12-11 15:01:53 +00:00
Jonathan Hodgson
2e1dff91a3 BIN: analyse-headers: note on x-frame-options if frame-ancestors present
If the frame-ancestors content security policy is present, the
x-frame-options warning mentions that the content security helps
mitigate against clickjacking although for greater browser support,
x-frame-options should also be used

Thanks <Dom Ingram> for the suggestion
2020-12-09 16:39:11 +00:00
Jonathan Hodgson
1fabc27b79 BIN: analyse-headers: Adds generic version disclosure function
if the header contains the word "version" (case insensitively) it will
flag it as potential information disclosure

Thanks <Dom Ingram> for the suggestion
2020-12-09 16:26:47 +00:00
Jonathan Hodgson
27b9af6327 BIN: analyse-headers: read from stdin if first arg is -
This makes testing much easier
2020-12-09 16:24:59 +00:00
Jonathan Hodgson
039f4e2270 BIN: analyse-headers: Add more notes to expect-ct description
As pointed out by <Dom Ingram>, the expect-ct is likely to become
obsolete in June 2012

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
2020-12-09 16:13:39 +00:00
Jonathan Hodgson
bf132e16c2 BIN: analyse-headers: Fix incorrect reporting of SSL issues
It turns out the SSL flags secure and httponly are not case sensitive.

https://tools.ietf.org/html/rfc6265#section-5.2.5

I cannot find any documentation about the SameSite=Strict so I will
leave it case sensitive for now. The spec for that section is here:

https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2

Thanks <Dom Ingram> for flagging this
2020-12-09 16:08:26 +00:00
Jonathan Hodgson
fd3997230d BORG: stop backing up git repos 2020-12-07 11:40:40 +00:00
Jonathan Hodgson
1eccde753e BORG: Fixes backup dir 2020-12-07 11:39:03 +00:00
Jonathan Hodgson
0e0f0c00d1 BORG: Adds borg backup script 2020-12-07 11:37:16 +00:00
Jonathan Hodgson
26a70aef93 VIM: Adds firevim plugin 2020-12-07 11:36:54 +00:00
Jonathan Hodgson
69c7355225 BIN: analyse-headers: add expect-ct and start referrer-policy 2020-12-03 11:19:35 +00:00
Jonathan Hodgson
5369861bc8 BIN: Analyse-headers: Adds to description for cookie flag 2020-12-02 10:54:10 +00:00
Jonathan Hodgson
3665bb63a2 BIN: analyse-headers: fix error "wrap command not found" 2020-12-02 09:19:47 +00:00
Jonathan Hodgson
97df97a48b BIN: analyse-headers: adds feature-policy and permissions-policy checks 2020-12-02 09:11:52 +00:00
Jonathan Hodgson
afa3f3495a BIN: analyse-headers: Wrap text in descriptions
The text in descriptions is now wrapped to 80 chars. This does not
affect the headers printed at the top which are not wrapped
2020-12-02 08:32:10 +00:00
Jonathan Hodgson
fb5d25dc6c BIN: Adds SameSite check in analyse-headers script
The script will now warn you if the SameSite option is not set to Strict
on cookies.
2020-12-01 21:17:34 +00:00
Jonathan Hodgson
c384064641 BIN: Fix webtest script when : in cookies
If there was a colon in a cookie, the script would misidentify insecure
cookie configurations
2020-12-01 19:56:33 +00:00
Jonathan Hodgson
ab2c56d9b5 BIN: Adds analyse-headers script
The script is in early stages of development but should work for some of
the most common mis-configurtaions.
2020-12-01 18:15:01 +00:00
Jonathan Hodgson
cf37bd3dcf REM: adds monthly reminders file 2020-11-19 14:40:50 +00:00
Jonathan Hodgson
c89695ae3f REM: adds %b to bin reminders 2020-11-19 14:39:50 +00:00
Jonathan Hodgson
7294d0fc2f REM: Created birthday and anniversary specific functions
Then uses them in the yearly file
2020-11-19 14:38:44 +00:00
Jonathan Hodgson
fc5a8cfe4f Rem: add to one-off events 2020-11-19 14:38:22 +00:00
Jonathan Hodgson
ae5a97a677 REM: Changes to uk hollidays
Omits bank hollidays

Re-structured dates around crhistmas

Adds some dates such as black friday
2020-11-19 14:35:28 +00:00
Jonathan Hodgson
959b57110c SHELL: Adds aliases for cp and mv with progress bars
I found patches at the link below for mv and cp that add options for
progress bars. I have applied and compiled them and named the commands
cpg and mvg as recommended in the readme. They are named like that (I
assume) because they add a -g flag for progress.

If they are present and in my path, I always want to use them with the
progress bar flag in place of cp or mv

https://github.com/jarun/advcpmv
2020-11-02 17:17:27 +00:00
Jonathan Hodgson
6f8de2427e SHELL: Adds a shortcut for wingcc
I can never remember the name of the command to compile a windows exe in
linux so I created an alias for it called wingcc
2020-11-02 17:13:39 +00:00
Jonathan Hodgson
7a82ef8f29 SHELL: adds alias so sc is runs sc-im 2020-11-02 17:12:33 +00:00
Jonathan Hodgson
9f00cf46a4 REMIND: Adjust alias for better sorting
Default is dddd

aadd makes it sort date and time in ascending order (earlier first)
2020-11-02 17:09:19 +00:00
Jonathan Hodgson
62230ac526 VIM: Adds ansiescape submodule
This plugin allows you to apply ansi colour escapes in a vim buffer
2020-11-02 17:08:22 +00:00