Jonathan Hodgson
41082f1f06
Adds a launcher script
...
This is called from dwm to launch a program by name.
In its current state, it will launch rofi if it's available and dmenu if
not.
4 years ago
Jonathan Hodgson
5ae185e6c1
Add brightness script
4 years ago
Jonathan Hodgson
7c41900e74
Adds Onboard layout to use on pinephone
4 years ago
Jonathan Hodgson
635c502d29
Adds launcpad rofi theme
4 years ago
Jonathan Hodgson
3187c98e35
Adds check for fzf
4 years ago
Jonathan Hodgson
bc8e2e2f97
Adds checks to promptconfig
4 years ago
Jonathan Hodgson
58156a250c
Adds checks to xinitrc
4 years ago
Jonathan Hodgson
f6cbc5ddad
Check bat exists before overiding it
4 years ago
Jonathan Hodgson
32dcc8c957
Adds check before running ruby commands
4 years ago
Jonathan Hodgson
30dd026965
BIN: analyse-headers: bug fixes
...
A couple of bug fixes, removed some unnecesary echos and fixed crash if
name is too long to fit in the heading box
4 years ago
Jonathan Hodgson
9b4c064acd
VIM: Keep selection when using < or > in visual mode
...
When indenting or unindenting a code block, I normally visually select
it and use < or >. However, both of these unselect the selection.
The mappings make vim also do gv after such an action which re-selects
the previous selection.
4 years ago
Jonathan Hodgson
d8e3b894c0
BIN: Adds lucky13 to verifySSL
4 years ago
Jonathan Hodgson
bd7337926e
BIN: Small adjustments to verifySSL
...
The script now prepends the command that is echoed with a $ in order to
indicate it is a command that is run
Also stops the script showing each cipher that is tested
4 years ago
Jonathan Hodgson
064b53f2bf
BIN: adds sweet32 test to verifySSL
4 years ago
Jonathan Hodgson
dd4b8e5161
BIN: makes the verifySSL print progress messages to stderr
...
I chose to do this because I want to be able to pipe stdout to a file
and use it as evidence. I don't need the progress for that
4 years ago
Jonathan Hodgson
74f433ccb1
ALIAS: makes verifySSL use the chacha ssl if it's available
4 years ago
Jonathan Hodgson
995b2a516e
BIN: starts verifySSL script
...
This will evolve to become a script that can be used to verify the
findings of a tool like testssl
Currently only supports "beast"
4 years ago
Jonathan Hodgson
349963cdad
BIN: fix csp check in analyse-headers
...
the csp function didn't correctly return 1 when a missconfigured csp was
found
4 years ago
Jonathan Hodgson
3f01926ab6
Improve handling of CSP
...
Although I'd like to re-do the csp handling, this change fixes the
detection of unsafe-inline and unsafe-eval.
4 years ago
Jonathan Hodgson
e77aa36e70
Makes detection of x-frame-options value case insensitive
...
In other words, sameorigin == SAMEORIGIN == saMeOriGIN
This is in line with the spec for the header:
https://tools.ietf.org/html/rfc7034
4 years ago
Jonathan Hodgson
f5d78bfb9c
Update events
4 years ago
Jonathan Hodgson
94c2ee72f0
Update events
4 years ago
Jonathan Hodgson
1620da7d87
Update events
4 years ago
Jonathan Hodgson
92de12d1a8
VIM: adds firevim config
...
Does 2 thing:
* sets up my setting for editing text (spell checking etc)
* Sets the content type to html for domains starting with mail.
4 years ago
Jonathan Hodgson
34b1b0be20
VIM: make filename in statusline 30 chars (maximum)
4 years ago
Jonathan Hodgson
36b268a1ba
Alias: changes kb to keys
...
I would like to use kb for a new tool I'm making.
4 years ago
Jonathan Hodgson
c83bb775b4
aliases: adds enum4linux -> enum4linux-ng
...
This is a newer re-write with additional features and written in python
https://github.com/cddmp/enum4linux-ng
4 years ago
Jonathan Hodgson
fd6d4258df
aliases: fixes check for a couple of commands
...
I had forgotten to put the -p flag on type when checking for the
existence of commands
4 years ago
Jonathan Hodgson
a4a520aa02
VIM: Hides git branch "blob" on status line if not in a git project
4 years ago
Jonathan Hodgson
e95aef3c0d
SH: adds bash shebang to shared dotfiles for syntax highlighting
4 years ago
Jonathan Hodgson
741dc650df
VIM: Adds lsp bindings for more languages
4 years ago
Jonathan Hodgson
f1c2c3fcb2
VIM: Significant style changes to statusline
...
I have used colour and powerline symbols to differentiate different
parts of my status line.
Inspiration came from this:
https://www.reddit.com/r/vimporn/comments/kbtu74/my_theme_called_humanoid_and_my_statusbar/
4 years ago
Jonathan Hodgson
909a6e5e3c
BIN: analyse-headers: improve expect-ct description
4 years ago
Jonathan Hodgson
b49d000408
BIN: analyse-headers: Checks the access-control-allow-origin header
...
Another suggestion by <Dom Ingram>.
For more details on the null issue, read here:
https://w3c.github.io/webappsec-cors-for-developers/#avoid-returning-access-control-allow-origin-null
4 years ago
Jonathan Hodgson
f669880037
BIN: analyse-headers: fix most shellcheck warnings
...
The only checks I haven't fixed are the unused variables for colours. I
may use them in the future so haven't removed them
4 years ago
Jonathan Hodgson
2e1dff91a3
BIN: analyse-headers: note on x-frame-options if frame-ancestors present
...
If the frame-ancestors content security policy is present, the
x-frame-options warning mentions that the content security helps
mitigate against clickjacking although for greater browser support,
x-frame-options should also be used
Thanks <Dom Ingram> for the suggestion
4 years ago
Jonathan Hodgson
1fabc27b79
BIN: analyse-headers: Adds generic version disclosure function
...
if the header contains the word "version" (case insensitively) it will
flag it as potential information disclosure
Thanks <Dom Ingram> for the suggestion
4 years ago
Jonathan Hodgson
27b9af6327
BIN: analyse-headers: read from stdin if first arg is -
...
This makes testing much easier
4 years ago
Jonathan Hodgson
039f4e2270
BIN: analyse-headers: Add more notes to expect-ct description
...
As pointed out by <Dom Ingram>, the expect-ct is likely to become
obsolete in June 2012
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
4 years ago
Jonathan Hodgson
bf132e16c2
BIN: analyse-headers: Fix incorrect reporting of SSL issues
...
It turns out the SSL flags secure and httponly are not case sensitive.
https://tools.ietf.org/html/rfc6265#section-5.2.5
I cannot find any documentation about the SameSite=Strict so I will
leave it case sensitive for now. The spec for that section is here:
https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2
Thanks <Dom Ingram> for flagging this
4 years ago
Jonathan Hodgson
fd3997230d
BORG: stop backing up git repos
4 years ago
Jonathan Hodgson
1eccde753e
BORG: Fixes backup dir
4 years ago
Jonathan Hodgson
0e0f0c00d1
BORG: Adds borg backup script
4 years ago
Jonathan Hodgson
26a70aef93
VIM: Adds firevim plugin
4 years ago
Jonathan Hodgson
69c7355225
BIN: analyse-headers: add expect-ct and start referrer-policy
4 years ago
Jonathan Hodgson
5369861bc8
BIN: Analyse-headers: Adds to description for cookie flag
4 years ago
Jonathan Hodgson
3665bb63a2
BIN: analyse-headers: fix error "wrap command not found"
4 years ago
Jonathan Hodgson
97df97a48b
BIN: analyse-headers: adds feature-policy and permissions-policy checks
4 years ago
Jonathan Hodgson
afa3f3495a
BIN: analyse-headers: Wrap text in descriptions
...
The text in descriptions is now wrapped to 80 chars. This does not
affect the headers printed at the top which are not wrapped
4 years ago
Jonathan Hodgson
fb5d25dc6c
BIN: Adds SameSite check in analyse-headers script
...
The script will now warn you if the SameSite option is not set to Strict
on cookies.
4 years ago