4d99c42607
The recommended value for x-xss-protection is now 0
...
The script will now recommend x-xss-protection is set to 0, in line with
the recommendation made by owasp.
https://owasp.org/www-project-secure-headers/#x-xss-protection
4 years ago
49c7a32c7f
Implements --dry-run for check call
...
It obviously can't answer a call that isn't coming in, but it creates
the rofi prompt
4 years ago
0b4566affc
Work on incoming calls
...
Unlike SXMO, I have opted to use rofi to prompt for an incoming call.
This allows me to have accept and decline buttons easily rather than
multiple notifications.
4 years ago
fda4b1a8b4
Stops launcher using -normal-window flag
...
Still not entirely happy about this, might use dmenu instead of rofi.
Not sure yet
4 years ago
f9301f1959
Improves power menu
...
Power menu will now add a suspend option for non-phones. Also, it
correctly calls i3lock if not on my phone
4 years ago
830c040a92
Makes reverse shell script work if resize listener isn't available
4 years ago
1ab519531c
Initial work on modem functionality
...
Including, checking for incoming calls, missed calls, sms and the start
of a dialer using rofi
4 years ago
afb6634bec
Makes a start on dialer
4 years ago
cbe0fc1500
Update script to reflect renameing of rofi shutdown theme
4 years ago
a6e3cd71d4
Fixes rofi shutdown command
...
I use an alias rather than an expanded variable so I can include an
empty parameter.
The rofi shutdown command now only needs a single click to select an
option
4 years ago
4b298ca020
Bin: adds yt script
...
This script is used to search and view youtube videos in the command
line.
4 years ago
c88b6fa18a
Fix new message count
4 years ago
0b22abd4b4
Start on sms checker script
4 years ago
30558c7b2d
Stops sms using data flag
4 years ago
9fd64e9bb2
Fixes a bug where the modem number isn't correctly identified
4 years ago
271c253178
Starts writing modem scripts
...
Currently, I only have one for sending sms messages.
Inspiration was taken from sxmo's send message script although I prefer
to send a message from a file so I don't have to worry about escaping
quotes etc.
Also, i make use of flags
4 years ago
fb93abe720
Add script for turning nessus html to spreadsheet
4 years ago
3f5663c362
Checks for an argument before setting a project
...
This fixes the bug where pushing esc whilst rofi menu is open would set
the project path to the main projects folder
4 years ago
940c4e89f9
Adds mailto to linkhandler
4 years ago
4fc3d50c1f
Removes unnecesary notify-send
4 years ago
0368bec228
Folder shell will now default to project path if no termial open
4 years ago
5aa76ee721
Add xz to extract function
4 years ago
a01eaad4d0
Fix dvd rip, gcd is now part of math
4 years ago
aa807c8bad
Adds !? and ?! for unicode lookup of introbang
4 years ago
865566dd04
Bin: fixes the lucky13 check
...
It apparently works with any cbc cipher and doesn't require tls1
4 years ago
343f510ad0
Adds a small script for querying package versions in redhat
4 years ago
e21b641651
Adds a command gmutt that opens my terminal with mutt loaded
...
Also adds a desktop file that allows mutt to handle mailto: links
4 years ago
0af5b4e4df
Changes the volume script to work with pulseaudio-ctl
...
https://github.com/graysky2/pulseaudio-ctl
using amixer is a pain and this takes a lot of the complexity out of it.
If pulseaudio-ctl isn't available, the script will still use amixer
4 years ago
f08de9faf5
Adds phone support to password manager
4 years ago
85ba44a508
Changes to rofi shutdown
...
Changes the icons and temporarily disables lock
4 years ago
a3902ac559
Changes rofi shutdown script
4 years ago
41082f1f06
Adds a launcher script
...
This is called from dwm to launch a program by name.
In its current state, it will launch rofi if it's available and dmenu if
not.
4 years ago
5ae185e6c1
Add brightness script
4 years ago
30dd026965
BIN: analyse-headers: bug fixes
...
A couple of bug fixes, removed some unnecesary echos and fixed crash if
name is too long to fit in the heading box
4 years ago
d8e3b894c0
BIN: Adds lucky13 to verifySSL
4 years ago
bd7337926e
BIN: Small adjustments to verifySSL
...
The script now prepends the command that is echoed with a $ in order to
indicate it is a command that is run
Also stops the script showing each cipher that is tested
4 years ago
064b53f2bf
BIN: adds sweet32 test to verifySSL
4 years ago
dd4b8e5161
BIN: makes the verifySSL print progress messages to stderr
...
I chose to do this because I want to be able to pipe stdout to a file
and use it as evidence. I don't need the progress for that
4 years ago
995b2a516e
BIN: starts verifySSL script
...
This will evolve to become a script that can be used to verify the
findings of a tool like testssl
Currently only supports "beast"
4 years ago
349963cdad
BIN: fix csp check in analyse-headers
...
the csp function didn't correctly return 1 when a missconfigured csp was
found
4 years ago
3f01926ab6
Improve handling of CSP
...
Although I'd like to re-do the csp handling, this change fixes the
detection of unsafe-inline and unsafe-eval.
4 years ago
e77aa36e70
Makes detection of x-frame-options value case insensitive
...
In other words, sameorigin == SAMEORIGIN == saMeOriGIN
This is in line with the spec for the header:
https://tools.ietf.org/html/rfc7034
4 years ago
909a6e5e3c
BIN: analyse-headers: improve expect-ct description
4 years ago
b49d000408
BIN: analyse-headers: Checks the access-control-allow-origin header
...
Another suggestion by <Dom Ingram>.
For more details on the null issue, read here:
https://w3c.github.io/webappsec-cors-for-developers/#avoid-returning-access-control-allow-origin-null
4 years ago
f669880037
BIN: analyse-headers: fix most shellcheck warnings
...
The only checks I haven't fixed are the unused variables for colours. I
may use them in the future so haven't removed them
4 years ago
2e1dff91a3
BIN: analyse-headers: note on x-frame-options if frame-ancestors present
...
If the frame-ancestors content security policy is present, the
x-frame-options warning mentions that the content security helps
mitigate against clickjacking although for greater browser support,
x-frame-options should also be used
Thanks <Dom Ingram> for the suggestion
4 years ago
1fabc27b79
BIN: analyse-headers: Adds generic version disclosure function
...
if the header contains the word "version" (case insensitively) it will
flag it as potential information disclosure
Thanks <Dom Ingram> for the suggestion
4 years ago
27b9af6327
BIN: analyse-headers: read from stdin if first arg is -
...
This makes testing much easier
4 years ago
039f4e2270
BIN: analyse-headers: Add more notes to expect-ct description
...
As pointed out by <Dom Ingram>, the expect-ct is likely to become
obsolete in June 2012
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
4 years ago
bf132e16c2
BIN: analyse-headers: Fix incorrect reporting of SSL issues
...
It turns out the SSL flags secure and httponly are not case sensitive.
https://tools.ietf.org/html/rfc6265#section-5.2.5
I cannot find any documentation about the SameSite=Strict so I will
leave it case sensitive for now. The spec for that section is here:
https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2
Thanks <Dom Ingram> for flagging this
4 years ago
Jonathan Hodgson