Jonathan Hodgson
f7919d0053
Bin: fixes the lucky13 check
...
It apparently works with any cbc cipher and doesn't require tls1
4 years ago
Jonathan Hodgson
dece5f06e7
Adds a small script for querying package versions in redhat
4 years ago
Jonathan Hodgson
9a3c9d38bb
Adds a command gmutt that opens my terminal with mutt loaded
...
Also adds a desktop file that allows mutt to handle mailto: links
4 years ago
Jonathan Hodgson
4b7c769b1f
Changes the volume script to work with pulseaudio-ctl
...
https://github.com/graysky2/pulseaudio-ctl
using amixer is a pain and this takes a lot of the complexity out of it.
If pulseaudio-ctl isn't available, the script will still use amixer
4 years ago
Jonathan Hodgson
b64763b89c
Adds phone support to password manager
4 years ago
Jonathan Hodgson
fd29426b20
Changes to rofi shutdown
...
Changes the icons and temporarily disables lock
4 years ago
Jonathan Hodgson
bcf7ed158d
Changes rofi shutdown script
4 years ago
Jonathan Hodgson
bff3d4c966
Adds a launcher script
...
This is called from dwm to launch a program by name.
In its current state, it will launch rofi if it's available and dmenu if
not.
4 years ago
Jonathan Hodgson
ce5df3db22
Add brightness script
4 years ago
Jonathan Hodgson
ba2b85b2cd
BIN: analyse-headers: bug fixes
...
A couple of bug fixes, removed some unnecesary echos and fixed crash if
name is too long to fit in the heading box
4 years ago
Jonathan Hodgson
15b18a4a0a
BIN: Adds lucky13 to verifySSL
4 years ago
Jonathan Hodgson
c1ba95117a
BIN: Small adjustments to verifySSL
...
The script now prepends the command that is echoed with a $ in order to
indicate it is a command that is run
Also stops the script showing each cipher that is tested
4 years ago
Jonathan Hodgson
4c2f3dbc4d
BIN: adds sweet32 test to verifySSL
4 years ago
Jonathan Hodgson
a4dc363ee6
BIN: makes the verifySSL print progress messages to stderr
...
I chose to do this because I want to be able to pipe stdout to a file
and use it as evidence. I don't need the progress for that
4 years ago
Jonathan Hodgson
961f7797a7
BIN: starts verifySSL script
...
This will evolve to become a script that can be used to verify the
findings of a tool like testssl
Currently only supports "beast"
4 years ago
Jonathan Hodgson
6dad0bf8ab
BIN: fix csp check in analyse-headers
...
the csp function didn't correctly return 1 when a missconfigured csp was
found
4 years ago
Jonathan Hodgson
e94ba0b5b2
Improve handling of CSP
...
Although I'd like to re-do the csp handling, this change fixes the
detection of unsafe-inline and unsafe-eval.
4 years ago
Jonathan Hodgson
b8f104fd00
Makes detection of x-frame-options value case insensitive
...
In other words, sameorigin == SAMEORIGIN == saMeOriGIN
This is in line with the spec for the header:
https://tools.ietf.org/html/rfc7034
4 years ago
Jonathan Hodgson
6feffc731b
BIN: analyse-headers: improve expect-ct description
4 years ago
Jonathan Hodgson
41fd57310a
BIN: analyse-headers: Checks the access-control-allow-origin header
...
Another suggestion by <Dom Ingram>.
For more details on the null issue, read here:
https://w3c.github.io/webappsec-cors-for-developers/#avoid-returning-access-control-allow-origin-null
4 years ago
Jonathan Hodgson
984298b29b
BIN: analyse-headers: fix most shellcheck warnings
...
The only checks I haven't fixed are the unused variables for colours. I
may use them in the future so haven't removed them
4 years ago
Jonathan Hodgson
6ac052cd39
BIN: analyse-headers: note on x-frame-options if frame-ancestors present
...
If the frame-ancestors content security policy is present, the
x-frame-options warning mentions that the content security helps
mitigate against clickjacking although for greater browser support,
x-frame-options should also be used
Thanks <Dom Ingram> for the suggestion
4 years ago
Jonathan Hodgson
1b42f81f47
BIN: analyse-headers: Adds generic version disclosure function
...
if the header contains the word "version" (case insensitively) it will
flag it as potential information disclosure
Thanks <Dom Ingram> for the suggestion
4 years ago
Jonathan Hodgson
e247c85bc9
BIN: analyse-headers: read from stdin if first arg is -
...
This makes testing much easier
4 years ago
Jonathan Hodgson
cad2f2d2d5
BIN: analyse-headers: Add more notes to expect-ct description
...
As pointed out by <Dom Ingram>, the expect-ct is likely to become
obsolete in June 2012
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
4 years ago
Jonathan Hodgson
7ea1e9a964
BIN: analyse-headers: Fix incorrect reporting of SSL issues
...
It turns out the SSL flags secure and httponly are not case sensitive.
https://tools.ietf.org/html/rfc6265#section-5.2.5
I cannot find any documentation about the SameSite=Strict so I will
leave it case sensitive for now. The spec for that section is here:
https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2
Thanks <Dom Ingram> for flagging this
4 years ago
Jonathan Hodgson
7a7ffc608d
BIN: analyse-headers: add expect-ct and start referrer-policy
4 years ago
Jonathan Hodgson
3ce547a0b2
BIN: Analyse-headers: Adds to description for cookie flag
4 years ago
Jonathan Hodgson
fb5774a584
BIN: analyse-headers: fix error "wrap command not found"
4 years ago
Jonathan Hodgson
9ef36af8f7
BIN: analyse-headers: adds feature-policy and permissions-policy checks
4 years ago
Jonathan Hodgson
61097006a4
BIN: analyse-headers: Wrap text in descriptions
...
The text in descriptions is now wrapped to 80 chars. This does not
affect the headers printed at the top which are not wrapped
4 years ago
Jonathan Hodgson
af81ccd62e
BIN: Adds SameSite check in analyse-headers script
...
The script will now warn you if the SameSite option is not set to Strict
on cookies.
4 years ago
Jonathan Hodgson
1f29c17ab5
BIN: Fix webtest script when : in cookies
...
If there was a colon in a cookie, the script would misidentify insecure
cookie configurations
4 years ago
Jonathan Hodgson
a3f75d9b32
BIN: Adds analyse-headers script
...
The script is in early stages of development but should work for some of
the most common mis-configurtaions.
4 years ago
Jonathan Hodgson
16f1d64012
BIN: Adds git dumper
...
from here: https://github.com/internetwache/GitTools/blob/master/Dumper/gitdumper.sh
4 years ago
Jonathan Hodgson
60941bc007
BIN: Adds hex2rgb script
4 years ago
Jonathan Hodgson
1ecac5f2d8
BIN: Makes opout view images with sxiv
4 years ago
Jonathan Hodgson
bc0474186f
Adds an interactive jq experement
4 years ago
Jonathan Hodgson
c3f16db486
Adds some useful util bash functions
4 years ago
Jonathan Hodgson
27cde2b004
BIN: Updates git-delete-submodule to remove them if they've been moved
...
The old script assumed that submodles name and path were the same, now
that isn't the case
4 years ago
Jonathan Hodgson
7541a67566
Wraps strings in double quotes
4 years ago
Jonathan Hodgson
14f5c6efac
Adds corp-curl script
4 years ago
Jonathan Hodgson
ad03136de5
Adds scripts to help with ssl testing
4 years ago
Jonathan Hodgson
af04f665cd
Renames jwtcat to catjwt to avoid clash with 3rd party tool
4 years ago
Jonathan Hodgson
c5fd08bb76
Creates script for printing jwt web tokens
4 years ago
Jonathan Hodgson
ecd699d351
Adds script to download a series from iplayer
4 years ago
Jonathan Hodgson
ad6518d500
Updates tridactylrc and adds gnvim script
...
The script simply opens a new terminal with nvim running in it, passing
any arguments directly to nvim
This is used by tridactyl to open a text box in vim
Also added some new search engines and some other keybindings
4 years ago
Jonathan Hodgson
3ba3ca03b5
A start to webtest script
4 years ago
Jonathan Hodgson
fa4b73bc51
Makes linkhandler handle more
...
It now handles some peertube, more invidious and xkcd
4 years ago
Jonathan Hodgson
acba5f4559
Allow syncing of just inbox rather than all mailboxes
4 years ago