Commit graph

244 commits

Author SHA1 Message Date
Jonathan Hodgson
fd9aedf930 Folder shell will now default to project path if no termial open 2021-02-13 20:17:01 +00:00
Jonathan Hodgson
4ef857d357 Add xz to extract function 2021-02-13 20:16:37 +00:00
Jonathan Hodgson
b7f0fd29d5 Fix dvd rip, gcd is now part of math 2021-02-13 20:16:07 +00:00
Jonathan Hodgson
84fa6bd526 Adds !? and ?! for unicode lookup of introbang 2021-02-13 20:13:21 +00:00
Jonathan Hodgson
8456dfd096 Merge branch 'master' of ssh://git.jonathanh.co.uk:2222/jab2870/Dotfiles 2021-02-13 20:12:02 +00:00
Jonathan Hodgson
f7919d0053 Bin: fixes the lucky13 check
It apparently works with any cbc cipher and doesn't require tls1
2021-02-13 20:11:16 +00:00
Jonathan Hodgson
dece5f06e7 Adds a small script for querying package versions in redhat 2021-02-13 20:10:21 +00:00
Jonathan Hodgson
9a3c9d38bb Adds a command gmutt that opens my terminal with mutt loaded
Also adds a desktop file that allows mutt to handle mailto: links
2021-02-13 20:07:03 +00:00
Jonathan Hodgson
4b7c769b1f Changes the volume script to work with pulseaudio-ctl
https://github.com/graysky2/pulseaudio-ctl

using amixer is a pain and this takes a lot of the complexity out of it.

If pulseaudio-ctl isn't available, the script will still use amixer
2021-02-13 19:05:01 +00:00
Jonathan Hodgson
b64763b89c Adds phone support to password manager 2021-02-12 19:18:37 +00:00
Jonathan Hodgson
fd29426b20 Changes to rofi shutdown
Changes the icons and temporarily disables lock
2021-02-10 21:19:11 +00:00
Jonathan Hodgson
bcf7ed158d Changes rofi shutdown script 2021-02-08 19:47:38 +00:00
Jonathan Hodgson
bff3d4c966 Adds a launcher script
This is called from dwm to launch a program by name.

In its current state, it will launch rofi if it's available and dmenu if
not.
2021-02-07 20:54:22 +00:00
Jonathan Hodgson
ce5df3db22 Add brightness script 2021-02-07 17:27:31 +00:00
Jonathan Hodgson
ba2b85b2cd BIN: analyse-headers: bug fixes
A couple of bug fixes, removed some unnecesary echos and fixed crash if
name is too long to fit in the heading box
2021-01-25 11:14:57 +00:00
Jonathan Hodgson
15b18a4a0a BIN: Adds lucky13 to verifySSL 2021-01-13 16:39:34 +00:00
Jonathan Hodgson
c1ba95117a BIN: Small adjustments to verifySSL
The script now prepends the command that is echoed with a $ in order to
indicate it is a command that is run

Also stops the script showing each cipher that is tested
2021-01-13 16:30:33 +00:00
Jonathan Hodgson
4c2f3dbc4d BIN: adds sweet32 test to verifySSL 2021-01-13 16:27:59 +00:00
Jonathan Hodgson
a4dc363ee6 BIN: makes the verifySSL print progress messages to stderr
I chose to do this because I want to be able to pipe stdout to a file
and use it as evidence. I don't need the progress for that
2021-01-13 16:21:01 +00:00
Jonathan Hodgson
961f7797a7 BIN: starts verifySSL script
This will evolve to become a script that can be used to verify the
findings of a tool like testssl

Currently only supports "beast"
2021-01-13 16:09:28 +00:00
Jonathan Hodgson
6dad0bf8ab BIN: fix csp check in analyse-headers
the csp function didn't correctly return 1 when a missconfigured csp was
found
2021-01-11 14:09:40 +00:00
Jonathan Hodgson
e94ba0b5b2 Improve handling of CSP
Although I'd like to re-do the csp handling, this change fixes the
detection of unsafe-inline and unsafe-eval.
2021-01-11 12:16:18 +00:00
Jonathan Hodgson
b8f104fd00 Makes detection of x-frame-options value case insensitive
In other words, sameorigin == SAMEORIGIN == saMeOriGIN

This is in line with the spec for the header:

https://tools.ietf.org/html/rfc7034
2021-01-11 12:07:07 +00:00
Jonathan Hodgson
6feffc731b BIN: analyse-headers: improve expect-ct description 2020-12-11 15:38:28 +00:00
Jonathan Hodgson
41fd57310a BIN: analyse-headers: Checks the access-control-allow-origin header
Another suggestion by <Dom Ingram>.

For more details on the null issue, read here:
https://w3c.github.io/webappsec-cors-for-developers/#avoid-returning-access-control-allow-origin-null
2020-12-11 15:26:32 +00:00
Jonathan Hodgson
984298b29b BIN: analyse-headers: fix most shellcheck warnings
The only checks I haven't fixed are the unused variables for colours. I
may use them in the future so haven't removed them
2020-12-11 15:01:53 +00:00
Jonathan Hodgson
6ac052cd39 BIN: analyse-headers: note on x-frame-options if frame-ancestors present
If the frame-ancestors content security policy is present, the
x-frame-options warning mentions that the content security helps
mitigate against clickjacking although for greater browser support,
x-frame-options should also be used

Thanks <Dom Ingram> for the suggestion
2020-12-09 16:39:11 +00:00
Jonathan Hodgson
1b42f81f47 BIN: analyse-headers: Adds generic version disclosure function
if the header contains the word "version" (case insensitively) it will
flag it as potential information disclosure

Thanks <Dom Ingram> for the suggestion
2020-12-09 16:26:47 +00:00
Jonathan Hodgson
e247c85bc9 BIN: analyse-headers: read from stdin if first arg is -
This makes testing much easier
2020-12-09 16:24:59 +00:00
Jonathan Hodgson
cad2f2d2d5 BIN: analyse-headers: Add more notes to expect-ct description
As pointed out by <Dom Ingram>, the expect-ct is likely to become
obsolete in June 2012

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
2020-12-09 16:13:39 +00:00
Jonathan Hodgson
7ea1e9a964 BIN: analyse-headers: Fix incorrect reporting of SSL issues
It turns out the SSL flags secure and httponly are not case sensitive.

https://tools.ietf.org/html/rfc6265#section-5.2.5

I cannot find any documentation about the SameSite=Strict so I will
leave it case sensitive for now. The spec for that section is here:

https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2

Thanks <Dom Ingram> for flagging this
2020-12-09 16:08:26 +00:00
Jonathan Hodgson
7a7ffc608d BIN: analyse-headers: add expect-ct and start referrer-policy 2020-12-03 11:19:35 +00:00
Jonathan Hodgson
3ce547a0b2 BIN: Analyse-headers: Adds to description for cookie flag 2020-12-02 10:54:10 +00:00
Jonathan Hodgson
fb5774a584 BIN: analyse-headers: fix error "wrap command not found" 2020-12-02 09:19:47 +00:00
Jonathan Hodgson
9ef36af8f7 BIN: analyse-headers: adds feature-policy and permissions-policy checks 2020-12-02 09:11:52 +00:00
Jonathan Hodgson
61097006a4 BIN: analyse-headers: Wrap text in descriptions
The text in descriptions is now wrapped to 80 chars. This does not
affect the headers printed at the top which are not wrapped
2020-12-02 08:32:10 +00:00
Jonathan Hodgson
af81ccd62e BIN: Adds SameSite check in analyse-headers script
The script will now warn you if the SameSite option is not set to Strict
on cookies.
2020-12-01 21:17:34 +00:00
Jonathan Hodgson
1f29c17ab5 BIN: Fix webtest script when : in cookies
If there was a colon in a cookie, the script would misidentify insecure
cookie configurations
2020-12-01 19:56:33 +00:00
Jonathan Hodgson
a3f75d9b32 BIN: Adds analyse-headers script
The script is in early stages of development but should work for some of
the most common mis-configurtaions.
2020-12-01 18:15:01 +00:00
Jonathan Hodgson
16f1d64012 BIN: Adds git dumper
from here: https://github.com/internetwache/GitTools/blob/master/Dumper/gitdumper.sh
2020-10-27 11:35:42 +00:00
Jonathan Hodgson
60941bc007 BIN: Adds hex2rgb script 2020-10-06 14:45:41 +01:00
Jonathan Hodgson
1ecac5f2d8 BIN: Makes opout view images with sxiv 2020-09-29 08:52:47 +01:00
Jonathan Hodgson
bc0474186f Adds an interactive jq experement 2020-09-26 15:13:23 +01:00
Jonathan Hodgson
c3f16db486 Adds some useful util bash functions 2020-09-26 15:12:48 +01:00
Jonathan Hodgson
27cde2b004 BIN: Updates git-delete-submodule to remove them if they've been moved
The old script assumed that submodles name and path were the same, now
that isn't the case
2020-09-26 14:46:23 +01:00
Jonathan Hodgson
7541a67566 Wraps strings in double quotes 2020-09-25 10:46:36 +01:00
Jonathan Hodgson
14f5c6efac Adds corp-curl script 2020-09-23 09:51:09 +01:00
Jonathan Hodgson
ad03136de5 Adds scripts to help with ssl testing 2020-09-22 15:49:42 +01:00
Jonathan Hodgson
af04f665cd Renames jwtcat to catjwt to avoid clash with 3rd party tool 2020-09-22 15:41:06 +01:00
Jonathan Hodgson
c5fd08bb76 Creates script for printing jwt web tokens 2020-09-22 15:40:20 +01:00