Site original : shaarli-Links
https://d3lb3.github.io/assets/leHACK_2023.pdf
En gros, KeePass utilise un fichier xml pour sa conf.
Dans ce fichier, il est possible d'y mettre des triggers et de les détourner pour récupérer les mots de passes.
Je précise que ça fonctionne uniquement lorsque le KeePass est ouvert!
— Permalink
Vraiment pas une bonne idée.
— Permalink
from openpyxl import Workbook
from openpyxl import load_workbook
wb = load_workbook('Test.xlsm',keep_vba=True)
ws = wb['Sheet1']
ws.cell(row=1,column=1).value = 9999999
wb.save('Test.xlsm')As we’ll consider below, it might be impossible to use reCAPTCHA legally under EU law, but no data protection authority has said this.Voir réponse de GuiGui : https://shaarli.guiguishow.info/?Puj7WQ
Si, si, des APD ont clairement estimé que reCAPTCHA n'est pas conforme au RGPD[1], notamment dans des mises en demeure. Idem pour hCAPTCHA (arrêt CJUE Schrems II, raisonnement ici[2]). [...]1- https://shaarli.guiguishow.info/?xvVaiw
2- https://shaarli.guiguishow.info/?75uxFw
— Permalink
«A secure platform for easily standing up and managing your own cloud services: including firewall, ad-blocking, and multi-factor WireGuard VPN access»
— Permalink
import requests
import urllib3
import logging
logging.basicConfig()
logging.getLogger().setLevel(logging.DEBUG)
requests_log = logging.getLogger("requests.packages.urllib3")
requests_log.setLevel(logging.DEBUG)
requests_log.propagate = True
import http.client as http_client
http_client.HTTPConnection.debuglevel = 1
urllib3.disable_warnings()
r = requests.Session()
r.verify = False
headers = {
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0",
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
"Accept-Language": "fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3",
"Accept-Encoding": "gzip, deflate, br",
"Connection": "keep-alive",
'Content-Type':'application/x-www-form-urlencoded'
}
proxy_servers = {
'http': 'http://192.168.1.123:3131',
'https': 'http://192.168.1.123:3131',
}
page = r.post(url, headers=headers, verify=False, allow_redirects=False, proxies=proxy_servers, data={'msg':'hello world'} )Exemple:
[Interface]
Address = 10.0.0.2/30, fd00::2/127
PrivateKey = yourPrivateKey
PostUp = ip route add 192.168.42.0/24 via 192.168.0.1; ip route add 203.0.113.0/24 via 192.168.0.1; resolvectl -i %i dns <IP_SERVEUR_DNS>;
PreDown = ip route delete 192.168.42.0/24; ip route delete 203.0.113.0/24; resolvectl -i %i dns <IP_SERVEUR_DNS>;
[Peer]
PublicKey = vpnPublicKey
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn.example.com:51820