jgru

xcode-select --install

sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"

git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions

git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting

# Insert this line into ~/.zshrc
plugins=(rails git zsh-syntax-highlighting zsh-autosuggestions)

jgru

jgru

# Base image
FROM debian:bullseye-slim

# Install make
RUN apt-get update && \
    apt-get install --yes make && \
    apt-get install --yes wget && \
    apt-get install --yes patch

# TeX environment

jgru

#!/bin/bash

PROJ="paper-724_"
INDIR="final/"
OUTDIR="$(date +%Y-%m-%d)_${PROJ}"
CWD="$(pwd)"
ARCH=".zip" # or .tar.gz

# Create tmp directory
TMP=$(mktemp -d)

jgru

@inproceedings{GruberF22a,
    author = {Gruber, Jan and Freiling, Felix},
    title = {Fighting Evasive Malware: How to Pass the Reverse Turing Test By Utilizing a VMI-Based Human Interaction Simulator},
    booktitle = {SICHERHEIT 2022},
    year = {2022},
    editor = {Wressnegger, C. and Reinhardt, D. and Barber, T. and Witt, B. C. and Arp, D. and Mann, Z. },
    pages = {49--64},
    doi = {10.18420/sicherheit2022_03},
    publisher = {Gesellschaft für Informatik e.V.},
    address = {Karlsruhe}

jgru

jgru

Run Automated Registry Triage on an EWF-image

Define path to image

IMG="./nps-2008-jean.E01"
WINPARTS=""

jgru

import subprocess
from enum import Enum


class AuditAction(str, Enum):
    always = "always"
    never = "never"

    def __str__(self):
        return str.__str__(self)

jgru

How to use serial_comm.py

Connect to a console

URI = "qemu+ssh://user@192.168.178.180/system?keyfile=/home/user/.ssh/id_rsa"
domain = "d10c"
user = "root"
pw = "pwd"

jgru

#!/bin/bash

clean_debian() {
	[ "$MNT_DIR" != "" ] && chroot $MNT_DIR umount /proc/ /sys/ /dev/ 
	sleep 1s
	[ "$MNT_DIR" != "" ] && umount -l $MNT_DIR
	sleep 1s
	[ "$DISK" != "" ] && qemu-nbd -d $DISK
	sleep 1s
	[ "$MNT_DIR" != "" ] && rm -r $MNT_DIR