Posts
-
AndroidInstantVideo
展现Android硬编码下的视频数据流动，可以对视频做处理，例如加滤镜，加水印等，做直播推流（用RTMP）。 Show the stream of Android video hardware encode, including video processing and video publishing by RTMP.
展现Android硬编码下的视频数据流动，可以对视频做处理，例如加滤镜，加水印等。
本项目主要是为了展现Android使用硬编码下的视频数据流动，目前完成了H264和AAC编码以及对视频帧的图像处理，以及RTMP直播推流。欢迎Fork和Pull Request。
感谢以下项目 LibRtmp-Client-for-Android
Tags: #java • android • opengl
-
java-aes-crypto
A simple Android class for encrypting & decrypting strings, aiming to avoid the classic mistakes that most such classes suffer from.
Here are the features of this class. We believe that these properties are consistent with what a lot of people are looking for when encrypting Strings in Android.
- Works for strings: It should encrypt arbitrary strings or byte arrays. This means it needs to effectively handle multiple blocks (CBC) and partial blocks (padding). It consistently serializes and deserializes ciphertext, IVs, and key material using base64 to make it easy to store.
- Algorithm & Mode: We chose: AES 128, CBC, and PKCS5 padding. We would have picked GCM for its built-in integrity checking, but that’s only available since Android Jelly Bean.
- IV Handling: We securely generate a random IV before each encryption and provide a simple class to keep the IV and ciphertext together so they’re easy to keep track of and store. We set the IV and then request it back from the Cipher class for compatibility across various Android versions.
- Key generation: Random key generation with the updated generation code recommended for Android. If you want password-based keys, we provide functions to salt and generate them.
- Integrity: Lots of people think AES has integrity checking built in. The thinking goes, “if it decrypts correctly, it was generated by the person with the private key”. Actually, AES CBC allows an attacker to modify the messages. Therefore, we’ve also added integrity checking in the form of a SHA 256 hash.
- Older Phones: It’s designed for backward compatibility with older phones, including ciphers that are available for most versions of Android as well as entropy fixes for old Android bugs.
Tags: #java
-
intercom-rails
The easiest way to install Intercom in a Rails app.
The easiest way to install Intercom in a rails app.
For interacting with the Intercom REST API, use the
intercomgem (https://github.com/intercom/intercom-ruby)Requires Ruby 2.0 or higher.
Tags: #ruby
-
prisma-multi-tenant
🧭 Use Prisma as a multi-tenant provider for your application
npm i -g prisma-multi-tenant prisma-multi-tenant init # Init multi-tenancy in your Prisma projectTags: #typescript • prisma • multi-tenant
-
needle
The iOS Security Testing Framework
Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and syntax. The Android ecosystem has tools like “drozer” that have solved this problem and aim to be a ‘one stop shop’ for the majority of use cases, however iOS does not have an equivalent.
Needle is the MWR’s iOS Security Testing Framework, released at Black Hat USA in August 2016. It is an open source modular framework which aims to streamline the entire process of conducting security assessments of iOS applications, and acts as a central point from which to do so. Needle is intended to be useful not only for security professionals, but also for developers looking to secure their code. A few examples of testing areas covered by Needle include: data storage, inter-process communication, network communications, static code analysis, hooking and binary protections. The only requirement in order to run Needle effectively is a jailbroken device.
The release of version 1.0.0 provided a major overhaul of its core and the introduction of a new native agent, written entirely in Objective-C. The new NeedleAgent is an open source iOS app complementary to Needle, that allows to programmatically perform tasks natively on the device, eliminating the need for third party tools.
Needle has been presented at and used by workshops in various international conferences like Black Hat USA/EU, OWASP AppSec and DEEPSEC. It was also included by ToolsWatch in the shortlist for the Top Security Tools of 2016, and it is featured in the OWASP Mobile Testing Guide.
Needle is open source software, maintained by MWR InfoSecurity.
Tags: #python • pentesting • ios
-
git-labelmaker
:flags: Manage your GitHub labels from the command line!
Edit GitHub labels from the command line using
git-labelmaker! You can easily add or remove GitHub labels, making it easier for your projects to adhere to a sane labelling scheme.Tags: #javascript • command-line • cli
-
recommendable
:+1::-1: A recommendation engine using Likes and Dislikes for your Ruby app
Recommendable is a gem that allows you to quickly add a recommendation engine for Likes and Dislikes to your Ruby application using my version of [Jaccardian similarity and memory-based collaborative filtering][collaborative filtering].
Tags: #ruby • redis • sidekiq
-
strongbox
Strongbox is an artifact repository manager.
Strongbox is a modern OSS artifact repository manager. With a well-developed architecture, it provides native implementations for various layout formats, such as [Maven][docs-maven], [NPM][docs-npm], [NuGet][docs-nuget], and [Raw][docs-raw].
All of the implemented layout formats (a.k.a. “[layout providers][docs-providers]”) are written natively in Java. Our goal is to implement a universal repository manager that can host and serve artifacts in every mainstream format.
Strongbox has a search engine and an [Artifact Query Language][docs-aql].
Tags: #java • artifact-repository-manager • maven
-
one_gadget
The best tool for finding one gadget RCE in libc.so.6
When playing ctf pwn challenges we usually need the one-gadget RCE (remote code execution), which leads to call
execve('/bin/sh', NULL, NULL).This gem provides such gadgets finder, no need to use objdump or IDA-pro every time like a fool :wink:
To use this tool, type
one_gadget /path/to/libcin command line and enjoy the magic :laughing:Tags: #ruby • ctf • pwnable
-
homebrew-rmtree
Remove a formula and its unused dependencies
It’s an external command for Homebrew that provides a new command,
rmtree, that will uninstall that formula, and uninstall any of its dependencies that have no formula left installed that depend on them. The command will check all dependencies recursively starting at the one specified on the command line.This is tricky business. So this command comes with a warning.
Tags: #ruby
subscribe via RSS