Skip to content

Instantly share code, notes, and snippets.

@githubfoam
githubfoam / eduroam cheat sheet
Last active October 24, 2025 12:36
eduroam cheat sheet
------------------------------------------------------------------------------------------
only offered eduroam for both its local community and visitors, the implications would generally be manageable but would present specific challenges, primarily related to local resource access and network control.
1. Access to Local Resources
Challenge: The most significant issue. Local users connecting via eduroam at their home university are often placed on a more restricted network segment (VLAN) that only allows basic internet access. This is done for security and simplicity for roaming users.
Implication: Local staff and students would likely lose seamless access to internal resources like network-attached storage (NAS), campus-specific printers, internal applications, or certain library databases that are restricted to the local network. They would probably need to use a VPN (Virtual Private Network) to access these resources, adding an extra, necessary step to their daily workflow.
The core differenc
@githubfoam
githubfoam / base 64 detection cheat sheet
Created April 16, 2025 16:11
base 64 detection cheat sheet
#===================================================================================================================================
Base64-Encoded C2 Domain: Explanation & Examples
What is Base64 Encoding?
Base64 is a method of encoding binary data into ASCII text, often used to obfuscate malicious commands, URLs, or payloads to evade detection.
Why Do Attackers Use Base64 for C2 Communication?
Evasion: Many security tools scan for known malicious domains in plaintext.
Obfuscation: Makes malicious traffic harder to identify in logs.
@githubfoam
githubfoam / cyber threat intelligence cheat sheet
Created March 28, 2025 06:33
cyber threat intelligence cheat sheet
#===================================================================================================================================
Analyzing cyber incidents, attack patterns, and TTPs (Tactics, Techniques, and Procedures) of threat actors.
Working with SIEM tools for log analysis and real-time threat detection
Investigating security breaches, malware analysis, and intrusion detection.
Utilizing MITRE ATT&CK / Cyber Kill Chain, threat intelligence feeds / MISP, and OSINT to map threats to vulnerabilities
Working as incident response and with legal inquiries
@githubfoam
githubfoam / URLscan Dorking Techniques
Last active November 14, 2025 08:25
URLscan Dorking Techniques
#=====================================================================
Dorking is the practice of crafting advanced search queries to uncover publicly available but sensitive information. URLscan.io allows users to filter through indexed scans using Lucene-based query syntax
Examples:
page.domain:example.com → Searches all scans related to example.com
page.ip:192.168.1.1 → Finds all URLs hosted on this IP
2. Common URLscan Dorking Queries
a) Finding Open Admin Panels
@githubfoam
githubfoam / ai online resources
Last active February 20, 2025 06:27
ai online resources
#===================================================================================================================================
Kaggle is a fantastic platform for data science competitions, datasets, and learning. Here are some other online websites similar to Kaggle, offering various resources for data scientists, machine learning engineers, and AI enthusiasts:
Competition Platforms:
DrivenData: Focuses on social good challenges, often with real-world impact.
Analytics Vidhya: Hosts data science competitions, hackathons, and learning resources, particularly strong in the Indian data science community.
AIcrowd: A platform for AI challenges and competitions, with a focus on reproducibility and open-source contributions.
CodaLab: A platform for hosting competitions and evaluating machine learning models, often used by academic researchers.
Topcoder: Offers a variety of challenges, including data science, design, and development.
@githubfoam
githubfoam / netbox_experience
Last active February 18, 2025 12:36
netbox_experience
--------------------------------------------------------------------------------------------------------------------
Using LibreNMS and NetBox together is a powerful combination for network monitoring and IP address management. Here are some best practices:
Integrate Device Discovery:
Use LibreNMS for automatic device discovery and import discovered devices into NetBox for inventory and documentation.
Configure webhooks or scripts to sync discovered devices from LibreNMS to NetBox.
IPAM Integration:
Manage IP addresses and subnets in NetBox and ensure LibreNMS uses NetBox as the source of truth for device IP assignments.
Sync NetBox’s IP information with LibreNMS for accurate monitoring.
@githubfoam
githubfoam / risk management experience
Created January 23, 2025 12:23
risk management experience
--------------------------------------------------------------------------------------------------------------------
Copilot
Here's an overview of some well-known risk frameworks, methodologies, and tools within the cyber security field:
Risk Frameworks:
NIST Cybersecurity Framework (NIST CSF)
Comprehensive guidelines for managing and reducing cybersecurity risk
https://www.nist.gov/cyberframework
@githubfoam
githubfoam / zabbix experience
Last active October 9, 2025 13:44
zabbix experience
#=====================================================================
~$ cat collect_zabbix_disk_io_info.sh
#!/bin/bash
# ===============================================================
# Zabbix Disk I/O Diagnostics Collector
# ===============================================================
OUTPUT_DIR="/tmp"
HOSTNAME=$(hostname)
DATE=$(date '+%Y-%m-%d_%H-%M-%S')
@githubfoam
githubfoam / coding exercise
Last active August 9, 2024 22:06
coding exercise
----------------------------------------------------------------------------------------------------
ChatGPT
----------------------------------------------------------------------------------------------------
Gemini
----------------------------------------------------------------------------------------------------
Gemini
Big O Notation, Time and Space Complexity
Big O Notation
@githubfoam
githubfoam / windows 10 cheat sheet
Created June 12, 2024 07:22
windows 10 cheat sheet
#=====================================================================
gemini
Here are two ways to run a JNLP file on Windows 10:
Method 1: Using Java Web Start Launcher
Make sure you have Java installed: JNLP files rely on Java to run the application they describe. You can check if you have Java by searching for "java -version" in the Command Prompt or PowerShell. If you don't have it, download and install the latest version from Java download page.
Right-click on the JNLP file: Locate the JNLP file you want to run. Right-click on it.