j4ckfruit

easily install macos 14 on windows (vmware)

2024-11-19T00:00:00+00:00

1. first, download vmware 17 <<- google it

2. download macOS 14 iso
https://drive.google.com/file/d/1FdocBt9nSuqGmNWpwkIWqXi7FbuBd8P3/view

3. download unlocker 4
https://github.com/DrDonk/unlocker/releases/download/v4.2.7/unlocker427.zip

4. install vmware 17

5. run unlocker 4 with:
.\unlock.exe
.\check.exe

# ideal .\check.exe result:
Checker 4.2.7 for VMware Workstation/Player
============================================

VMware is installed at:  C:\Program Files (x86)\VMware\VMware Workstation\
VMware version:  20800274
Patch Status: Patched (1)
SHA256: fda33caabab694c11ecd0fe5856f9d1dfd8f3dd443be8c51f8cef8ee5891ce59
Patch Status: Patched (1)
SHA256: a224c5951d4bcb0beffcdd9751084307011433620269387a0af09b1679664e1a
Patch Status: Patched (1)
SHA256: efb2d80800eebadda0448ac254b35f8da5325523cd410f01ccb7bb21dc1f0129
Patch Status: Patched (1)
SHA256: 6c724c837efb33d5d0389576cb344c26f00bbf2cd277f81ff4bbf8ad3b089385

6. now create new VM on vmware 17
Guest operating system: Apple Mac OS X > macOS 14
Max disk size: 100 GB
RAM: 8 GB
Processors: 1 proc, 6 cores
New CD/DVD (SATA): path/to/your/macOS14.iso <<-- IMPORTANT!!
everything else default

7. now startup the VM

8. after choosing Mac OS Language, you will be presented with 4 options: Restore, Install, Safari, Disk Utility

9. CHOOSE DISK UTILITY <<-- IMPORTANT!!

10. Erase VMWare Virtual SATA Hard Drive Media

11. once done, continue with Install Sonoma

12. notice that your NAT isn't working

13. after install, shut down VM

14. open the vmx file in notepad

15. apply the following changes:
smc.version = "0" <<-- APPEND TO BOTTOM
ethernet0.virtualDev = "vmxnet3" <<-- CHANGE EXISTING VALUE

16. startup the VM again, install VMware tools from the VMware top menu

optimize macOS vm (optional) sauce

sudo mdutil -i off -a
sudo defaults write /Library/Preferences/com.apple.loginwindow DesktopPicture ""
defaults write com.apple.Accessibility DifferentiateWithoutColor -int 1
defaults write com.apple.Accessibility ReduceMotionEnabled -int 1
defaults write com.apple.universalaccess reduceMotion -int 1
defaults write com.apple.universalaccess reduceTransparency -int 1

disable updates (also optional)

sudo su
defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload -bool false
defaults write com.apple.SoftwareUpdate AutomaticCheckEnabled -bool false
defaults write com.apple.commerce AutoUpdate -bool false
defaults write com.apple.commerce AutoUpdateRestartRequired -bool false
defaults write com.apple.SoftwareUpdate ConfigDataInstall -int 0
defaults write com.apple.SoftwareUpdate CriticalUpdateInstall -int 0
defaults write com.apple.SoftwareUpdate ScheduleFrequency -int 0
defaults write com.apple.SoftwareUpdate AutomaticDownload -int 0

easily blur text in ms word

2023-10-28T00:00:00+00:00

put all your text into a textbox
copy and paste *as an image*
right-click image, Format Picture
go to "Picture Corrections" tab
reduce Sharpness

how javascript treats hyphens (xss tips)

2023-07-08T00:00:00+00:00

sauce

The code that the site uses is:

let jeff = (new URL(location).searchParams.get('jeff') || "JEFFF")
eval(`ma = "Ma name ${jeff}"`)

Note that searchParams gives you a URLSearchParams object, and its .get method gives you a string corresponding to the parameter. So, the objective is to come up with some characters that, when inserted into

ma = "Ma name "

and run, results in arbitrary code execution.
First step is to surround the characters in “s, so as to end the string literal after the name and resume a string literal after the CHARACTERS:

ma = "Ma name " <SOMETHING ELSE> ""

So now you need to figure out what sort of characters can go into which will result in valid Javascript code. If you just put in alert(), that won't be valid:

ma = "Ma name " alert() ""

That’s a syntax error. You need something to indicate what the alert has to do with the string literal token that comes just before it. A - can do the trick, but so could any other operator, like +, %, and so on. You also need to connect the end of the alert with the resumed string literal, thus the need for another operator at the end:

ma = "Ma name "-alert('foo')-""

So, the characters that need to be inserted are:

"-alert('foo')-"

Note that because the string is delivered inside of a search parameter, a + won’t be interpreted as the literal character + - rather, it’ll be interpreted as a space. So jeff=”+alert(1337)+” won’t work, but jeff=”%2balert(1337)%2b” will.
Semicolons work as well, because they result in:

ma = "Ma name " <SOMETHING ELSE> ""
ma = "Ma name "; alert()        ;""

which is valid syntax.

aws va tool commands

2023-06-29T00:00:00+00:00

first make sure you’re in venv

python3 -m venv /opt/venv
source /opt/venv/bin/activate

prowler

# setup
pip install prowler

# run
prowler aws -p  -M csv json

scoutsuite

# setup
# note: scoutsuite supports only up till python3.8 - so will have to use separate python3.8 venv
# note: best to run in ubuntu
sudo apt update
sudo apt install software-properties-common
sudo add-apt-repository ppa:deadsnakes/ppa
sudo apt install python3.8
sudo apt install python3.8-venv
python3.8 -m venv /opt/venv-3.8
source /opt/venv-3.8/bin/activate
pip install scoutsuite
scout --help

# run
scout aws --profile  --region ap-southeast-1

cloudsploit

# setup
# note: cloudsploit runs on nodejs
sudo apt install nodejs
sudo apt install npm
cd /opt
git clone https://github.com/aquasecurity/cloudsploit.git
cd cloudsploit
npm install

# run
nodejs ./index.js --csv=cloudsploit.csv --console=none

easily unmerge cells in ms excel

2023-06-28T00:00:00+00:00

frustrated when merged cells screw up the functionality of a spreadsheet? worry no more

highlight the cell(s) you want to unmerge. feel free to select all that you want
home > down button at "merge and center" > unmerge cells
now your cells should be unmerged, but with empty rows below top row. keep the cells selected.
home > find & select > go to special
inside "go to special", select blanks. click ok
now all the blanks are selected
type: = + up button
now all the blank cells are pointing to one row up
press: ctrl + enter
voila

easily fix ms word sub-headers

2023-05-17T00:00:00+00:00

frustrated when new sub-header isn’t following top-level header? sauce

Select a heading, then select Home > Paragraph > Multilevel List > Define new Multilevel List...

Click on More >> at the bottom left of the dialog box.

Make sure everything is set properly in the "Enter formatting for number" textbox by setting the number style and "Include level number from" listbox. Ensure that "Restart list after" is set for the previous list level than thhe one you're editing.

useful bash trix

2023-05-07T00:00:00+00:00

bash bulk change prefix sauce

for f in TestSR*; do mv "$f" "CL${f#TestSR}"; done

bash delete empty files in current dir sauce

find . -type f -empty -print -delete

burp setup cheatsheet

2023-03-11T00:00:00+00:00

keep all subdomains within a primary domain in scope (e.g. *.web-security-academy.net)

# target > scope settings > check "advanced scope control" > add:
# key regex: .*.web-security-academy.net

protocol: https (or anything)
host or ip range: .*.web-security-academy.net (note: this is a regex)
port: 
file: 

load jython sauce

1. download jython standalone -> https://www.jython.org/download.html
2. go to Extensions > Extension Settings > Python environment > select location of Jython standalone jar file

useful extensions

ActiveScan++
Autowasp
Content Type Converter
Copy As Python-Requests
Hackverter
ViewState Editor

sed cheatsheet

2023-03-06T00:00:00+00:00

with pipe, replace space with nothing

cat wow.txt | cut -d":" -f2 | sed -En "s/\s//p"

with pipe, remove colour codes

sed -r "s/\x1B\[([0-9]{1,3}(;[0-9]{1,2};?)?)?[mGK]//g"

force win11 to show more options

2023-03-05T00:00:00+00:00

sauce

open admin cmd prompt

reg add HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32 /ve /d "" /f

restart