icoa-cli 2.19.458 → 2.19.460

package/refs/bash.txt

@@ -1,79 +0,0 @@
-Bash Scripting Quick Reference
-==============================
-
-VARIABLES
-  NAME="value"           Set variable (no spaces around =)
-  echo $NAME             Use variable
-  echo "${NAME}_suffix"  Variable in string
-  readonly VAR="val"     Constant
-
-CONDITIONALS
-  if [ condition ]; then
-    commands
-  elif [ condition ]; then
-    commands
-  else
-    commands
-  fi
-
-  # String comparisons
-  [ "$a" = "$b" ]        Equal
-  [ "$a" != "$b" ]       Not equal
-  [ -z "$a" ]            Empty string
-  [ -n "$a" ]            Non-empty string
-
-  # Numeric comparisons
-  [ $a -eq $b ]          Equal
-  [ $a -ne $b ]          Not equal
-  [ $a -lt $b ]          Less than
-  [ $a -gt $b ]          Greater than
-
-  # File tests
-  [ -f file ]            Regular file exists
-  [ -d dir ]             Directory exists
-  [ -r file ]            Readable
-  [ -x file ]            Executable
-
-LOOPS
-  for i in 1 2 3; do echo $i; done
-  for f in *.txt; do cat "$f"; done
-  for ((i=0; i<10; i++)); do echo $i; done
-  while read line; do echo "$line"; done < file
-  while true; do cmd; sleep 1; done
-
-FUNCTIONS
-  myfunc() {
-    echo "Arg1: $1, Arg2: $2"
-    return 0
-  }
-  myfunc "hello" "world"
-
-ARRAYS
-  arr=(one two three)
-  echo ${arr[0]}          First element
-  echo ${arr[@]}          All elements
-  echo ${#arr[@]}         Length
-
-STRING OPERATIONS
-  ${#var}                 String length
-  ${var:0:5}              Substring (offset:length)
-  ${var/old/new}          Replace first match
-  ${var//old/new}         Replace all matches
-  ${var%.ext}             Remove suffix
-  ${var#prefix}           Remove prefix
-
-SPECIAL VARIABLES
-  $0                      Script name
-  $1, $2, ...             Arguments
-  $#                      Number of arguments
-  $@                      All arguments
-  $?                      Last exit code
-  $$                      Current PID
-  $!                      Last background PID
-
-USEFUL PATTERNS
-  cmd || echo "failed"    Run on failure
-  cmd && echo "ok"        Run on success
-  $(command)              Command substitution
-  $((1 + 2))              Arithmetic
-  cmd &                   Background process

package/refs/binwalk.txt

@@ -1,43 +0,0 @@
-Binwalk Quick Reference
-=======================
-
-BASIC USAGE
-  binwalk file                   Scan for embedded files
-  binwalk -e file                Extract embedded files
-  binwalk -Me file               Recursive extraction
-  binwalk -D ".*" file           Extract all file types
-  binwalk -E file                Entropy analysis
-  binwalk -A file                Instruction scan
-  binwalk -W file1 file2         Compare files (hexdiff)
-
-EXTRACTION OPTIONS
-  binwalk -e file                Extract to ./_file.extracted/
-  binwalk -C /tmp/out -e file    Extract to custom directory
-  binwalk --dd="png:png" file    Extract specific type
-
-ENTROPY
-  binwalk -E file                Show entropy graph
-  binwalk -E -J file             Save entropy plot as PNG
-
-FILTERING
-  binwalk -y "jpeg" file         Only show JPEG signatures
-  binwalk -x "jpeg" file         Exclude JPEG signatures
-  binwalk -R "\x89PNG" file      Raw byte search
-
-COMMON CTF PATTERNS
-  # Firmware analysis
-  binwalk -Me firmware.bin
-
-  # Find hidden files in image
-  binwalk -e image.png
-
-  # Check for appended data
-  binwalk suspicious_file
-
-  # Extract filesystem from firmware
-  binwalk -e -C ./extracted firmware.bin
-
-RELATED TOOLS
-  foremost file                  Carve files by header/footer
-  foremost -t all -i file        Carve all known types
-  foremost -o output/ -i file    Output directory

package/refs/bs4.txt

@@ -1,61 +0,0 @@
-BeautifulSoup Quick Reference
-=============================
-
-INSTALLATION
-  pip install beautifulsoup4
-
-BASIC USAGE
-  from bs4 import BeautifulSoup
-
-  soup = BeautifulSoup(html, "html.parser")
-  soup = BeautifulSoup(html, "lxml")
-
-FINDING ELEMENTS
-  soup.find("tag")                First matching tag
-  soup.find_all("tag")           All matching tags
-  soup.find("div", class_="x")   By class
-  soup.find("div", id="main")    By id
-  soup.find("a", href=True)      Has attribute
-  soup.select("div.class")       CSS selector
-  soup.select("#id")             By ID selector
-  soup.select("div > p")         Direct children
-
-ELEMENT PROPERTIES
-  tag.text                 Text content
-  tag.string               Direct string content
-  tag.get_text(strip=True) Stripped text
-  tag["href"]              Attribute value
-  tag.get("href", "")      Attribute with default
-  tag.attrs                All attributes (dict)
-  tag.name                 Tag name
-
-NAVIGATION
-  tag.parent               Parent element
-  tag.children             Direct children
-  tag.descendants          All descendants
-  tag.next_sibling         Next sibling
-  tag.previous_sibling     Previous sibling
-
-COMMON CTF PATTERNS
-  # Extract all links
-  for a in soup.find_all("a"):
-      print(a.get("href"))
-
-  # Extract form fields
-  form = soup.find("form")
-  for inp in form.find_all("input"):
-      print(inp.get("name"), inp.get("value"))
-
-  # Extract hidden fields
-  hidden = soup.find_all("input", type="hidden")
-  for h in hidden:
-      print(h["name"], h["value"])
-
-  # Extract table data
-  for row in soup.find_all("tr"):
-      cells = [td.text for td in row.find_all("td")]
-      print(cells)
-
-  # Find comments
-  from bs4 import Comment
-  comments = soup.find_all(string=lambda t: isinstance(t, Comment))

package/refs/checksec.txt

@@ -1,57 +0,0 @@
-Checksec & Binary Protections Quick Reference
-==============================================
-
-CHECKSEC
-  checksec ./binary              Check all protections
-  checksec --file=./binary       Same (explicit)
-
-PROTECTIONS EXPLAINED
-
-  RELRO (Relocation Read-Only)
-    No RELRO         GOT is writable — easy GOT overwrite
-    Partial RELRO    Some sections read-only after load
-    Full RELRO       GOT fully read-only — no GOT overwrite
-
-  Stack Canary
-    No canary found  Stack buffer overflow is straightforward
-    Canary found     Random value on stack — must leak or bypass
-
-  NX (No-Execute)
-    NX disabled      Can execute shellcode on stack/heap
-    NX enabled       Stack/heap not executable — use ROP/ret2libc
-
-  PIE (Position Independent Executable)
-    No PIE           Binary at fixed address — addresses known
-    PIE enabled      ASLR for binary — need info leak
-
-  ASLR (Address Space Layout Randomization)
-    Check:  cat /proc/sys/kernel/randomize_va_space
-    0 = off, 1 = partial, 2 = full
-    Disable: echo 0 > /proc/sys/kernel/randomize_va_space
-
-PWNTOOLS CHECKSEC
-  from pwn import *
-  e = ELF("./binary")
-  # Prints protections automatically
-
-  e.pie              True/False
-  e.canary           True/False
-  e.nx               True/False
-
-FILE COMMAND
-  file ./binary      Architecture, linking, stripped?
-
-READELF
-  readelf -h binary   ELF header
-  readelf -S binary   Section headers
-  readelf -l binary   Program headers
-  readelf -s binary   Symbol table
-  readelf -d binary   Dynamic section
-  readelf -r binary   Relocations
-
-COMMON CTF STRATEGY
-  No canary + No PIE + No NX    → Direct shellcode on stack
-  No canary + No PIE + NX       → ret2libc / ROP
-  Canary + No PIE + NX          → Leak canary, then ROP
-  Canary + PIE + NX             → Leak canary + PIE base, ROP
-  Full RELRO + all protections  → Look for format string / logic bugs

package/refs/curl.txt

@@ -1,73 +0,0 @@
-cURL Quick Reference
-====================
-
-BASIC REQUESTS
-  curl URL                       GET request
-  curl -v URL                    Verbose output
-  curl -s URL                    Silent mode
-  curl -o file URL               Save to file
-  curl -O URL                    Save with original name
-  curl -L URL                    Follow redirects
-  curl -I URL                    Headers only (HEAD)
-
-HTTP METHODS
-  curl -X GET URL
-  curl -X POST URL
-  curl -X PUT URL
-  curl -X DELETE URL
-  curl -X PATCH URL
-  curl -X OPTIONS URL
-
-POST DATA
-  # Form data
-  curl -X POST -d "user=admin&pass=123" URL
-
-  # JSON
-  curl -X POST -H "Content-Type: application/json" \
-       -d '{"user":"admin"}' URL
-
-  # File upload
-  curl -X POST -F "file=@localfile.txt" URL
-
-  # Raw data from file
-  curl -X POST -d @data.json URL
-
-HEADERS
-  curl -H "Authorization: Bearer TOKEN" URL
-  curl -H "Cookie: session=abc" URL
-  curl -H "User-Agent: Mozilla/5.0" URL
-  curl -H "Content-Type: application/xml" URL
-
-AUTHENTICATION
-  curl -u user:pass URL          Basic auth
-  curl -H "Authorization: Bearer TOKEN" URL
-
-COOKIES
-  curl -c cookies.txt URL        Save cookies
-  curl -b cookies.txt URL        Send cookies
-  curl -b "name=value" URL       Send specific cookie
-
-SSL / PROXY
-  curl -k URL                    Ignore SSL errors
-  curl --proxy http://127.0.0.1:8080 URL
-  curl --proxy socks5://127.0.0.1:1080 URL
-  curl --cacert cert.pem URL     Custom CA cert
-
-USEFUL OPTIONS
-  curl -w "%{http_code}" URL     Print status code
-  curl -w "%{time_total}" URL    Print response time
-  curl --max-time 5 URL          Timeout (seconds)
-  curl -A "custom-agent" URL     Set user-agent
-
-CTF PATTERNS
-  # Test for SSRF
-  curl "http://target/fetch?url=http://127.0.0.1:8080"
-
-  # Cookie tampering
-  curl -b "role=admin" URL
-
-  # Header injection
-  curl -H "X-Forwarded-For: 127.0.0.1" URL
-
-  # Rate-limit bypass
-  for i in $(seq 1 100); do curl -s URL; done

package/refs/cyberchef.txt

@@ -1,78 +0,0 @@
-CyberChef Quick Reference
-=========================
-
-CyberChef is an encoding/decoding/analysis Swiss army knife.
-Online: https://gchq.github.io/CyberChef/
-CLI: npm install -g cyberchef-cli
-
-COMMON ENCODINGS
-  Base64 Encode/Decode
-  Base32 Encode/Decode
-  Hex Encode/Decode
-  URL Encode/Decode
-  HTML Entity Encode/Decode
-  Decimal (from/to)
-  Binary (from/to)
-  Octal (from/to)
-
-CRYPTO OPERATIONS
-  AES Encrypt/Decrypt
-  DES Encrypt/Decrypt
-  XOR (with key)
-  ROT13 / ROT47
-  Vigenère Encode/Decode
-  Caesar Cipher
-  Atbash Cipher
-  Rail Fence Cipher
-  Substitution Cipher
-
-HASHING
-  MD5 / SHA1 / SHA256 / SHA512
-  HMAC
-  CRC-16 / CRC-32
-
-DATA FORMAT
-  From/To Hex
-  From/To Base64
-  From/To Binary
-  Parse IP / URL
-  Parse JSON / XML / CSV
-
-ANALYSIS
-  Frequency Analysis
-  Entropy
-  Magic (auto-detect encoding)
-  Strings
-  Disassemble
-
-USEFUL RECIPES (for CTF)
-
-  # Multi-layer decode
-  Base64 → Hex → XOR
-
-  # ROT13
-  ROT13("Uryyb") → "Hello"
-
-  # XOR brute force
-  XOR Brute Force (key length 1)
-
-  # Magic (auto-detect)
-  Drag data → "Magic" operation → auto-detects encoding
-
-  # Extract strings
-  "Strings" operation with min length
-
-COMMAND LINE (cyberchef-cli)
-  echo "SGVsbG8=" | cyberchef "from_base64"
-  echo "48656c6c6f" | cyberchef "from_hex"
-  echo "Hello" | cyberchef "to_base64"
-  echo "data" | cyberchef "xor({'key':'secret'})"
-
-COMMON CTF WORKFLOW
-  1. Paste unknown data into CyberChef
-  2. Use "Magic" to auto-detect encoding
-  3. Chain operations (drag & drop)
-  4. Common chains:
-     - Base64 → Gunzip → output
-     - Hex → From Hex → XOR → output
-     - URL Decode → Base64 → output

package/refs/exiftool.txt

@@ -1,50 +0,0 @@
-ExifTool Quick Reference
-========================
-
-BASIC USAGE
-  exiftool file                  Show all metadata
-  exiftool -s file               Short tag names
-  exiftool -G file               Show group names
-  exiftool -json file            JSON output
-  exiftool -a -u file            All tags, including unknown
-
-SPECIFIC TAGS
-  exiftool -ImageWidth file      Single tag
-  exiftool -GPSLatitude file     GPS location
-  exiftool -Comment file         Comments
-  exiftool -Author file          Author
-  exiftool -CreateDate file      Creation date
-
-WRITE METADATA
-  exiftool -Comment="text" file  Set comment
-  exiftool -Author="name" file   Set author
-  exiftool -all= file            Remove ALL metadata
-  exiftool -overwrite_original file   Don't create backup
-
-BATCH OPERATIONS
-  exiftool *.jpg                 All JPEGs
-  exiftool -r directory/         Recursive
-  exiftool -ext jpg directory/   Only .jpg files
-
-COMPARE
-  exiftool -a -u file1 file2     Compare metadata
-
-COMMON CTF PATTERNS
-  # Check for hidden data in comments
-  exiftool -Comment image.jpg
-  exiftool -UserComment image.jpg
-
-  # Check GPS coordinates (physical location clue)
-  exiftool -GPSPosition image.jpg
-
-  # Check for steganography hints
-  exiftool -all image.png | grep -i "comment\|software\|description"
-
-  # Thumbnail extraction
-  exiftool -b -ThumbnailImage image.jpg > thumb.jpg
-
-  # Check if image was edited
-  exiftool -Software -ModifyDate image.jpg
-
-  # Hidden data in XMP
-  exiftool -xmp:all image.png

package/refs/ffuf.txt

@@ -1,73 +0,0 @@
-FFUF (Fuzz Faster U Fool) Quick Reference
-==========================================
-
-BASIC USAGE
-  ffuf -w wordlist.txt -u http://target/FUZZ
-
-DIRECTORY FUZZING
-  ffuf -w /usr/share/wordlists/dirb/common.txt \
-       -u http://target/FUZZ
-
-  ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt \
-       -u http://target/FUZZ
-
-FILE FUZZING
-  ffuf -w wordlist.txt -u http://target/FUZZ.php
-  ffuf -w wordlist.txt -u http://target/FUZZ -e .php,.html,.txt,.bak
-
-PARAMETER FUZZING
-  ffuf -w params.txt -u "http://target/page?FUZZ=test"
-  ffuf -w values.txt -u "http://target/page?param=FUZZ"
-
-POST DATA FUZZING
-  ffuf -w wordlist.txt -u http://target/login \
-       -X POST -d "user=admin&password=FUZZ" \
-       -H "Content-Type: application/x-www-form-urlencoded"
-
-HEADER FUZZING
-  ffuf -w wordlist.txt -u http://target/ \
-       -H "X-Custom-Header: FUZZ"
-
-SUBDOMAIN FUZZING
-  ffuf -w subdomains.txt -u http://FUZZ.target.com
-  ffuf -w subdomains.txt -u http://target.com \
-       -H "Host: FUZZ.target.com"
-
-VHOST FUZZING
-  ffuf -w vhosts.txt -u http://target.com \
-       -H "Host: FUZZ" -fs 4242
-
-FILTERING
-  -fc 404              Filter by status code
-  -fc 404,403          Multiple codes
-  -fs 4242             Filter by response size
-  -fw 12               Filter by word count
-  -fl 5                Filter by line count
-  -fr "Not Found"      Filter by regex
-  -mc 200              Match only status 200
-  -ms 1234             Match by size
-
-OPTIONS
-  -t 50                Threads (default 40)
-  -rate 100            Requests per second limit
-  -timeout 5           Timeout in seconds
-  -r                   Follow redirects
-  -c                   Colorize output
-  -o output.json       Save output
-  -of json             Output format
-  -v                   Verbose
-  -s                   Silent (only results)
-
-RECURSIVE
-  ffuf -w wordlist.txt -u http://target/FUZZ \
-       -recursion -recursion-depth 2
-
-MULTIPLE WORDLISTS
-  ffuf -w users.txt:USER -w passes.txt:PASS \
-       -u http://target/login \
-       -X POST -d "user=USER&pass=PASS" \
-       -mode clusterbomb
-
-MODES
-  clusterbomb          All combinations (default for multi)
-  pitchfork            Paired (line by line)

package/refs/gcc.txt

@@ -1,66 +0,0 @@
-GCC Compiler Quick Reference
-============================
-
-BASIC COMPILATION
-  gcc -o output source.c          Compile C
-  g++ -o output source.cpp        Compile C++
-  gcc -c source.c                 Compile only (no link)
-  gcc -S source.c                 Generate assembly
-  gcc -E source.c                 Preprocess only
-
-OPTIMIZATION
-  gcc -O0 source.c               No optimization (debug)
-  gcc -O1 source.c               Basic optimization
-  gcc -O2 source.c               Standard optimization
-  gcc -O3 source.c               Aggressive optimization
-  gcc -Os source.c               Optimize for size
-
-DEBUG
-  gcc -g source.c                Debug symbols (for GDB)
-  gcc -ggdb source.c             GDB-specific debug info
-
-WARNINGS
-  gcc -Wall source.c             All common warnings
-  gcc -Wextra source.c           Extra warnings
-  gcc -Werror source.c           Treat warnings as errors
-  gcc -pedantic source.c         Strict standard compliance
-
-SECURITY FLAGS
-  # Disable protections (for exploit development)
-  gcc -fno-stack-protector -z execstack -no-pie source.c -o vuln
-
-  # Disable specific protections
-  -fno-stack-protector           Disable stack canary
-  -z execstack                   Make stack executable (disable NX)
-  -no-pie                        Disable PIE
-  -Wl,-z,norelro                 Disable RELRO
-
-  # Enable protections
-  -fstack-protector-all          Enable stack canary
-  -pie -fPIE                     Enable PIE
-  -Wl,-z,relro,-z,now            Full RELRO
-  -D_FORTIFY_SOURCE=2            Buffer overflow detection
-
-LINKING
-  gcc source.c -lm               Link math library
-  gcc source.c -lpthread          Link pthreads
-  gcc source.c -lcrypto           Link OpenSSL crypto
-  gcc -static source.c            Static linking
-
-ARCHITECTURE
-  gcc -m32 source.c              Compile 32-bit
-  gcc -m64 source.c              Compile 64-bit
-  gcc -march=native source.c     Native architecture
-
-COMMON CTF PATTERNS
-  # Compile vulnerable binary for practice
-  gcc -fno-stack-protector -z execstack -no-pie -o vuln vuln.c
-
-  # Compile with debug symbols for reversing practice
-  gcc -g -O0 -o binary source.c
-
-  # Compile shellcode runner
-  gcc -z execstack -o runner runner.c
-
-  # Cross-compile
-  gcc -m32 -o binary32 source.c

package/refs/gdb.txt

@@ -1,83 +0,0 @@
-GDB / pwndbg Quick Reference
-============================
-
-STARTING
-  gdb ./binary                   Start debugging
-  gdb -q ./binary                Quiet mode
-  gdb -p PID                     Attach to process
-  gdb -args ./binary arg1 arg2   With arguments
-
-RUNNING
-  r / run                        Start program
-  r < input.txt                  With stdin from file
-  c / continue                   Continue execution
-  n / next                       Step over
-  s / step                       Step into
-  ni / si                        Next/step instruction
-  finish                         Run until return
-  kill                           Kill program
-
-BREAKPOINTS
-  b main                         Break at function
-  b *0x401000                    Break at address
-  b file.c:42                    Break at line
-  b *main+50                     Break at offset
-  info b                         List breakpoints
-  delete N                       Delete breakpoint N
-  disable N                      Disable breakpoint
-  enable N                       Enable breakpoint
-  watch *0x601000                Watchpoint (break on write)
-
-EXAMINING
-  x/10x $rsp                    10 hex words from RSP
-  x/20i $rip                    20 instructions from RIP
-  x/s addr                      String at address
-  x/10gx addr                   10 giant (64-bit) hex values
-  x/10wx addr                   10 word (32-bit) hex values
-  x/10bx addr                   10 bytes hex
-
-  p $rax                        Print register
-  p/x $rax                      Print in hex
-  p (int)$rax                   Print as int
-  info reg                      All registers
-
-MEMORY
-  vmmap                          Memory map (pwndbg)
-  search -s "flag"               Search memory for string
-  search -x 4141                 Search for hex pattern
-
-STACK
-  bt / backtrace                 Call stack
-  frame N                        Switch frame
-  info frame                     Frame details
-
-PWNDBG SPECIFIC
-  checksec                       Security mitigations
-  got                            GOT entries
-  plt                            PLT entries
-  heap                           Heap overview
-  bins                           Heap bins
-  telescope 20                   Smart stack view
-  cyclic 200                     Generate pattern
-  cyclic -l 0x41414141           Find pattern offset
-  rop                            ROP gadgets
-  canary                         Show stack canary
-  libc                           Libc base address
-
-SET VALUES
-  set $rax = 0                   Set register
-  set *(int*)0x601000 = 42       Set memory
-  set args "AAAA"                Set arguments
-
-COMMON CTF PATTERNS
-  # Find buffer overflow offset
-  cyclic 200 > pattern.txt
-  r < pattern.txt
-  # After crash:
-  cyclic -l $rsp
-
-  # Bypass check
-  b *check_password
-  r
-  set $rax = 1
-  c