icoa-cli 2.19.459 → 2.19.461

package/refs/bs4.txt

@@ -1,61 +0,0 @@
-BeautifulSoup Quick Reference
-=============================
-
-INSTALLATION
-  pip install beautifulsoup4
-
-BASIC USAGE
-  from bs4 import BeautifulSoup
-
-  soup = BeautifulSoup(html, "html.parser")
-  soup = BeautifulSoup(html, "lxml")
-
-FINDING ELEMENTS
-  soup.find("tag")                First matching tag
-  soup.find_all("tag")           All matching tags
-  soup.find("div", class_="x")   By class
-  soup.find("div", id="main")    By id
-  soup.find("a", href=True)      Has attribute
-  soup.select("div.class")       CSS selector
-  soup.select("#id")             By ID selector
-  soup.select("div > p")         Direct children
-
-ELEMENT PROPERTIES
-  tag.text                 Text content
-  tag.string               Direct string content
-  tag.get_text(strip=True) Stripped text
-  tag["href"]              Attribute value
-  tag.get("href", "")      Attribute with default
-  tag.attrs                All attributes (dict)
-  tag.name                 Tag name
-
-NAVIGATION
-  tag.parent               Parent element
-  tag.children             Direct children
-  tag.descendants          All descendants
-  tag.next_sibling         Next sibling
-  tag.previous_sibling     Previous sibling
-
-COMMON CTF PATTERNS
-  # Extract all links
-  for a in soup.find_all("a"):
-      print(a.get("href"))
-
-  # Extract form fields
-  form = soup.find("form")
-  for inp in form.find_all("input"):
-      print(inp.get("name"), inp.get("value"))
-
-  # Extract hidden fields
-  hidden = soup.find_all("input", type="hidden")
-  for h in hidden:
-      print(h["name"], h["value"])
-
-  # Extract table data
-  for row in soup.find_all("tr"):
-      cells = [td.text for td in row.find_all("td")]
-      print(cells)
-
-  # Find comments
-  from bs4 import Comment
-  comments = soup.find_all(string=lambda t: isinstance(t, Comment))

package/refs/checksec.txt

@@ -1,57 +0,0 @@
-Checksec & Binary Protections Quick Reference
-==============================================
-
-CHECKSEC
-  checksec ./binary              Check all protections
-  checksec --file=./binary       Same (explicit)
-
-PROTECTIONS EXPLAINED
-
-  RELRO (Relocation Read-Only)
-    No RELRO         GOT is writable — easy GOT overwrite
-    Partial RELRO    Some sections read-only after load
-    Full RELRO       GOT fully read-only — no GOT overwrite
-
-  Stack Canary
-    No canary found  Stack buffer overflow is straightforward
-    Canary found     Random value on stack — must leak or bypass
-
-  NX (No-Execute)
-    NX disabled      Can execute shellcode on stack/heap
-    NX enabled       Stack/heap not executable — use ROP/ret2libc
-
-  PIE (Position Independent Executable)
-    No PIE           Binary at fixed address — addresses known
-    PIE enabled      ASLR for binary — need info leak
-
-  ASLR (Address Space Layout Randomization)
-    Check:  cat /proc/sys/kernel/randomize_va_space
-    0 = off, 1 = partial, 2 = full
-    Disable: echo 0 > /proc/sys/kernel/randomize_va_space
-
-PWNTOOLS CHECKSEC
-  from pwn import *
-  e = ELF("./binary")
-  # Prints protections automatically
-
-  e.pie              True/False
-  e.canary           True/False
-  e.nx               True/False
-
-FILE COMMAND
-  file ./binary      Architecture, linking, stripped?
-
-READELF
-  readelf -h binary   ELF header
-  readelf -S binary   Section headers
-  readelf -l binary   Program headers
-  readelf -s binary   Symbol table
-  readelf -d binary   Dynamic section
-  readelf -r binary   Relocations
-
-COMMON CTF STRATEGY
-  No canary + No PIE + No NX    → Direct shellcode on stack
-  No canary + No PIE + NX       → ret2libc / ROP
-  Canary + No PIE + NX          → Leak canary, then ROP
-  Canary + PIE + NX             → Leak canary + PIE base, ROP
-  Full RELRO + all protections  → Look for format string / logic bugs

package/refs/curl.txt

@@ -1,73 +0,0 @@
-cURL Quick Reference
-====================
-
-BASIC REQUESTS
-  curl URL                       GET request
-  curl -v URL                    Verbose output
-  curl -s URL                    Silent mode
-  curl -o file URL               Save to file
-  curl -O URL                    Save with original name
-  curl -L URL                    Follow redirects
-  curl -I URL                    Headers only (HEAD)
-
-HTTP METHODS
-  curl -X GET URL
-  curl -X POST URL
-  curl -X PUT URL
-  curl -X DELETE URL
-  curl -X PATCH URL
-  curl -X OPTIONS URL
-
-POST DATA
-  # Form data
-  curl -X POST -d "user=admin&pass=123" URL
-
-  # JSON
-  curl -X POST -H "Content-Type: application/json" \
-       -d '{"user":"admin"}' URL
-
-  # File upload
-  curl -X POST -F "file=@localfile.txt" URL
-
-  # Raw data from file
-  curl -X POST -d @data.json URL
-
-HEADERS
-  curl -H "Authorization: Bearer TOKEN" URL
-  curl -H "Cookie: session=abc" URL
-  curl -H "User-Agent: Mozilla/5.0" URL
-  curl -H "Content-Type: application/xml" URL
-
-AUTHENTICATION
-  curl -u user:pass URL          Basic auth
-  curl -H "Authorization: Bearer TOKEN" URL
-
-COOKIES
-  curl -c cookies.txt URL        Save cookies
-  curl -b cookies.txt URL        Send cookies
-  curl -b "name=value" URL       Send specific cookie
-
-SSL / PROXY
-  curl -k URL                    Ignore SSL errors
-  curl --proxy http://127.0.0.1:8080 URL
-  curl --proxy socks5://127.0.0.1:1080 URL
-  curl --cacert cert.pem URL     Custom CA cert
-
-USEFUL OPTIONS
-  curl -w "%{http_code}" URL     Print status code
-  curl -w "%{time_total}" URL    Print response time
-  curl --max-time 5 URL          Timeout (seconds)
-  curl -A "custom-agent" URL     Set user-agent
-
-CTF PATTERNS
-  # Test for SSRF
-  curl "http://target/fetch?url=http://127.0.0.1:8080"
-
-  # Cookie tampering
-  curl -b "role=admin" URL
-
-  # Header injection
-  curl -H "X-Forwarded-For: 127.0.0.1" URL
-
-  # Rate-limit bypass
-  for i in $(seq 1 100); do curl -s URL; done

package/refs/cyberchef.txt

@@ -1,78 +0,0 @@
-CyberChef Quick Reference
-=========================
-
-CyberChef is an encoding/decoding/analysis Swiss army knife.
-Online: https://gchq.github.io/CyberChef/
-CLI: npm install -g cyberchef-cli
-
-COMMON ENCODINGS
-  Base64 Encode/Decode
-  Base32 Encode/Decode
-  Hex Encode/Decode
-  URL Encode/Decode
-  HTML Entity Encode/Decode
-  Decimal (from/to)
-  Binary (from/to)
-  Octal (from/to)
-
-CRYPTO OPERATIONS
-  AES Encrypt/Decrypt
-  DES Encrypt/Decrypt
-  XOR (with key)
-  ROT13 / ROT47
-  Vigenère Encode/Decode
-  Caesar Cipher
-  Atbash Cipher
-  Rail Fence Cipher
-  Substitution Cipher
-
-HASHING
-  MD5 / SHA1 / SHA256 / SHA512
-  HMAC
-  CRC-16 / CRC-32
-
-DATA FORMAT
-  From/To Hex
-  From/To Base64
-  From/To Binary
-  Parse IP / URL
-  Parse JSON / XML / CSV
-
-ANALYSIS
-  Frequency Analysis
-  Entropy
-  Magic (auto-detect encoding)
-  Strings
-  Disassemble
-
-USEFUL RECIPES (for CTF)
-
-  # Multi-layer decode
-  Base64 → Hex → XOR
-
-  # ROT13
-  ROT13("Uryyb") → "Hello"
-
-  # XOR brute force
-  XOR Brute Force (key length 1)
-
-  # Magic (auto-detect)
-  Drag data → "Magic" operation → auto-detects encoding
-
-  # Extract strings
-  "Strings" operation with min length
-
-COMMAND LINE (cyberchef-cli)
-  echo "SGVsbG8=" | cyberchef "from_base64"
-  echo "48656c6c6f" | cyberchef "from_hex"
-  echo "Hello" | cyberchef "to_base64"
-  echo "data" | cyberchef "xor({'key':'secret'})"
-
-COMMON CTF WORKFLOW
-  1. Paste unknown data into CyberChef
-  2. Use "Magic" to auto-detect encoding
-  3. Chain operations (drag & drop)
-  4. Common chains:
-     - Base64 → Gunzip → output
-     - Hex → From Hex → XOR → output
-     - URL Decode → Base64 → output

package/refs/exiftool.txt

@@ -1,50 +0,0 @@
-ExifTool Quick Reference
-========================
-
-BASIC USAGE
-  exiftool file                  Show all metadata
-  exiftool -s file               Short tag names
-  exiftool -G file               Show group names
-  exiftool -json file            JSON output
-  exiftool -a -u file            All tags, including unknown
-
-SPECIFIC TAGS
-  exiftool -ImageWidth file      Single tag
-  exiftool -GPSLatitude file     GPS location
-  exiftool -Comment file         Comments
-  exiftool -Author file          Author
-  exiftool -CreateDate file      Creation date
-
-WRITE METADATA
-  exiftool -Comment="text" file  Set comment
-  exiftool -Author="name" file   Set author
-  exiftool -all= file            Remove ALL metadata
-  exiftool -overwrite_original file   Don't create backup
-
-BATCH OPERATIONS
-  exiftool *.jpg                 All JPEGs
-  exiftool -r directory/         Recursive
-  exiftool -ext jpg directory/   Only .jpg files
-
-COMPARE
-  exiftool -a -u file1 file2     Compare metadata
-
-COMMON CTF PATTERNS
-  # Check for hidden data in comments
-  exiftool -Comment image.jpg
-  exiftool -UserComment image.jpg
-
-  # Check GPS coordinates (physical location clue)
-  exiftool -GPSPosition image.jpg
-
-  # Check for steganography hints
-  exiftool -all image.png | grep -i "comment\|software\|description"
-
-  # Thumbnail extraction
-  exiftool -b -ThumbnailImage image.jpg > thumb.jpg
-
-  # Check if image was edited
-  exiftool -Software -ModifyDate image.jpg
-
-  # Hidden data in XMP
-  exiftool -xmp:all image.png

package/refs/ffuf.txt

@@ -1,73 +0,0 @@
-FFUF (Fuzz Faster U Fool) Quick Reference
-==========================================
-
-BASIC USAGE
-  ffuf -w wordlist.txt -u http://target/FUZZ
-
-DIRECTORY FUZZING
-  ffuf -w /usr/share/wordlists/dirb/common.txt \
-       -u http://target/FUZZ
-
-  ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt \
-       -u http://target/FUZZ
-
-FILE FUZZING
-  ffuf -w wordlist.txt -u http://target/FUZZ.php
-  ffuf -w wordlist.txt -u http://target/FUZZ -e .php,.html,.txt,.bak
-
-PARAMETER FUZZING
-  ffuf -w params.txt -u "http://target/page?FUZZ=test"
-  ffuf -w values.txt -u "http://target/page?param=FUZZ"
-
-POST DATA FUZZING
-  ffuf -w wordlist.txt -u http://target/login \
-       -X POST -d "user=admin&password=FUZZ" \
-       -H "Content-Type: application/x-www-form-urlencoded"
-
-HEADER FUZZING
-  ffuf -w wordlist.txt -u http://target/ \
-       -H "X-Custom-Header: FUZZ"
-
-SUBDOMAIN FUZZING
-  ffuf -w subdomains.txt -u http://FUZZ.target.com
-  ffuf -w subdomains.txt -u http://target.com \
-       -H "Host: FUZZ.target.com"
-
-VHOST FUZZING
-  ffuf -w vhosts.txt -u http://target.com \
-       -H "Host: FUZZ" -fs 4242
-
-FILTERING
-  -fc 404              Filter by status code
-  -fc 404,403          Multiple codes
-  -fs 4242             Filter by response size
-  -fw 12               Filter by word count
-  -fl 5                Filter by line count
-  -fr "Not Found"      Filter by regex
-  -mc 200              Match only status 200
-  -ms 1234             Match by size
-
-OPTIONS
-  -t 50                Threads (default 40)
-  -rate 100            Requests per second limit
-  -timeout 5           Timeout in seconds
-  -r                   Follow redirects
-  -c                   Colorize output
-  -o output.json       Save output
-  -of json             Output format
-  -v                   Verbose
-  -s                   Silent (only results)
-
-RECURSIVE
-  ffuf -w wordlist.txt -u http://target/FUZZ \
-       -recursion -recursion-depth 2
-
-MULTIPLE WORDLISTS
-  ffuf -w users.txt:USER -w passes.txt:PASS \
-       -u http://target/login \
-       -X POST -d "user=USER&pass=PASS" \
-       -mode clusterbomb
-
-MODES
-  clusterbomb          All combinations (default for multi)
-  pitchfork            Paired (line by line)

package/refs/gcc.txt

@@ -1,66 +0,0 @@
-GCC Compiler Quick Reference
-============================
-
-BASIC COMPILATION
-  gcc -o output source.c          Compile C
-  g++ -o output source.cpp        Compile C++
-  gcc -c source.c                 Compile only (no link)
-  gcc -S source.c                 Generate assembly
-  gcc -E source.c                 Preprocess only
-
-OPTIMIZATION
-  gcc -O0 source.c               No optimization (debug)
-  gcc -O1 source.c               Basic optimization
-  gcc -O2 source.c               Standard optimization
-  gcc -O3 source.c               Aggressive optimization
-  gcc -Os source.c               Optimize for size
-
-DEBUG
-  gcc -g source.c                Debug symbols (for GDB)
-  gcc -ggdb source.c             GDB-specific debug info
-
-WARNINGS
-  gcc -Wall source.c             All common warnings
-  gcc -Wextra source.c           Extra warnings
-  gcc -Werror source.c           Treat warnings as errors
-  gcc -pedantic source.c         Strict standard compliance
-
-SECURITY FLAGS
-  # Disable protections (for exploit development)
-  gcc -fno-stack-protector -z execstack -no-pie source.c -o vuln
-
-  # Disable specific protections
-  -fno-stack-protector           Disable stack canary
-  -z execstack                   Make stack executable (disable NX)
-  -no-pie                        Disable PIE
-  -Wl,-z,norelro                 Disable RELRO
-
-  # Enable protections
-  -fstack-protector-all          Enable stack canary
-  -pie -fPIE                     Enable PIE
-  -Wl,-z,relro,-z,now            Full RELRO
-  -D_FORTIFY_SOURCE=2            Buffer overflow detection
-
-LINKING
-  gcc source.c -lm               Link math library
-  gcc source.c -lpthread          Link pthreads
-  gcc source.c -lcrypto           Link OpenSSL crypto
-  gcc -static source.c            Static linking
-
-ARCHITECTURE
-  gcc -m32 source.c              Compile 32-bit
-  gcc -m64 source.c              Compile 64-bit
-  gcc -march=native source.c     Native architecture
-
-COMMON CTF PATTERNS
-  # Compile vulnerable binary for practice
-  gcc -fno-stack-protector -z execstack -no-pie -o vuln vuln.c
-
-  # Compile with debug symbols for reversing practice
-  gcc -g -O0 -o binary source.c
-
-  # Compile shellcode runner
-  gcc -z execstack -o runner runner.c
-
-  # Cross-compile
-  gcc -m32 -o binary32 source.c

package/refs/gdb.txt

@@ -1,83 +0,0 @@
-GDB / pwndbg Quick Reference
-============================
-
-STARTING
-  gdb ./binary                   Start debugging
-  gdb -q ./binary                Quiet mode
-  gdb -p PID                     Attach to process
-  gdb -args ./binary arg1 arg2   With arguments
-
-RUNNING
-  r / run                        Start program
-  r < input.txt                  With stdin from file
-  c / continue                   Continue execution
-  n / next                       Step over
-  s / step                       Step into
-  ni / si                        Next/step instruction
-  finish                         Run until return
-  kill                           Kill program
-
-BREAKPOINTS
-  b main                         Break at function
-  b *0x401000                    Break at address
-  b file.c:42                    Break at line
-  b *main+50                     Break at offset
-  info b                         List breakpoints
-  delete N                       Delete breakpoint N
-  disable N                      Disable breakpoint
-  enable N                       Enable breakpoint
-  watch *0x601000                Watchpoint (break on write)
-
-EXAMINING
-  x/10x $rsp                    10 hex words from RSP
-  x/20i $rip                    20 instructions from RIP
-  x/s addr                      String at address
-  x/10gx addr                   10 giant (64-bit) hex values
-  x/10wx addr                   10 word (32-bit) hex values
-  x/10bx addr                   10 bytes hex
-
-  p $rax                        Print register
-  p/x $rax                      Print in hex
-  p (int)$rax                   Print as int
-  info reg                      All registers
-
-MEMORY
-  vmmap                          Memory map (pwndbg)
-  search -s "flag"               Search memory for string
-  search -x 4141                 Search for hex pattern
-
-STACK
-  bt / backtrace                 Call stack
-  frame N                        Switch frame
-  info frame                     Frame details
-
-PWNDBG SPECIFIC
-  checksec                       Security mitigations
-  got                            GOT entries
-  plt                            PLT entries
-  heap                           Heap overview
-  bins                           Heap bins
-  telescope 20                   Smart stack view
-  cyclic 200                     Generate pattern
-  cyclic -l 0x41414141           Find pattern offset
-  rop                            ROP gadgets
-  canary                         Show stack canary
-  libc                           Libc base address
-
-SET VALUES
-  set $rax = 0                   Set register
-  set *(int*)0x601000 = 42       Set memory
-  set args "AAAA"                Set arguments
-
-COMMON CTF PATTERNS
-  # Find buffer overflow offset
-  cyclic 200 > pattern.txt
-  r < pattern.txt
-  # After crash:
-  cyclic -l $rsp
-
-  # Bypass check
-  b *check_password
-  r
-  set $rax = 1
-  c

package/refs/hashcat.txt

@@ -1,64 +0,0 @@
-Hashcat Quick Reference
-=======================
-
-BASIC USAGE
-  hashcat -m MODE hash.txt wordlist.txt
-  hashcat -m MODE hash.txt -a 3 ?a?a?a?a?a   (brute force)
-
-COMMON HASH MODES (-m)
-  0       MD5
-  100     SHA1
-  1400    SHA256
-  1700    SHA512
-  1800    sha512crypt ($6$)
-  3200    bcrypt
-  1000    NTLM
-  5600    NetNTLMv2
-  13100   Kerberos TGS-REP (Kerberoast)
-  22000   WPA-PBKDF2-PMKID+EAPOL
-  500     MD5crypt ($1$)
-  7400    SHA256crypt ($5$)
-  11600   7-Zip
-  13400   KeePass
-  16800   WPA-PMKID-PBKDF2
-
-ATTACK MODES (-a)
-  0       Dictionary (wordlist)
-  1       Combination (word1+word2)
-  3       Brute-force / mask
-  6       Wordlist + mask
-  7       Mask + wordlist
-
-MASK CHARSETS
-  ?l      Lowercase [a-z]
-  ?u      Uppercase [A-Z]
-  ?d      Digits [0-9]
-  ?s      Special chars
-  ?a      All printable
-  ?b      All bytes (0x00-0xff)
-
-RULES
-  hashcat -m 0 hash.txt wordlist.txt -r rules/best64.rule
-  hashcat -m 0 hash.txt wordlist.txt -r rules/rockyou-30000.rule
-
-OPTIONS
-  --show                  Show cracked passwords
-  --force                 Ignore warnings
-  -o output.txt           Output file
-  -w 3                    Workload profile (1-4)
-  --potfile-disable       Don't use potfile
-  --username               Hash file has usernames
-  -O                      Optimized kernels
-
-COMMON CTF PATTERNS
-  # MD5 dictionary
-  hashcat -m 0 hash.txt /usr/share/wordlists/rockyou.txt
-
-  # SHA256 with rules
-  hashcat -m 1400 hash.txt wordlist.txt -r rules/best64.rule
-
-  # Brute force 6-char alphanumeric
-  hashcat -m 0 hash.txt -a 3 ?a?a?a?a?a?a
-
-  # Known format: flag{????}
-  hashcat -m 0 hash.txt -a 3 "flag{?a?a?a?a}"

package/refs/hint.txt

@@ -1,48 +0,0 @@
-AI Hint System Reference
-========================
-
-LEVELS
-  Level A — General Guidance (50 uses)
-    - Conceptual direction only
-    - No specific vulnerability names
-    - No code or commands
-    - Guides you with questions
-
-  Level B — Deep Analysis (10 uses)
-    - May identify vulnerability types
-    - May suggest tool categories
-    - No complete commands
-    - No exploit code
-
-  Level C — Critical Assist (2 uses)
-    - Key conceptual breakthrough
-    - May name specific algorithms
-    - No complete exploit code
-    - No flags
-    - Requires confirmation before use
-
-COMMANDS
-  hint <question>        Level A hint
-  hint-b <question>      Level B hint
-  hint-c <question>      Level C hint (requires confirmation)
-  hint budget            Check remaining budget
-
-USAGE TIPS
-  1. Open a challenge first: open <id>
-     This sets context for better hints.
-
-  2. Be specific in your question:
-     BAD:  "how do I solve this?"
-     GOOD: "what type of vulnerability might be in a login form
-            that doesn't sanitize input?"
-
-  3. Start with Level A — it's cheap (50 uses).
-     Only escalate to B/C when A isn't enough.
-
-  4. Check your budget: hint budget
-
-TOKEN CAP
-  All AI usage shares a 50,000 token cap.
-  Level A uses ~500 tokens per query.
-  Level B uses ~1000 tokens per query.
-  Level C uses ~1500 tokens per query.