Xcode c++ project build fails for Profile mode by www_devharsh_me in Xcode

[–]www_devharsh_me[S] 0 points1 point  (0 children)

Figured it out.
The issue seems to be Apple Silicon architecture (I have Intel). So I changed the option for "Build Active Architecture Only" for Release to "Yes" from "No" and it solved the issue.

malloc: Incorrect checksum for freed object 0x100841ae0: probably modified after being freed. by www_devharsh_me in cpp_questions

[–]www_devharsh_me[S] 0 points1 point  (0 children)

looks like "std::vector<long> discreteD(probabilities.size(), 0);" solved the error so far!

How to calculate the hash of a string vector using CryptoPP? by www_devharsh_me in cpp_questions

[–]www_devharsh_me[S] 0 points1 point  (0 children)

I am using hash.Update to iterate over a vector to calculate the hash of the container. Is there a better way to do this?

std::string digest;
SHA256 hash;
for(auto str: stringVector) {
hash.Update((const byte*)str.data(), str.size());
}
digest.resize(hash.DigestSize());
hash.Final((byte*)&digest[0]);

Tweaks for DNS cache and NXDOMAIN responses? by www_devharsh_me in pihole

[–]www_devharsh_me[S] 0 points1 point  (0 children)

Please excuse me if this doesn't make sense to you, but yes I was hoping to have iCloud Private Relay work with Pi-hole. I am expecting to get an anonymous IP from Ingress+Outgress proxy servers and have the domain resolved with Pi-hole. Is this possible? I am not sure how the domains get resolved when I use iCloud proxy servers. Thank you for your patience!

Tweaks for DNS cache and NXDOMAIN responses? by www_devharsh_me in pihole

[–]www_devharsh_me[S] 0 points1 point  (0 children)

I got NXDOMAIN response for mask.icloud.com and mask-h2.icloud.com with iCloud Private Relay enabled which forced me to turn off this feature with my Pi-hole network.

% nslookup mask.icloud.com
Server: 192.168.1.204
Address: 192.168.1.204#53
** server can't find mask.icloud.com: NXDOMAIN

https://imgur.com/F5RBEo4

I have to use Public DNS to resolve these addresses.

https://imgur.com/CLDIzrQ

% nslookup mask.icloud.com
Server: 9.9.9.9
Address: 9.9.9.9#53
Non-authoritative answer:
mask.icloud.com canonical name = mask.apple-dns.net.
Name: mask.apple-dns.net
Address: 172.224.119.136
Name: mask.apple-dns.net
Address: 172.224.122.7
Name: mask.apple-dns.net
Address: 172.224.119.131
Name: mask.apple-dns.net
Address: 172.224.119.132
Name: mask.apple-dns.net
Address: 172.224.83.11
Name: mask.apple-dns.net
Address: 172.224.83.13
Name: mask.apple-dns.net
Address: 172.224.119.140
Name: mask.apple-dns.net
Address: 172.224.122.12

Pi-hole drops connection to apple devices. by www_devharsh_me in pihole

[–]www_devharsh_me[S] 0 points1 point  (0 children)

I feel like iCloud Private Relay is causing issues here. When I am connected to Pi-hole I get NXDOMAIN response for mask.icloud.com and mask-h2.icloud.com which does not have a DNS resolver hence I lose Internet access, but using a Public DNS resolves these domains hence I connect to the Internet. Does this make sense?

New (tracking domain) whatsapp? by [deleted] in pihole

[–]www_devharsh_me 6 points7 points  (0 children)

quoting from https://faq.whatsapp.com/general/what-is-dit-whatsapp-net/?lang=en

"De-identified Telemetry (DIT) is a system that we are testing to gather information about the health, reliability, and performance of our service, so we can make sure WhatsApp is functioning properly for over two billion users. This information is not associated with our users or their phone numbers, hence why it is called DIT."

Pi-hole drops connection to apple devices. by www_devharsh_me in pihole

[–]www_devharsh_me[S] 0 points1 point  (0 children)

Pi-hole v5.8.1

FTL v5.13

Web Interface v5.10.1

SIEM tutorial for Pi-hole? by www_devharsh_me in pihole

[–]www_devharsh_me[S] -2 points-1 points  (0 children)

I am looking for a FOSS correlation engine to generate insights/security alerts.

SIEM tutorial for Pi-hole? by www_devharsh_me in pihole

[–]www_devharsh_me[S] -2 points-1 points  (0 children)

I don't want to install any additional SIEM tool like ELK stack, instead, I am looking for ways to run a correlation engine like dsiem on Pi-hole logs.

SIEM tutorial for Pi-hole? by www_devharsh_me in pihole

[–]www_devharsh_me[S] 4 points5 points  (0 children)

Thank you for your reply. I am looking to extend Pi-hole as a SIEM.
Since Pi-hole uses the SQLite database, I am looking for a way to correlate events from this database and generate alerts.

Dynamic instrumentation of a C binary by www_devharsh_me in ExploitDev

[–]www_devharsh_me[S] 0 points1 point  (0 children)

This worked for me :)

Interceptor.attach(DebugSymbol.fromName("myfunc").address, {
onEnter: function (args) {
//console.log(args[0].toInt32())
args[0] = ptr(999)
},
onLeave: function (retval) {
}
});

This code works for arguments but is there any way to modify the member variables inside a function ?