OSX commands equivalent to Linux commands

OSX                Linux
====               =====
disktool -l        fdisk -l

R3gEx

Grep for IP Addresses:
=======================
Only the IP:
------------
grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' file.txt

Only one IP and ONLY if it is at the beginning of the line:
------------------------------------------------------------
grep '^[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}$' file.txt

Any IP and the rest of the line it is one:
-------------------------------------------
grep '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' file.txt

Convert sequential lines of text to space delimitated list:
============================================================
perl -pe 's/\s*$/ /' filename.txt

Sort IP's properly:
=====================
sort -t . -k 1,1n -k 2,2n -k 3,3n -k 4,4n

Display only unique IP's from above sort command:
==================================================
| uniq

Remove all white space from left to first word:
================================================
cat | sed -e 's/^[ \t]*//'

INetSim

http://www.inetsim.org/features.html

Java Script:

• Unpacker
• Decoding (easy)
  

Code injection:

• C example
  

Sandb0x3n:

Local:

• Truman
• ZeroWine
  

Online:

• EUREKA! (MRI)
  

• GFI Sandbox
  

Anti-Virus info:

• Norton Power Eraser
• Interpreting Symantec AV Logs
  

ZOMG - "CYBER WEAPONS"!!! If only there were a blog that would Really Justify Bulletins such as this... Dear _cyber_ blog...

http://www.businessweek.com/printer/magazine/cyber-weapons-the-new-arms-race-07212011.html

Escape raw HTML

www.accessify.com/tools-and-wizards/developer-tools/quick-escape/default.php

SMBMOUNT

* boot machine with sleuthkit, smbfs, clamav (w/updated definitions), etc.

* mkdir -p /data/<casenum>/<dir/code name as listed on file server>/ /work/<casenum>/<partnums(s)>/

* smbmount //192.168.8.103/<dir/code name from file sever /data/<casenum/<dir/code name>/ -o username=user,password=pass,ro

* run mmls on image file: mmls /data/<casenum/<dir/code name>/image.dd

* find offset of partitions to mount - start sector (63) * default block size (512) = 32256 (for first partition)

* mount -o loop,ro,noexec,nodev,offset=32256 /data/<casenum>/<dir/code name>/image.dd /work/<casenum>/<partnum>/

Local Ubuntu package repository

So I am trying to figure out the best way to create a local repository for Ubuntu (yes I am ashamed it is not for Debian) - Natty. So far I have come across this command for pulling down the packages - debmirror -v --host=archive.ubuntu.com --method=http --root=ubuntu --arch=i386 --dist=natty,natty-updates,natty-security --section=main,multiverse,restricted,universe --nosource --passive natty --ignore-release-gpg

Still working/researching if this is the best way and then how to point all the non-internet accessible machines to the one machine that debmirror was run on. Suggestions welcome!

Merging/Splitting PDF's

http://www.pdfsam.org/

Performing bulk whois/ASN lookups

http://www.team-cymru.org/Services/ip-to-asn.html

Wind0ze Commands of possible relevance.

~Uptime:
========
systeminfo | find "Time"

Merge split files (like Unix cat):
==================================
copy /B file1+file2+file3 entirefile.out