Merge branch 'HackTricks-wiki:master' into master

Author: JaimePolop

.github/workflows/build_master.yml

@@ -88,9 +88,28 @@ jobs:
           RATIO=$(awk "BEGIN {printf \"%.1f\", ($COMPRESSED_SIZE / $ORIGINAL_SIZE) * 100}")
           echo "Compression: ${ORIGINAL_SIZE} bytes -> ${COMPRESSED_SIZE} bytes (${RATIO}%)"
           
-          # Copy ONLY the .gz version to the searchindex repo (no uncompressed .js)
+          # XOR encrypt the compressed file
+          KEY='Prevent_Online_AVs_From_Flagging_HackTricks_Search_Gzip_As_Malicious_394h7gt8rf9u3rf9g'
+          cat > /tmp/xor_encrypt.py << 'EOF'
+          import sys
+          key = sys.argv[1]
+          input_file = sys.argv[2]
+          output_file = sys.argv[3]
+          with open(input_file, 'rb') as f:
+              data = f.read()
+          key_bytes = key.encode('utf-8')
+          encrypted = bytearray(len(data))
+          for i in range(len(data)):
+              encrypted[i] = data[i] ^ key_bytes[i % len(key_bytes)]
+          with open(output_file, 'wb') as f:
+              f.write(encrypted)
+          print(f"Encrypted: {len(data)} bytes")
+          EOF
+          python3 /tmp/xor_encrypt.py "$KEY" "${ASSET}.gz" "${ASSET}.gz.enc"
+          
+          # Copy ONLY the encrypted .gz version to the searchindex repo (no uncompressed .js)
           cd /tmp/searchindex-repo
-          cp "${GITHUB_WORKSPACE}/${ASSET}.gz" "${FILENAME}.gz"
+          cp "${GITHUB_WORKSPACE}/${ASSET}.gz.enc" "${FILENAME}.gz"
           
           # Stage all files
           git add -A

.github/workflows/translate_all.yml

@@ -184,8 +184,27 @@ jobs:
           RATIO=$(awk "BEGIN {printf \"%.1f\", ($COMPRESSED_SIZE / $ORIGINAL_SIZE) * 100}")
           echo "Compression: ${ORIGINAL_SIZE} bytes -> ${COMPRESSED_SIZE} bytes (${RATIO}%)"
           
-          # Copy ONLY the .gz version to the searchindex repo (no uncompressed .js)
-          cp "${ASSET}.gz" "/tmp/searchindex-repo/${FILENAME}.gz"
+          # XOR encrypt the compressed file
+          KEY='Prevent_Online_AVs_From_Flagging_HackTricks_Search_Gzip_As_Malicious_394h7gt8rf9u3rf9g'
+          cat > /tmp/xor_encrypt.py << 'EOF'
+          import sys
+          key = sys.argv[1]
+          input_file = sys.argv[2]
+          output_file = sys.argv[3]
+          with open(input_file, 'rb') as f:
+              data = f.read()
+          key_bytes = key.encode('utf-8')
+          encrypted = bytearray(len(data))
+          for i in range(len(data)):
+              encrypted[i] = data[i] ^ key_bytes[i % len(key_bytes)]
+          with open(output_file, 'wb') as f:
+              f.write(encrypted)
+          print(f"Encrypted: {len(data)} bytes")
+          EOF
+          python3 /tmp/xor_encrypt.py "$KEY" "${ASSET}.gz" "${ASSET}.gz.enc" 
+          
+          # Copy ONLY the encrypted .gz version to the searchindex repo (no uncompressed .js)
+          cp "${ASSET}.gz.enc" "/tmp/searchindex-repo/${FILENAME}.gz"
           
           # Commit and push with retry logic
           cd /tmp/searchindex-repo
@@ -224,8 +243,8 @@ jobs:
                       git config user.name "GitHub Actions"
                       git config user.email "github-actions@github.com"
                       
-                      # Re-copy ONLY the .gz version (no uncompressed .js)
-                      cp "${ASSET}.gz" "${FILENAME}.gz"
+                      # Re-copy ONLY the encrypted .gz version (no uncompressed .js)
+                      cp "${ASSET}.gz.enc" "${FILENAME}.gz"
                       
                       git add "${FILENAME}.gz"
                       git commit -m "Update ${FILENAME}.gz from hacktricks-cloud build"

src/pentesting-cloud/aws-security/aws-services/aws-sagemaker-enum/README.md

@@ -205,7 +205,7 @@ aws sagemaker list-jumpstart-script-resources --region $REGION
 ## Unauthorized Access
 
 {{#ref}}
-../aws-sagemaker-unauthenticated-enum/README.md
+../../aws-unauthenticated-enum-access/aws-sagemaker-unauthenticated-enum/README.md
 {{#endref}}
 
 ## References

theme/ht_searcher.js

@@ -21,7 +21,17 @@
       try { importScripts('https://cdn.jsdelivr.net/npm/elasticlunr@0.9.5/elasticlunr.min.js'); }
       catch { importScripts(abs('/elasticlunr.min.js')); }
   
-    /* 2 — decompress gzip data */
+    /* 2 — XOR decryption function */
+    function xorDecrypt(encryptedData, key){
+      const keyBytes = new TextEncoder().encode(key);
+      const decrypted = new Uint8Array(encryptedData.length);
+      for(let i = 0; i < encryptedData.length; i++){
+        decrypted[i] = encryptedData[i] ^ keyBytes[i % keyBytes.length];
+      }
+      return decrypted.buffer;
+    }
+
+    /* 3 — decompress gzip data */
     async function decompressGzip(arrayBuffer){
       if(typeof DecompressionStream !== 'undefined'){
         /* Modern browsers: use native DecompressionStream */
@@ -40,21 +50,25 @@
       }
     }
 
-    /* 3 — load a single index (remote → local) */
+    /* 4 — load a single index (remote → local) */
     async function loadIndex(remote, local, isCloud=false){
+      const XOR_KEY = "Prevent_Online_AVs_From_Flagging_HackTricks_Search_Gzip_As_Malicious_394h7gt8rf9u3rf9g";
       let rawLoaded = false;
       if(remote){
         /* Try ONLY compressed version from GitHub (remote already includes .js.gz) */
         try {
           const r = await fetch(remote,{mode:'cors'});
           if (r.ok) {
-            const compressed = await r.arrayBuffer();
+            const encryptedCompressed = await r.arrayBuffer();
+            /* Decrypt first */
+            const compressed = xorDecrypt(new Uint8Array(encryptedCompressed), XOR_KEY);
+            /* Then decompress */
             const text = await decompressGzip(compressed);
             importScripts(URL.createObjectURL(new Blob([text],{type:'application/javascript'})));
             rawLoaded = true;
-            console.log('Loaded compressed from GitHub:',remote);
+            console.log('Loaded encrypted+compressed from GitHub:',remote);
           }
-        } catch(e){ console.warn('compressed GitHub',remote,'failed →',e); }
+        } catch(e){ console.warn('encrypted+compressed GitHub',remote,'failed →',e); }
       }
       /* If remote (GitHub) failed, fall back to local uncompressed file */
       if(!rawLoaded && local){