This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!DOCTYPE html> | |
| <html lang="en"> | |
| <head> | |
| <meta charset="UTF-8"> | |
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> | |
| <title>URL Checker - SSRF Demo</title> | |
| <script src="https://cdn.tailwindcss.com"></script> | |
| <style> | |
| @import url('https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600&display=swap'); | |
AlexanderHose
/ chatbot-assume-rule.json
Created
December 11, 2022 12:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Sid": "", | |
| "Effect": "Allow", | |
| "Principal": { | |
| "Service": "chatbot.amazonaws.com" | |
| }, | |
| "Action": "sts:AssumeRole" |
AlexanderHose
/ SecurityHub-EventBridge-rule.json
Created
December 11, 2022 12:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "source": ["aws.securityhub"], | |
| "detail-type": ["Security Hub Findings - Imported"], | |
| "detail": { | |
| "findings": { | |
| "Severity": { | |
| "Label": ["MEDIUM", "HIGH", "CRITICAL"] | |
| } | |
| } | |
| } |
AlexanderHose
/ SecurityHubSNS-policy.json
Created
December 11, 2022 12:38
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2008-10-17", | |
| "Statement": [ | |
| { | |
| "Sid": "default", | |
| "Effect": "Allow", | |
| "Principal": { | |
| "AWS": "*" | |
| }, | |
| "Action": [ |
AlexanderHose
/ event-bridge-SNS-kms-key.json
Created
December 11, 2022 12:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Sid": "Enable IAM User Permissions", | |
| "Effect": "Allow", | |
| "Principal": { | |
| "AWS": "arn:aws:iam::<accountID>:root" | |
| }, | |
| "Action": "kms:*", |
AlexanderHose
/ macie-kms-policy.json
Created
December 4, 2022 20:49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Sid":"Allow Macie to use the key", | |
| "Effect":"Allow", | |
| "Principal":{ | |
| "Service":"macie.amazonaws.com" | |
| }, | |
| "Action":[ | |
| "kms:GenerateDataKey", | |
| "kms:Encrypt" | |
| ], |
AlexanderHose
/ JIRASyncUser-policy.json
Created
November 29, 2022 07:26
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "kms:DescribeKey", | |
| "kms:GenerateDataKey", | |
| "kms:Decrypt" | |
| ], | |
| "Resource": [ |
AlexanderHose
/ JIRASyncUser-policy.json
Created
November 29, 2022 07:25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sqs:ReceiveMessage", | |
| "sqs:DeleteMessage" | |
| ], | |
| "Resource": "arn:aws:sqs:<region>:<accountID>:AwsSmcJsmCloudForgeSecurityHubQueue", | |
| "Effect": "Allow" |
AlexanderHose
/ jira-eventbridge.json
Created
November 29, 2022 07:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "detail-type": ["Security Hub Findings - Imported"], | |
| "source": ["aws.securityhub"] | |
| } |
AlexanderHose
/ jira-sqs-policy.json
Last active
November 29, 2022 07:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2008-10-17", | |
| "Statement": [ | |
| { | |
| "Effect": "Allow", | |
| "Principal": { | |
| "Service": "events.amazonaws.com" | |
| }, | |
| "Action": "SQS:SendMessage", | |
| "Resource": "arn:aws:sqs:<region>:<accountID>:AwsSmcJsmCloudForgeSecurityHubQueue", |
NewerOlder