chrisxaustin

#!/bin/bash
org=foo
gh api --paginate -H "Accept: application/vnd.github+json" -X GET -F include=git /orgs/$org/audit-log | jq -r '.[] | select(.action=="git.clone" and .actor!="github-actions[bot]" and .actor!="dependabot[bot]") | [.actor, .action, .repo, .programmatic_access_type] | @tsv'

kconner

macOS Internals

Understand your Mac and iPhone more deeply by tracing the evolution of Mac OS X from prelease to Swift. John Siracusa delivers the details.

Starting Points

How to use this gist

You've got two main options:

nitrocode

multi account role assumption

Here are the steps

1. Identify an ingress aws account for your primary aws role (where atlantis first assumes a role)
2. Create standard iam roles across each aws account that allows the role from 1 (primary aws role) to assume these new roles
3. Stand up atlantis and have it assume role 1 (primary aws role) by default
4. Use the terraform block in each terraform root dir to assume the appropriate role. If you do not have an internal account map module, you can hard code the role_arn in the aws provider block.

throwaway96

News

New exploit for webOS 3.5+: DejaVuln (2024-04-21)

See dejavuln-autoroot for a simpler exploit that works on webOS 3.5+ TVs (i.e., models from 2017 and later). It is unpatched as of 2024-04-21 and does not require Developer Mode or even a network connection—just a USB drive.

Otherwise:

• If you have a webOS 5–8 TV with old enough firmware, WTA (which does not require Dev Mode) will still work.
• If you have a webOS 4.x TV, you can also try CVE-2023-6319, which is unpatched on the latest (final?) firmware for webOS 4.0 (2018) models.
• While there will eventually be fully software-based exploits released for older models, they can currently be rooted via NVM.

jkugler

I recently installed Ubuntu server on a laptop with a 4K display. While the installer appears to be in text, it apparently uses a graphical mode, and setting vga=799 in the kernl boot parameters did not work.

To decrease the resolution, you have to pass a kernel boot parameter with the monitor "name" as seen by edid.

You can do this to list monitors without xrandr

find /sys/devices -name "edid"

That will produce a listing like this:

arma26

#!/bin/bash
set -ue
cmd="$(echo "$@" | tr ' ' '+')";
url="http://explainshell.com/explain?cmd=$cmd"
lynx -dump $url

#### Output
# explain git clean -fdx
   [1]explainshell.com
     * [2]about

MarkBaggett

def get_local_envvars_pid(process_id):
    gdb_script = "set variable $envs = (char **) environ\nset $i = 0\nwhile ($envs[$i] != 0)\nprint $envs[$i++]\nend\nquit\n"
    pathlib.Path("/tmp/getenv.gdb").write_text(gdb_script)
    gdb_command = f"gdb -batch -x /tmp/getenv.gdb -p {process_id}"
    ph = subprocess.Popen(gdb_command.split(),stdout=subprocess.PIPE, stderr=subprocess.PIPE)
    out,err = ph.communicate()
    log.debug(f"gdb environment variable output {out} errors {err}")
    try:
        found_items = re.findall(r'\$\d+\s+=\s+[0-9a-fx]+\s+"(\S+)=(.+)"\n', out.decode())
    except:

GiovanniGrieco

Before you start, please NOTE: this guide does not cover rootless containers!

On an hypervisor with LXD installed, create a new container, ensuring that -c security.nesting=true -c security.privileged=true is set:

lxc launch -c security.nesting=true -c security.privileged=true images:fedora/35 my-container

If the container already exists, set this parameter through lxc config:

lxc config set my-container security.nesting=true
lxc config set my-container security.privileged=true

nitrocode

Template terraform provider for darwin arm

Provider registry.terraform.io/hashicorp/template v2.2.0 does not have a package available for your current platform, darwin_arm64

why

The templatefile function only works with files. If you're working with files then switch to templatefile.

The hashicorp/template provider's template_file data source works with template strings and files (converted to strings) but was archived/deprecated before creating an arm release forcing people to look into other options if using Apple M1 (based on ARM).

SwitHak

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

• If you want to add a link, comment or send it to me
• Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great resources

• Royce Williams list sorted by vendors responses Royce List
• Very detailed list NCSC-NL
• The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List