Skip to content

Instantly share code, notes, and snippets.

@Avyd
Avyd / Compile to .deb
Last active September 23, 2021 09:33
Compile kernel to installable .deb package
#Install necessary things
apt-get update
apt-get install kernel-package libncurses5-dev fakeroot wget bzip2 build-essential -y
#Get the kernel
cd /usr/src
wget https://www.kernel.org/pub/linux/kernel/v3.x/linux-3.13.tar.xz
wget https://www.kernel.org/pub/linux/kernel/v3.x/linux-3.13.tar.sign
gpg --verify linux-3.13.tar.sign
tar xpvf linux-3.13.tar.xz
@Avyd
Avyd / CheckPoint_Firewall_CLI_Commands
Created July 22, 2014 13:46
CheckPoint_Firewall_CLI_Commands
fw ver
fw lslogs # List log files
fw ctl iflist # Interface list
fw ctl pstat # Kernel memory and connections
fw log -c drop # Show dropped connections
fw log -f # Tail logs
fw stat -l # Show flow (policy, drop, accept..etc)
fw monitor -e 'accept host(10.1.1.1);'
fw monitor -e 'accept host(10.1.1.1) and dst=10.1.1.2;'
fw monitor -e 'accept host(1.1.1.1) and host(2.2.2.2) and not ping;'
@Avyd
Avyd / irc_link_collector
Last active May 10, 2017 16:40
irc_link_collector
@Avyd
Avyd / CPU Heat Keeper
Last active January 2, 2016 09:49
CPU Heat Keeper
#!/bin/bash
echo "CPU Heat-keeper"
echo "---------------"
echo "Required - sensors and cpuburn"
echo "Tested on 3rd gen i5 procs."
echo "Use at your own risk!"
echo ""
# ---- Settings ----
maxheat=80
@Avyd
Avyd / SSH_Login_Checker
Created October 20, 2013 16:07
Checks SSH logins (Success, Auth_Fail, Etc)
for host in $(cat nodes)
do
status=$(ssh -l root -o BatchMode=yes -o ConnectTimeout=5 $host 2>&1)
if [[ $status != *"Permission denied"* ]] ; then
echo "$host - $status" >> Succeeded
elif [[ $status == *"Permission denied"* ]] ; then
echo $host - $status >> Auth_failed
else
echo $host - $status >> Etc
fi
@Avyd
Avyd / Will_You_FSCK?
Last active December 25, 2015 16:49
Bash script to check if there will be fsck on the next reboot. Checks for ext* filesystems.
for x in $(df -t ext4 -t ext3 -t ext2 | tr -s ' ' | cut -d " " -f1 | grep -v "^$" | tail -n +2); do mmc=$(tune2fs -l $x | grep 'mount count' | tr -s ' ' | cut -d ' ' -f4) ; mc=$(tune2fs -l $x | grep 'Mount count' | tr -s ' ' | cut -d ' ' -f3) ; if [ `expr $mmc - $mc` -le 0 ] ; then fsck="0" ; else fsck="1"; fi ; CT=`date +%s` ; LCT=`date -d "\`tune2fs -l $x | grep "Last checked" | tr -s ' '| cut -d" " -f3-\`" +%s` ; CI=`tune2fs -l $x | grep "Check interval"| tr -s ' '| cut -d" " -f3` ; if [ `let $CT-$LCT` -gt `let $CI*3600*24` ] && [ $CI -gt 0 ] || [ $fsck -eq 1 ]; then echo "There will be forced fsck for $x"; else echo "There will be no fsck for $x" ; fi ; done
#Alternative script from friend with sed
#mount -t ext2,ext3,ext4|while read i j; do tune2fs -l $i|sed -n '/[Mm]ount count/{s/.*: *//;p}'|(read c; read m; [ $m -gt 0 -a $m -le $c ] && echofsck,count,$i); c="$(tune2fs -l $i|sed -n '/Next check/{s/.*r: *//;p}')"; [ -z "$c" ] || ([ `date +%s` -ge `date -d"$c" +%s` ] && echo fsck,time,$i); done
@Avyd
Avyd / Yum_RPM_Installer_Through_JumpServer
Last active December 23, 2015 14:59
This script started from a jump server will copy and install a specified rpm package from one server to an other. It is useful if the given two servers has no connection with each other. It uses RedHat's "yum".
#Specify the settings and make sure you have a "results" folder
#"rpm_server" --> rpm will be downloaded here
#"server" ---> rpm will be installed here
#"up2date_ver" -> current version of rpm pack
rpm_server=server_name
server=server_name
up2date_ver=$(echo "server_name")
#Check version on the given server
version_check=$(ssh $server -l root -o StrictHostKeyChecking=no -o BatchMode=yes -C "rpm -qa | grep lsy_root_authorized" > /dev/null)
@Avyd
Avyd / Simple Cisco md5 Hasher
Created August 10, 2013 21:20
Cisco MB5 Hasher - using salt size 4
#! /usr/bin/env python
#
# Passlib is required to run Cisco md5 hasher.
# You can install simply with "easy_install passlib"
#
# Cisco didn't want to use normal md5 for their passwords.
# So they changed the salt size.
# That kind of hashing is used in routers / switches.
# You can test simply by a "show run" output.
@Avyd
Avyd / gist:5e296e98b26574e17010
Created July 22, 2014 13:47
Cisco_ASA_connection_dump_with_ACLs
# Cisco ASA dumping
access-list whatever permit ip 192.168.12.0 255.255.255.0 any
access-list whatever permit ip any 192.168.12.0 255.255.255.0
capture whatever access-l whatever circular-buffer interface outside buffer 64000 real-time
# Remove ACL and stop capture
no access-list whatever permit ip 192.168.12.0 255.255.255.0 any
no access-list whatever permit ip any 192.168.12.0 255.255.255.0
no capture whatever
@Avyd
Avyd / Mass_SSH_Commander_AndStuff
Created July 22, 2014 13:40
Short scripts and stuff to run commands on multiple servers
for i in $(cat secnodes); do ssh -o StrictHostKeyChecking=no -l root $i -C "find /etc/cron* -type f -exec cat {} \; > cron_all" ; done
for i in $(cat secnodes); do echo -e "\n\n XXXXXXXXXX $i XXXXXXXXXX \n" ; ssh -o StrictHostKeyChecking=no -l root $i -C "cat cron_all" ; done
for i in $(cat nodes); do echo -e "\n\n XXXXXXXXXX $i XXXXXXXXXX \n" ; ssh -o StrictHostKeyChecking=no -l root $i -C "netstat -tunlp|grep 8080" ; done
for i in node51 node52 node53 ; do ssh -o StrictHostKeyChecking=no -l root $i -C "grep something /var/log/squid3/access.log" ; done
# Regex matching from irclogs
for x in $(find irclogs/ -name "*something*.log" -print) ; do egrep --only-matching "http(s?):\/\/[^ \"\(\)\<\>]*" $x ; done