Skip to content

Instantly share code, notes, and snippets.

View JustinAzoff's full-sized avatar

Justin JustinAzoff

View GitHub Profile
#!/usr/bin/env python
# Author: Justin Lintz
# usage: ./focal_length dir
# Requiresments: dcraw http://www.cybercom.net/~dcoffin/dcraw/
import os
import sys
from subprocess import Popen, PIPE
from operator import itemgetter
DCRAW='dcraw' # or /path/to/dcraw
/*
american fuzzy lop - postprocessor library example
--------------------------------------------------
Written and maintained by Michal Zalewski <lcamtuf@google.com>
Copyright 2015 Google Inc. All rights reserved.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
@JustinAzoff
JustinAzoff / install_nfsen.sh
Created February 9, 2013 16:45
setup nfsen. from https://github.com/JustinAzoff/nfsen_box, but made to work standalone
#!/bin/sh
apt-get update
apt-get upgrade -y
apt-get install -y nfdump
apt-get install -y libapache2-mod-php5 librrds-perl libmailtools-perl libsocket6-perl rrdtool whois
if [ ! -e /etc/apache2/mods-enabled/rewrite.load ] ; then
@JustinAzoff
JustinAzoff / install_pfring.sh
Created February 11, 2013 17:38
script that I use via puppet to install pf_ring
#!/bin/sh -e
cd /var/tmp
rm -rf pf_ring_trunk*
tar xvzf /var/lib/puppet/modules/sniffer/pf_ring_trunk_2012-03-15.tgz
#fix stupid build issues with snort module
ln -sf /var/tmp/pf_ring* /root/PF_RING
@JustinAzoff
JustinAzoff / gist:5350879
Created April 10, 2013 01:04
test of dogpile.cache async_creation_runner behavior
import time
import random
import threading
from dogpile.cache import make_region
from dogpile.cache.api import NO_VALUE
def async_creation_runner(cache, somekey, creator, mutex):
''' Used by dogpile.core:Lock when appropriate '''
def runner():
try:
@JustinAzoff
JustinAzoff / nsqclient.py
Created April 17, 2013 22:27
A sort of functional NSQ python client
import time
import requests
import random
import json
class nsqd:
def __init__(self, servers):
self.last_fetch = 0
self.servers= ["http://%s/put" % h for h in servers]
@JustinAzoff
JustinAzoff / dump_rt_tickets.sh
Created July 10, 2013 16:29
Simple script that uses wget to download a usable copy of every RT ticket in HTML form. useful for disabling the web application but maintaining access to all ticket information in the standard format.
#!/bin/zsh
URL=$1
MAX=$2
echo -ne "User: "
read user
echo -ne "PW: "
read pw
wget --no-check-certificate --keep-session-cookies --save-cookies cookies.txt $URL/search/ticket?id=1 --post-data "user=$user&pass=$pw" -O/dev/null
@JustinAzoff
JustinAzoff / snort_drop_rate
Created August 15, 2013 15:42
version of the snort drop rate munin plugin that can graph multiple snort instances
#!/bin/sh
# -*- sh -*-
: << =cut
=head1 NAME
snort_droprate - Plugin to monitor Snort packet drop rate
=head1 CONFIGURATION
@load base/protocols/http
@load base/protocols/ssh
event connection_established(c: connection)
{
statsd_increment("bro.connection.established", 1);
}
event connection_rejected(c: connection)
{
@JustinAzoff
JustinAzoff / is_file_growing.py
Last active December 25, 2015 05:39
checks to see if a file is growing and exits accordingly. Useful with a cron job
#!/usr/bin/env python
# */5 * * * * root sleep 60 ; is_file_changing /usr/local/bro/logs/current/conn.log || broctl restart
import os
import sys
import time
SIZE_TIMEOUT = 10
def get_size(f):
for x in range(SIZE_TIMEOUT):