Skip to content

Instantly share code, notes, and snippets.

@SteveClement
SteveClement / macos-openssh-portable.sh
Last active October 4, 2023 09:59 — forked from surjikal/macos-openssh-portable.sh
Compile OpenSSH Portable on OSX / MacOS
#!/usr/bin/env bash
brew install openssl automake
git clone git://anongit.mindrot.org/openssh.git
cd openssh
# ./configure script does not exist, so we have to build it
autoreconf
AWS Prowler Scan
AWS Scout2 Scan
AWS Security Finding Format (ASFF) Scan
AWS Security Hub Scan
Acunetix Scan
Acunetix360 Scan
Anchore Engine Scan
Anchore Enterprise Policy Check
Anchore Grype
AnchoreCTL Policies Report
misp-modules on  main
➜ sudo -u www-data -H /var/www/MISP/venv/bin/pip install -I .
[sudo] password for steve:
Processing /usr/local/src/misp-modules
root@misp-test:/var/www/MISP/app# sudo -u www-data composer update
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Updating dependencies (including require-dev)
Package operations: 31 installs, 5 updates, 0 removals
- Updating composer/installers (v1.7.0 => v1.12.0): Downloading (100%)
- Updating pear/pear_exception (v1.0.0 => v1.0.2): Downloading (100%)
- Updating pear/console_commandline (v1.2.2 => v1.2.3): Downloading (100%)
- Updating pear/crypt_gpg (v1.6.3 => v1.6.5): Downloading (100%)
- Updating psr/log (1.1.0 => 1.1.4): Downloading (100%)
@SteveClement
SteveClement / pymisp-downloadCount-2019.json
Created October 1, 2021 01:00
pymisp-downloadCount-2019
{
"last_update": "2021-10-01 00:56:24",
"query": {
"bytes_billed": 4577034240,
"bytes_processed": 4576059680,
"cached": false,
"estimated_cost": "0.03"
},
"rows": [
{
@SteveClement
SteveClement / p80-tshark-get.json
Created September 22, 2021 09:34
simple port 80 get request (with a 404)
[
{
"_index": "packets-2021-09-22",
"_type": "pcap_file",
"_score": null,
"_source": {
"layers": {
"frame": {
"frame.interface_id": "0",
"frame.interface_id_tree": {
@SteveClement
SteveClement / cowrie-file-event.json
Last active September 22, 2021 06:43
cowrie misp integration
{
"Event": {
"id": "1167",
"orgc_id": "1",
"org_id": "1",
"date": "2021-09-22",
"threat_level_id": "4",
"info": "File uploaded to Cowrie (cowrie-ng)",
"published": false,
"uuid": "21cb5613-7061-4ce8-ac73-f22288deba36",
mkdir -p ~/tmp/mnt
cd ~/tmp
wget http://ftp.jaist.ac.jp/pub/Linux/ubuntu-releases/21.04/ubuntu-21.04-desktop-amd64.iso
sudo mkdir /mnt/iso
sudo mount -o loop ubuntu-21.04-desktop-amd64.iso /mnt/iso
sudo mount /mnt/iso/casper/filesystem.squashfs mnt
cd mnt
sudo find -type f > /tmp/f.lst
sudo rhash --crc32 --sha256 -M --sha256 --file-list=/tmp/f.lst --printf="%p/%f %s %c %m %h %{sha-256}\n" > /tmp/out.sfv
head /tmp/out.sfv
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
{
"type": "bundle",
"id": "bundle--cf20f99b-3ed2-4a9f-b4f1-d660a7fc8241",
"spec_version": "2.0",
"objects": [
{
"type": "intrusion-set",
"id": "intrusion-set--da1065ce-972c-4605-8755-9cd1074e3b5a",
"created": "2015-05-15T09:00:00.000Z",
"modified": "2015-05-15T09:00:00.000Z",