Abdallah Deeb abdallah

## update_newrelic_whitelist.py
import os
import json
import boto3
import urllib3

# Set the following in the Lambda Environment variables
IP_SET_ID = os.environ.get('IP_SET_ID')
Special_IPs = os.environ.get('SPECIAL_IPS').split(',')


## create-acm-cert.yml
- hosts: localhost
  gather_facts: no
  vars:
    aws_profile: "aws_account_name"
    acm_domain: "example.com"
    acm_extra_domains: "*.example.com"
    acm_idempotency_token: "examplecomtoken"
    dns_zone: "example.com"
  environment:
    AWS_PROFILE: "{{ aws_profile }}"

## ses-sns-sqs-to-graylog.py
import boto3
import json
import requests
from datetime import datetime
import sys

HOST = 'MY.HOST.ADDRESS'
PORT = 12201 # change if you create graylog input with different port
queue_url = 'https://sqs.ZONE.amazonaws.com/ACCOUNT/QUEUENAME'

## log_high_cpu.sh
#!/bin/bash
# very specific need
top_process=$(ps -eo pid,cmd,%cpu --sort=-%cpu | head -n2 | tail -n1)
if [[ $top_process == *sometest* ]]; then
  PATHTOPROCESS=$(echo $top_process| awk '{print $1}' | xargs lsof -p | grep public_html)
  logger -it HIGHCPU "Process $top_process in $PATHTOPROCESS"
fi

## install_nr_infra.yml
---
- hosts: all
  tasks:
  - lineinfile: "dest=/etc/newrelic-infra.yml line='license_key: YOURKEYHERE' create=yes state=present"
  - apt_key:
      state=present
      url=https://download.newrelic.com/infrastructure_agent/gpg/newrelic-infra.gpg
  - apt_repository: "repo='deb [arch=amd64] http://download.newrelic.com/infrastructure_agent/linux/apt {{ansible_distribution_release}} main' state=present update_cache=yes"
  - apt: name=newrelic-infra

## plugin.php
<?php
/*
Plugin Name: My Plugin
Plugin URI: https://deeb.me
Description: 10 ways to peel an orange
*/
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

## newdjango.sh
#!/bin/bash
#
# Author: Abdallah Deeb <abdallah@deeb.me>
# Requirements: python, pip, virtualenv, virutalenvwrapper, git
#
# Edit the following 2 lines
PROJECTNAME=proj
APPNAME=myapp
if [ -n "$2" ]
then

## ntp-ddos-vulnerable-ips.sh
IPRANGE=10.10.10.0/24
nmap -sU -pU:123 -Pn -n --script=ntp-monlist $IPRANGE | grep -B 4 ntp-monlist | grep report | awk '{ print $5 }'

## .htaccess
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !\.(png|css)$
RewriteRule (.*) n.php [L,QSA]

## apache-wp-login.conf
[Definition]
failregex = <HOST>.*] "POST /wp-login.php
ignoreregex =
	import os
	import json
	import boto3
	import urllib3

	# Set the following in the Lambda Environment variables
	IP_SET_ID = os.environ.get('IP_SET_ID')
	Special_IPs = os.environ.get('SPECIAL_IPS').split(',')
	- hosts: localhost
	gather_facts: no
	vars:
	aws_profile: "aws_account_name"
	acm_domain: "example.com"
	acm_extra_domains: "*.example.com"
	acm_idempotency_token: "examplecomtoken"
	dns_zone: "example.com"
	environment:
	AWS_PROFILE: "{{ aws_profile }}"
	import boto3
	import json
	import requests
	from datetime import datetime
	import sys

	HOST = 'MY.HOST.ADDRESS'
	PORT = 12201 # change if you create graylog input with different port
	queue_url = 'https://sqs.ZONE.amazonaws.com/ACCOUNT/QUEUENAME'
	#!/bin/bash
	# very specific need
	top_process=$(ps -eo pid,cmd,%cpu --sort=-%cpu \| head -n2 \| tail -n1)
	if [[ $top_process == sometest ]]; then
	PATHTOPROCESS=$(echo $top_process\| awk '{print $1}' \| xargs lsof -p \| grep public_html)
	logger -it HIGHCPU "Process $top_process in $PATHTOPROCESS"
	fi
	---
	- hosts: all
	tasks:
	- lineinfile: "dest=/etc/newrelic-infra.yml line='license_key: YOURKEYHERE' create=yes state=present"
	- apt_key:
	state=present
	url=https://download.newrelic.com/infrastructure_agent/gpg/newrelic-infra.gpg
	- apt_repository: "repo='deb [arch=amd64] http://download.newrelic.com/infrastructure_agent/linux/apt {{ansible_distribution_release}} main' state=present update_cache=yes"
	- apt: name=newrelic-infra
	<?php
	/*
	Plugin Name: My Plugin
	Plugin URI: https://deeb.me
	Description: 10 ways to peel an orange
	*/
	if ( ! defined( 'ABSPATH' ) ) {
	exit;
	}
	#!/bin/bash
	#
	# Author: Abdallah Deeb <abdallah@deeb.me>
	# Requirements: python, pip, virtualenv, virutalenvwrapper, git
	#
	# Edit the following 2 lines
	PROJECTNAME=proj
	APPNAME=myapp
	if [ -n "$2" ]
	then
	IPRANGE=10.10.10.0/24
	nmap -sU -pU:123 -Pn -n --script=ntp-monlist $IPRANGE \| grep -B 4 ntp-monlist \| grep report \| awk '{ print $5 }'
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteCond %{REQUEST_URI} !\.(png\|css)$
	RewriteRule (.*) n.php [L,QSA]
	[Definition]
	failregex = <HOST>.*] "POST /wp-login.php
	ignoreregex =