cyhook

node {
    echo 'Results included as an inline comment exactly how they are returned as of Jenkins 2.121, with $BUILD_NUMBER = 1'
    echo 'No quotes, pipeline command in single quotes'
    sh 'echo $BUILD_NUMBER' // 1
    echo 'Double quotes are silently dropped'
    sh 'echo "$BUILD_NUMBER"' // 1
    echo 'Even escaped with a single backslash they are dropped'
    sh 'echo \"$BUILD_NUMBER\"' // 1
    echo 'Using two backslashes, the quotes are preserved'
    sh 'echo \\"$BUILD_NUMBER\\"' // "1"

cyhook

["application/x-dosexec"] = "exe",
["text/x-python"] = "py",
["application/x-tar"] = "tar",
["text/plain"] = "txt",
["application/zip"] = "zip",
["multipart/x-zip"] = "zip",
["multipart/x-gzip"] = "gzip",
["text/x-script.python"] = "py",
["application/x-bytecode.python"] = "pyc",
["audio/x-mpeg"] = "mp3",

cyhook

## Configure bro to write JSON logs
mkdir -p /opt/bro/share/bro/site/scripts
sudo tee /opt/bro/share/bro/site/scripts/json-logs.bro << EOF
@load tuning/json-logs

redef LogAscii::json_timestamps = JSON::TS_ISO8601;
redef LogAscii::use_json = T;
EOF

sudo tee -a /opt/bro/share/bro/site/local.bro << EOF

cyhook

# to generate your dhparam.pem file, run in the terminal
openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

cyhook

<?php

$data = [
    'jsonrpc' => '2.0',
    'method' => 'backup',
    'params' => [
        'authToken' => 'PUT_YOUR_TOKEN_HERE',
//        'id' => '11',
//        'userPass' => 'debian',
//        'text' => 'Keepass',

cyhook

#!/bin/bash
PASS=`pwgen -s 40 1`

mysql -uroot <<MYSQL_SCRIPT
CREATE DATABASE $1;
CREATE USER '$1'@'localhost' IDENTIFIED BY '$PASS';
GRANT ALL PRIVILEGES ON $1.* TO '$1'@'localhost';
FLUSH PRIVILEGES;
MYSQL_SCRIPT

cyhook

cat /usr/share/grafana/grafana-backup.sh
#!/bin/bash

DB="/var/lib/grafana/grafana.db"
BACKUP="/data/backup/grafana/grafana.db-$(date +%Y%m%d).bck"
SQLITE=/usr/bin/sqlite3
ZIP=/bin/gzip

${SQLITE} ${DB} ".backup ${BACKUP}"
${ZIP} ${BACKUP}

cyhook

#!/bin/bash

# compiles WMIC for linux

apt-get install autoconf

cd /usr/src
wget http://www.openvas.org/download/wmi/wmi-1.3.14.tar.bz2
bzip2 -cd wmi-1.3.14.tar.bz2 | tar xf -
cd wmi-1.3.14/

cyhook

TODO in production -

Elasticsearch

• select large memory instance
  • A machine with 64 GB of RAM is the ideal sweet spot, but 32 GB and 16 GB machines are also common. Less than 8 GB tends to be counterproductive (you end up needing many, many small machines), and greater than 64 GB has problems.
  • In general, it is better to prefer medium-to-large boxes.
• create swap using instance store disk, not EBS.
• Disks should be ssd and iops
• cfq (default I/O Scheduler in *nix) is inefficient for SSD, however, since there are no spinning platters involved. Instead, deadline or noop should be used instead. The deadline scheduler optimizes based on how long writes have been pending, while noop is just a simple FIFO queue.

cyhook

Ubuntu 14.04 Request Tracker RT rt-4.2.14 RT for Incident Response RTIR 4.0.0

Request Tracker Installation

export http_proxy="http://10.x.x.x:3128"
export https_proxy="http://10.x.x.x.x:3128"