Skip to content

Instantly share code, notes, and snippets.

View danielnbalasoiu's full-sized avatar
🥷
🛡️

danielnbalasoiu

🥷
🛡️
View GitHub Profile
# Source: https://gist.github.com/vfarcic/78c1d2a87baf31512b87a2254194b11c
###############################################################
# How To Create A Complete Internal Developer Platform (IDP)? #
# https://youtu.be/Rg98GoEHBd4 #
###############################################################
# Additional Info:
# - DevOps MUST Build Internal Developer Platform (IDP): https://youtu.be/j5i00z3QXyU
# - How To Create A "Proper" CLI With Shell And Charm Gum: https://youtu.be/U8zCHA-9VLA
# Source: https://gist.github.com/vfarcic/02bbfaf6cf8f5b03f4267b50f3f3233b
#########################################################
# How To Create A "Proper" CLI With Shell And Charm Gum #
# https://youtu.be/U8zCHA-9VLA #
#########################################################
# Additional Info:
# - Charm Gum: https://github.com/charmbracelet/gum
@SwitHak
SwitHak / 20211210-TLP-WHITE_LOG4J.md
Last active June 14, 2024 00:16
BlueTeam CheatSheet * Log4Shell* | Last updated: 2021-12-20 2238 UTC

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

  • If you want to add a link, comment or send it to me
  • Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great resources

  • Royce Williams list sorted by vendors responses Royce List
  • Very detailed list NCSC-NL
  • The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List
@egg82
egg82 / proxmox_nvidia.md
Last active June 9, 2024 16:11
NVidia Proxmox + LXC

Proxmox

Find the proper driver at the NVidia website.

Note: Make sure to select "Linux 64-bit" as your OS

Hit the "Search" button.

@ishad0w
ishad0w / sources.list
Last active June 1, 2024 16:29
Debian 10 (Buster) -- Full sources.list
deb http://deb.debian.org/debian buster main contrib non-free
deb-src http://deb.debian.org/debian buster main contrib non-free
deb http://deb.debian.org/debian buster-updates main contrib non-free
deb-src http://deb.debian.org/debian buster-updates main contrib non-free
deb http://deb.debian.org/debian buster-backports main contrib non-free
deb-src http://deb.debian.org/debian buster-backports main contrib non-free
deb http://security.debian.org/debian-security/ buster/updates main contrib non-free

Installing Harbor with Trivy

  1. Grab Harbor online or offline installer from https://github.com/goharbor/harbor/releases
  2. Create a directory to store Trivy config:
    mkdir -p ./common/config/trivy-adapter
    
  3. Create the env file with environment variables:
    cat << EOF > ./common/config/trivy-adapter/env
    

Harbor Registry :: Scan Images with Harbor API

  1. (Optional) Check which scanner is configured for the project with ID 1:

    curl -X GET "https://core.harbor.domain/api/projects/1/scanner" \
      -H "accept: application/json" \
      -H "authorization: Basic $(echo -n "admin:Harbor12345" | base64)"
@topiasv
topiasv / rpm-backup.sh
Created December 18, 2019 12:49
Sailfish OS RPM Backup
#!/bin/bash
TEMP=`getopt -o ro:lLdvtRsS: --long refresh,output:,list-packages,list-repos,download,verbose,trim-repos,refresh-cache,skip-repos,settings-dir: -n 'rpm-backup' -- "$@"`
if [ $? != 0 ] ; then echo "Terminating..." >&2 ; exit 1 ; fi
# Note the quotes around `$TEMP': they are essential!
eval set -- "$TEMP"
REFRESH=false
LREPOS=false
@lizthegrey
lizthegrey / attributes.rb
Last active February 24, 2024 14:11
Hardening SSH with 2fa
default['sshd']['sshd_config']['AuthenticationMethods'] = 'publickey,keyboard-interactive:pam'
default['sshd']['sshd_config']['ChallengeResponseAuthentication'] = 'yes'
default['sshd']['sshd_config']['PasswordAuthentication'] = 'no'
@teusink
teusink / fake-email-domains.txt
Last active June 19, 2020 07:51
Domains with malicious or phishing intent by mimicing domains from real email services
# Domains with malicious or phishing intent by mimicing domains from real email services
# Examples: example domains (RFC 2606 & 6761) and fake domains that spoof real domains used for email services
address.local
cacema.nl
casama.nl
example.com
example.net
example.org
gmail.nl
gmial.com