Skip to content

Instantly share code, notes, and snippets.

Matthew Warren haircut

Block or report user

Report or block haircut

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
View gist:2eb57d87310cdb0e436c
Import-Module MSOnline
write-host Licensing Office 365 . . .
$user = Get-Content "OfficeCredU.txt"
$password = Get-Content "OfficeCredP.txt" | ConvertTo-SecureString
$credential = New-Object System.Management.Automation.PsCredential -ArgumentList $user,$password
Connect-MsolService -Credential $credential
$lg = import-clixml OfficeLicense.xml
@haircut
haircut / SavingThrow-supplement.adf
Created Apr 3, 2015
SavingThrow supplemental adf gathered from AdwareMedic
View SavingThrow-supplement.adf
# FkCodec
# INCOMPLETE: Browser extension components
# codec-?m
/Users/*/Library/Application Support/Codec-M
/Users/*/Library/LaunchAgents/com.codecm.uploader.plist
/Applications/Codec-M.app
####################
# Yontoo
View ST-extension-test.adf
EXTENSION: jollywallet
EXTENSION: su?ave ?k+e+p(o|a)*
EXTENSION: (extended ?protection)|(video ?download ?helper)
@haircut
haircut / SavingThrow-Extensions.adf
Last active Aug 29, 2015
Example extensions adf for SavingThrow
View SavingThrow-Extensions.adf
EXTENSION: codec-?m
EXTENSION: (yontoo)|(torrenthandler)
EXTENSION: (flash ?player)|(clickagent)
EXTENSION: chatzum
EXTENSION: (searchme)|(slick ?savings)|(amazon ?shopping ?assistant)|(ebay ?shopping ?assistant)|(domain ?error ?assistant)
EXTENSION: jollywallet
EXTENSION: (conduit)|(searchext)|(mybrand)|( Community Toolbar)|(search ?protect)|(trovi)
EXTENSION: (gophoto[-\.]?it)|(freehdsport)
EXTENSION: (genieo)|(installmac)
EXTENSION: (vi+[aeiou]*d+[aeiou]*x+)|(macv[aeiou]?x[aeiou]?)|(mac ?captain)|(mac ?price ?cut)|(save ?on ?mac)|(mac ?global ?deals)|(^macster)|(macdeals)|(s+hop ?bra+i+n)
View adfsample-fkcodec.adf
<adf>
<adware name="FkCodec">
<item type="extensionName">codec-?m</item>
<item type="path">Library/Application Support/Codec-M</item>
<item type="path" unload="true">/Users/*/Library/LaunchAgents/com.codecm.uploader.plist</item>
<item type="path">/Applications/Codec-M.app</item>
<item type="process">Codec-M</item>
</adware>
</adf>
View adfsample-yontoo.adf
<adf>
<adware name="Yontoo">
<item type="extensionName">(yontoo)|(torrenthandler)</item>
<item type="path">/Users/*/Library/Application Support/Google/Chrome/YontooLayers.crx</item>
<item type="FirefoxJS" aggressive="true">user.js</item>
</adware>
</adf>
View adfsample-genieo.adf
<adf>
<adware name="Genieo">
<item type="loginItem">Genieo</item>
<item type="extensionName" havingContent="(genieo)|(installmac)">omnibar</item>
<item type="path" unload="true" restart="true">/Users/*/Library/LaunchAgents/com.genieo.completer.download.plist</item>
<item type="path" unload="true" restart="true">/Users/*/Library/LaunchAgents/com.genieo.completer.update.plist</item>
<item type="path" unload="true" restart="true">/Users/*/Library/LaunchAgents/com.genieo.completer.ltvbit.plist</item>
<item type="path" unload="true" restart="true">/Library/LaunchAgents/com.genieoinnovation.macextension.plist</item>
<item type="path" unload="true" restart="true">/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist</item>
<item type="path" unload="true" restart="true">/Library/LaunchAgents/com.genieo.engine.plist</item>
View AdwareMedic-Supplement.adf
<AdwareDefinition>
<Version>1.0</Version>
<DefinitionAuthor>Matthew Warren</DefinitionAuthor>
<DefinitionSource>http://www.adwaremedic.com/signatures.xml</DefinitionSource>
<!-- Supplemental ADF based on AdwareMedic Signatures. Should be used as
a complement to the default HT-203987 definitions
-->
<Adware>
<AdwareName>FkCodec</AdwareName>
<!-- Does not remove related browser extensions -->
View SetRemoteManagement.sh
#!/bin/bash
LOCALADMIN="username"
kickstart=/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart
echo "Configuring Remote Management"
if id -u $LOCALADMIN >/dev/null 2>&1; then
echo "Defined local admin account exists"
# Deactivate ARD agent, deny all access
echo "Deactivating ARD agent"
View TestPDefs.pdef
<PrinterDefinitions>
<Printer>
<Name>Example Printer</Name>
<Server>print.org.edu</Server>
<ShareName>ExamplePrinter</ShareName>
<SMBURI>smb://print.org.edu/ExamplePrinter</SMBURI>
<LPDURI>lpd://print.org.edu/ExamplePrinter</LPDURI>
<Location>Lobby</Location>
<Option>option_one=value</Option>
<Option>second_opt=something</Option>
You can’t perform that action at this time.