Skip to content

Instantly share code, notes, and snippets.

View jmhale's full-sized avatar

James Hale jmhale

View GitHub Profile
@jmhale
jmhale / okta-session-token.py
Created November 16, 2017 11:00
Handles MFA auth to Okta and outputs session_token
""" Handles auth to Okta and return session_token """
#pylint: disable=C0325
import os
from ConfigParser import RawConfigParser
from getpass import getpass
import requests
class OktaAuth(object):
""" Handles auth to Okta and returns SAML assertion """
def __init__(self, okta_profile, verbose):
@jmhale
jmhale / aws-reinvent2017-security-talks.md
Last active December 6, 2017 11:46
Links to the AWS re:Invent 2017 Security (SID) sessions. Blatantly stolen from: https://gist.github.com/stevenringo/108922d042c4647f2e195a98e668108a, where you can find the full list of talks.

| Title | Description

## Temporary VPC for DEF CON
variable "defcon_cidr_vpc" { default = "10.170.0.0/16" }
variable "defcon_cidr_private_east_1a" { default = "10.170.1.0/24"}
variable "defcon_cidr_private_east_1b" { default = "10.170.2.0/24"}
variable "defcon_cidr_private_east_1c" { default = "10.170.3.0/24"}
variable "defcon_cidr_public_east_1a" { default = "10.170.11.0/24"}
variable "defcon_cidr_public_east_1b" { default = "10.170.12.0/24"}
variable "defcon_cidr_public_east_1c" { default = "10.170.13.0/24"}
## Temporary VPN for DEF CON
variable "dns_zone" {}
variable "dns_zone_id" {}
variable "ssh_key_id" {}
data "aws_iam_policy_document" "access-defcon-artifacts-policy-doc" {
statement {
actions = [
"s3:GetObject",
@jmhale
jmhale / gist:5a27833565e5185a4838b2227765b690
Created September 28, 2018 13:12
Get all AMIs in use in AWS
aws ec2 describe-instances | jq -r '[.Reservations[].Instances[].ImageId] | unique[]'

Keybase proof

I hereby claim:

  • I am jmhale on github.
  • I am jhale (https://keybase.io/jhale) on keybase.
  • I have a public key ASDHkIOQMIqIh7OYC9V4HqwpPaF2RZylhtjLlxoBfro4TAo

To claim this, I am signing this object:

@jmhale
jmhale / get-container-ports.sh
Created May 3, 2019 11:22
Gets listening ports inside of a Docker container
CONTAINER_PID=$(sudo docker inspect -f '{{.State.Pid}}' container_name; sudo nsenter -t $CONTAINER_PID -n netstat -ln | grep LISTEN
@jmhale
jmhale / git-check.sh
Last active October 18, 2019 10:52
Recursively check all local git repos for uncommited changes
find . -type d -name '.git' | while read dir ; do sh -c "cd $dir/../ && git status -s | grep -q [azAZ09] && echo ---- ${dir//\.git/} ---- && git status -s" ; done
@jmhale
jmhale / gist:6b699c6523a89f8a3b941198b5fd3d90
Created July 22, 2020 13:29
EC2 describe instances in table
aws ec2 describe-instances --query "Reservations[*].Instances[*].{IPAddress:PrivateIpAddress,Name:Tags[?Key=='Name']|[0].Value,Status:State.Name}" --filters Name=instance-state-name,Values=running --output table
@jmhale
jmhale / aws_instances_with_events.sh
Created January 4, 2021 19:45
Returns all AWS EC2 Instance IDs with pending service events
aws ec2 describe-instance-status --query 'InstanceStatuses[?length(Events || `[]`) > `0`]' | jq -r '.[] | "\(.InstanceId)\t\(.Events[].Code)"'