jonz-secops

import requests

def get_status_code(url):
    try:
        r = requests.get(url)
        print "Processing " + url

        if len(r.history) > 0:
            chain = ""
            code = r.history[0].status_code

jonz-secops

openssl

Install

Install the OpenSSL on Debian based systems

sudo apt-get install openssl

jonz-secops

# Translates Markdown syntax to Slack, replaces:
#
# - hyphened lists with bullet symbols
# - double bold marker asterisks `**` with single asterisk `*`
# - headers `#` with bold marker asterisks `*`
#
# Run with
#
#  python markdown-to-slack.py filename.md
#

jonz-secops

.
..
........
@
*
*.*
*.*.*
🐎

jonz-secops

<!DOCTYPE NETSCAPE-Bookmark-file-1>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8">
<TITLE>Bookmarks</TITLE>
<H1>Bookmarks</H1>
<DL><p>
	<dt><a href="https://splunkbase.splunk.com/">Splunkbase</a>
	<dt><a href="https://git.io/splhighlighter">Splunk Highlighter</a>
	<dt><a href="http://regex101.com/">regex101.com</a>
	<dt><a href="http://strftime.net/">strftime.net</a>
	<DT><H3 ADD_DATE="1551742873" LAST_MODIFIED="1553513798">.Conf Files</H3>

jonz-secops

#!/bin/bash
#
# Install/Update Mozilla Firefox conveniently and repeatably, allowing version selection
# The ESR Firefox that ships with Debian 10/11 (and probably Ubuntu, etc) doesn't support
# containers, so I found myself installing the Mozilla distribution of Firefox. That had
# me a little concerned about keeping it up to date, so I run this out of cron. Maybe it's
# useful for someone ...
#
# This is intended for use with XFCE but I think most window managers use the .desktop style
# metadata files for launchers/menus/etc. Check /usr/share/applications/ on your system to

jonz-secops

#File Magic Numbers

Magic numbers are the first bits of a file which uniquely identify the type of file. This makes programming easier because complicated file structures need not be searched in order to identify the file type.

For example, a jpeg file starts with ffd8 ffe0 0010 4a46 4946 0001 0101 0047 ......JFIF.....G ffd8 shows that it's a JPEG file, and ffe0 identify a JFIF type structure. There is an ascii encoding of "JFIF" which comes after a length code, but that is not necessary in order to identify the file. The first 4 bytes do that uniquely.

This gives an ongoing list of file-type magic numbers.

##Image Files

jonz-secops

# Here are some domains I block to interfere with DNS-over-HTTPS, so that my own DNS-based security schemes work.
# If you're going to be doing this, you should probably block all outbound 53, 853, and 5353 on your network,
# except from your own internal DNS resolver (eg. pihole)
#
# Data from https://github.com/curl/curl/wiki/DNS-over-HTTPS

one.one.one.one
canadianshield.cira.ca
doh.dns.sb
dnsforge.de

jonz-secops

 UPDATE PROCESS START [ 05/04/17 23:26:31 ]

===[  DNSBL Process  ]================================================

[ EasyList_wo_Elements ] Reload [ 05/04/17 23:26:32 ] . completed ..
  ----------------------------------------------------------------------
  Orig.    Unique     # Dups     # White    # Alexa    Final                
  ----------------------------------------------------------------------
  7964     7577       0          0          0          7577                 
  ----------------------------------------------------------------------

jonz-secops

function Start-ProcessWithCommandLine {
<#
.SYNOPSIS

A simple CreateProcess wrapper for demonstrating starting a process with custom command-line arguments.

Author: Matt Graeber
Company: Red Canary, Inc.

.PARAMETER ApplicationName