Skip to content

Instantly share code, notes, and snippets.

View jrossi's full-sized avatar

Jeremy Rossi jrossi

80 followers · 19 following
View GitHub Profile
@jrossi
jrossi / gist:8786003
Created February 3, 2014 15:33
<!-- WordPress wp-login.php brute force -->
<rule id="31509" level="3">
<if_sid>31108</if_sid>
<url>wp-login.php</url>
<regex>] "POST \S+wp-login.php</regex>
<description>WordPress login attempt.</description>
</rule>
<!-- If we see frequent wp-login POST's, it is likely a bot. -->
<rule id="31510" level="8" frequency="6" timeframe="30">
@jrossi
jrossi / gist:8808118
Created February 4, 2014 17:14
import zmq
context = zmq.Context()
s = context.socket(zmq.SUB)
s.connect("tcp://localhost:11999")
s.setsockopt(zmq.SUBSCRIBE, "")
import pika
connection = pika.BlockingConnection()
channel = connection.channel()
@jrossi
jrossi / gist:9528466
Created March 13, 2014 13:28
import zmq
import smptlib
import json
context = zmq.Context()
socket = context.socket(zmq.SUB)
socket.connect("tcp://127.0.0.1:5000")
socket.setsockopt(zmq.SUBSCRIBE, "ossec.alerts")
ssmtp = smtplib.SMTP()
ssmtp.connect(host="smpt.host.here")
@jrossi
jrossi / holder.mdown
Created May 27, 2014 01:17

Table of Contents

@jrossi
jrossi / holder.mdown
Created May 27, 2014 01:42

['_Resource__load', '_Resource__set_attrs', 'class', 'delattr', 'dict', 'doc', 'format', 'getattribute', 'hash', 'init',

@jrossi
jrossi / holder.mdown
Created May 27, 2014 01:42

Table of Contents

@jrossi
jrossi / holder.mdown
Created May 27, 2014 01:44

Table of Contents

@jrossi
jrossi / holder.mdown
Created May 27, 2014 01:46

Table of Contents

@jrossi
jrossi / release-notes.rst
Created May 27, 2014 16:38

Table of Contents

bug fix of eventchannel timestamp

@jrossi
jrossi / release-notes.mdown
Created June 6, 2014 17:29

Table of Contents