kmcquade

{
    "agent": {
        "metrics_collection_interval": 60
    },
    "logs": {
        "logs_collected": {
            "files": {
                "collect_list": [
                    {
                        "file_path": "/home/ec2-user/shared-volume/zap.log",

kmcquade

# .github/workflows/app.yaml
name: My Python Project
on: push

jobs:
  test:
    runs-on: ubuntu-latest
    timeout-minutes: 10

    services:

kmcquade

from __future__ import absolute_import, print_function, unicode_literals
import boto3


def clean_old_lambda_versions():
    client = boto3.client('lambda')
    functions = client.list_functions()['Functions']
    for function in functions:
        versions = client.list_versions_by_function(FunctionName=function['FunctionArn'])['Versions']
        for version in versions:

kmcquade

{
  "openapi": "3.0.1",
  "info": {
    "title": "Jellyfin API",
    "version": "10.8.12",
    "x-jellyfin-version": "10.8.12"
  },
  "servers": [
    {
      "url": "http://localhost"

kmcquade

{
  "openapi": "3.0.1",
  "info": {
    "title": "DVWS API",
    "description": "API Used for DVWS Application",
    "version": "0.1"
  },
  "servers": [
    {
      "url": "http://dvws.local"

kmcquade

"""
Gmail doesn't work using regular recording. It will only work if you run the recording script and then wrap the recorded script in this
"""

from playwright.sync_api import Playwright, sync_playwright, expect
from playwright._impl._api_types import Error as PlaywrightError


def run(pw: Playwright) -> None:
    args = [

kmcquade

#!/usr/bin/python3

# ldbdump - dumps LevelDB keys/values
#
# a LevelDB is a dir with files such a these:
# 000050.ldb  000100.log  CURRENT  LOCK  LOG  MANIFEST-000099
#
# sources: https://github.com/tos-kamiya/levelobjdb dump()

import os

kmcquade

#!/bin/bash

# Clone the Firing Range Repository
git clone https://github.com/google/firing-range.git

# Change to 'firing-range' directory
cd firing-range

# Download the AppEngine SDK
wget https://storage.googleapis.com/appengine-sdks/featured/appengine-java-sdk-1.9.23.zip

kmcquade

### 
# Format is below
#
# risk-name:
#   target-name:  # AND logic
#     - service:actionName
#     - service:act* 
#
####
# List of high priority resource exposure actions here: https://gist.github.com/kmcquade/3161a6737285dc0508a9fa3446e22090

kmcquade

IAM Actions that can expose resources via Resource Based Policies

ACM Private CAs:

• acm-pca:PutPolicy: Puts a policy on an ACM Private CA.
• acm-pca:DeletePolicy: Deletes the policy for an ACM Private CA.

CloudWatch Logs:

• logs:PutResourcePolicy: Creates or updates a resource policy allowing other AWS services to put log events to this account
• logs:DeleteResourcePolicy: Deletes a resource policy from this account. This revokes the access of the identities in that policy to put log events to this account.