Skip to content

Instantly share code, notes, and snippets.

View midnightslacker's full-sized avatar

J midnightslacker

40 followers · 45 following
View GitHub Profile
@midnightslacker
midnightslacker / rasp_elk_install.sh
Created February 11, 2016 13:28 — forked from vjm/install.sh
Raspberry Pi ELK Stack
sudo apt-get install -y supervisor
sudo mkdir /usr/share/elasticsearch
cd /usr/share/elasticsearch
sudo wget https://download.elasticsearch.org/kibana/kibana/kibana-4.0.1-linux-x64.tar.gz
sudo wget https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-1.4.4.tar.gz
sudo wget https://download.elasticsearch.org/logstash/logstash/logstash-1.4.2.tar.gz
sudo tar -zxvf elasticsearch-0.90.0.tar.gz
@midnightslacker
midnightslacker / keybase.md
Last active November 22, 2016 00:47
Keybase

Keybase proof

I hereby claim:

  • I am midnightslacker on github.
  • I am midnightslacker (https://keybase.io/midnightslacker) on keybase.
  • I have a public key whose fingerprint is 17D4 A849 D70D F157 C88C B856 8ED1 DA8C AB57 E621

To claim this, I am signing this object:

@midnightslacker
midnightslacker / gist:0948c30e55c74bc6d41c187463333750
Created November 30, 2016 19:57 — forked from chrissimpkins/gist:5bf5686bae86b8129bee
Atom Editor Cheat Sheet (Sweetmeat)

Use these rapid keyboard shortcuts to control the GitHub Atom text editor on Mac OSX.

Key to the Keys

  • ⌘ : Command key
  • ⌃ : Control key
  • ⌫ : Delete key
  • ← : Left arrow key
  • → : Right arrow key
  • ↑ : Up arrow key
@midnightslacker
midnightslacker / cbapi-ps-lsass-loop.py
Created July 30, 2018 13:30 — forked from curi0usJack/cbapi-ps-lsass-loop.py
# Carbon Black Evil PowerShell LSASS Query
#
# Prints out malicious Powershell events that have a crossproc event for c:\windows\system32\lsass.exe
#
# Author: Jason Lang (@curi0usJack)
#
# Prereqs (Windows 10)
# Install bash on Win10
# sudo apt-get install python-pip
# sudo pip install --upgrade requests
@midnightslacker
midnightslacker / ExpandDefenderSig.ps1
Created March 29, 2019 13:27 — forked from mattifestation/ExpandDefenderSig.ps1
Decompresses Windows Defender AV signatures for exploration purposes
filter Expand-DefenderAVSignatureDB {
<#
.SYNOPSIS
Decompresses a Windows Defender AV signature database (.VDM file).
.DESCRIPTION
Expand-DefenderAVSignatureDB extracts a Windows Defender AV signature database (.VDM file). This function was developed by reversing mpengine.dll and with the help of Tavis Ormandy and his LoadLibrary project (https://github.com/taviso/loadlibrary). Note: Currently, "scrambled" databases are not supported although, I have yet to encounter a scrambled database. Thus far, all databases I've encountered are zlib-compressed.
@midnightslacker
midnightslacker / TA_example_data
Created May 8, 2020 18:21
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/support.html#Support.Client.describe_trusted_advisor_check_result
{
'result': {
'checkId': 'string',
'timestamp': 'string',
'status': 'string',
'resourcesSummary': {
'resourcesProcessed': 123,
'resourcesFlagged': 123,
@midnightslacker
midnightslacker / rngods,py
Created May 13, 2020 23:35
LET THE RNGODS DECIDE
#!/usr/bin/python3
import random
name = ['Jack-Rabbit', 'Elephant', 'Donkey', 'Walrus']
seed = random.randint(1,120)
names = random.sample(name, len(name))
print(names)
@midnightslacker
midnightslacker / .bash_profile
Created July 22, 2020 15:40 — forked from natelandau/.bash_profile
Mac OSX Bash Profile
# ---------------------------------------------------------------------------
#
# Description: This file holds all my BASH configurations and aliases
#
# Sections:
# 1. Environment Configuration
# 2. Make Terminal Better (remapping defaults and adding functionality)
# 3. File and Folder Management
# 4. Searching
# 5. Process Management
@midnightslacker
midnightslacker / mostly_painless_cuckoo_sandbox_install.md
Created August 11, 2020 13:21 — forked from 7MinSec/mostly_painless_cuckoo_sandbox_install.md
Mostly painless Cuckoo Sandbox install

How to Build a Cuckoo Sandbox Malware Analysis System

I had a heck of a time getting a Cuckoo sandbox running, and below I hope to help you get one up and running relatively quickly by detailing out the steps and gotchas I stumbled across along the way. I mention this in the references at the end of this gist, but what you see here is heavily influenced by this article from Nviso

Build your Linux Cuckoo VM

  1. Setup a Ubuntu 16.04 64-bit desktop VM (download here) in VMWare with the following properties:
  • 100GB hard drive
  • 2 procs
  • 8 gigs of RAM
@midnightslacker
midnightslacker / openssl_commands.md
Created September 14, 2020 19:11 — forked from Hakky54/openssl_commands.md
Some list of openssl commands for check and verify your keys

openssl

Install

Install the OpenSSL on Debian based systems

sudo apt-get install openssl