Skip to content

Instantly share code, notes, and snippets.

View norsec0de's full-sized avatar

norsey norsec0de

45 followers · 70 following
  • Sydney, Australia
View GitHub Profile
@norsec0de
norsec0de / logger.py
Created May 6, 2022 06:22
Python - log to both console and file
import logging
# Global Configuration Variables
log_file = 'output.log'
# Configure Logging
log = logging.getLogger('logger')
log.setLevel(logging.DEBUG)
formatter = logging.Formatter('%(message)s')
@norsec0de
norsec0de / install-pyenv-pipenv-aws-amazon-linux.md
Created April 1, 2022 06:46
Install Pyenv & Pipenv on AWS EC2 (Amazon Linux)

Install Pyenv & Pipenv on AWS EC2 (Amazon Linux)

Installation

Install Dependencies

Pyenv builds Python versions from source and therefore requires all the necessary build dependencies.

sudo yum install gcc zlib-devel bzip2 bzip2-devel patch readline-devel sqlite sqlite-devel openssl-devel tk-devel libffi-devel
@norsec0de
norsec0de / install-scoutsuite-aws-amazon-linux.md
Last active April 1, 2022 06:46
Install ScoutSuite on AWS EC2 (Amazon Linux)

Install ScoutSuite on AWS EC2 (Amazon Linux)

This guide assumes that pyenv and pipenv have been installed and configured guide here. If these requirements have not been met, please complete the pyenv and pipenv installations before proceeding.

Installing ScoutSuite

It's is HIGHLY recommended that you run ScoutSuite in a virtual python environment.

Checking ScoutSuite Dependencies

@norsec0de
norsec0de / idiots-guide-to-cvss.md
Last active June 7, 2022 01:40
The Idiots Guide to CVSS

Idiots Guide to CVSS

CVSS is a formula used by legends that provides risk severity for discovered vulnerabilities. It's an objective representation of the risk that prevents idiots from arguing with you.

There are 3 sections to the CVSS:

  • Base Score: This section is where the severity of the vulnerability is determined and is only section that actually matters
  • Temporal Score: This section provides additional information to other people, who are responsible for security, but don't know how to use Google.
  • Environment Score: This section is for idiots who are not responsible for security, but want to feel included, to tell the rest of us how precious and sensitive their app is.
@norsec0de
norsec0de / hsts-preload-04012021.txt
Created January 4, 2021 06:40
HSTS Preload - 04 Jan 2021
This file has been truncated, but you can view the full file.
0--1.de
0-1.party
0-24.com
0-24.net
00000000-0000-0000-0000-000000000000.xyz
000321365.com
0005.com
0005aa.com
0005pay.com
0007552.com
@norsec0de
norsec0de / keybase.md
Created November 20, 2019 00:15

Keybase proof

I hereby claim:

  • I am norsec0de on github.
  • I am norsec0de (https://keybase.io/norsec0de) on keybase.
  • I have a public key whose fingerprint is 6A07 56BF 846D 8427 AE03 8390 E724 3BBE 7067 B20A

To claim this, I am signing this object: