remotephone

Bad Chars

Multiline

badchars = ("\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f" "\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40" "\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f" "\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f" "\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f" "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf" "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf"

remotephone

  - '(?i)user(name)?\W*[:=,]\W*.+$'
  - '\/Users\/\w+\/'
  - '(?!.*[\s])(?=.*[A-Za-z])(?=.*[0-9])(?=.*[!@#$&*])?.{16,}'
  - '(?i)db_(user(name)?|pass(word)?|name)\W*[:=,]\W*.+$'
  - '(?i)pass(word)?\W*[:=,]\W*.+$'
  
  
  From here:
  https://github.com/ezekg/git-hound

remotephone

Create a file called "ips" and drop the ips you need to check in there
This will pull the certificate, validate it, and give you the expiration date.

for i in `cat ips`; do echo $i && ssl-cert-info --host $i --cn && ssl-cert-info --host $i --end &&  echo -----------------------------; done

remotephone

#Find some variations of months and seasons

grep -Ei 'j[a,A,@]nu[a,A,@]ry|f[e,E,3]bru[a,A,@]ry|m[a,A,@]rch|[a,A,@]pri[l,L,1]|m[a,A,@]y|jun[e,E,3]|ju[l,L,1]y|[a,A,@]ugu[s,S,$]t|[s,S,$][e,E,3]pt[e,E,3]mb[e,E,3]r|[o,O,0]ct[o,O,0]b[e,E,3]r|n[o,O,0]v[e,E,3]mb[e,E,3]r|d[e,E,3]c[e,E,3]mb[e,E,3]r|[s,S,$]umm[e,E,3]r|f[a,A,@][l,L,1][l,L,1]|w[i,I,1]nt[e,E,3]r|[s,S,$]pr[i,I,1]ng' 

#Find variations of the word "password"

grep -Ei p[a-z,A-Z,@][s,S,$][s,S,$]w[o,O,0]rd 

remotephone

Flask-ask has these requirements:


sudo yum install gcc libffi-devel python-devel openssl-devel
-or- 
sudo apt-get install build-essential libssl-dev libffi-dev python-dev

also install with pip install flask-ask --user or clone the repo and install requirements

remotephone

{
  "Version": "2012-10-17",
  "Statement": {
    "Effect": "Deny",
    "Action": "*",
    "Resource": "*",
    "Condition": {"DateLessThan": {"aws:TokenIssueTime": "2014-05-07T23:47:00Z"}}
  }
}

remotephone

# Description: Boxstarter Script
# Author: Jess Frazelle <jess@linux.com>
# Last Updated: 2017-09-11
#
# Install boxstarter:
# 	. { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force
#
# You might need to set: Set-ExecutionPolicy RemoteSigned
#
# Run this boxstarter by calling the following from an **elevated** command-prompt:

remotephone

An Ansible summary

Jon Warbrick, July 2014, V3.2 (for Ansible 1.7)

Configuration file

intro_configuration.html

First one found from of

remotephone

from - https://www.reddit.com/r/sysadmin/comments/8inzn5/so_you_want_to_learn_aws_aka_how_do_i_learn_to_be/

Introduction

So many people struggle with where to get started with AWS and cloud technologies in general. There is popular "How do I learn to be a Linux admin?" post that inspired me to write an equivalent for cloud technologies. This post serves as a guide of goals to grow from basic AWS knowledge to understanding and deploying complex architectures in an automated way. Feel free to pick up where you feel relevant based on prior experience.

Assumptions:

• You have basic-to-moderate Linux systems administration skills

remotephone

Create this a file at /etc/apparmor.d/lxc/lxc-default-with-nfsd and add this content:

# Do not load this file.  Rather, load /etc/apparmor.d/lxc-containers, which
# will source all profiles under /etc/apparmor.d/lxc

profile lxc-container-default-with-nfsd flags=(attach_disconnected,mediate_deleted) {
  #include <abstractions/lxc/container-base>

  # the container may never be allowed to mount devpts.  If it does, it
  # will remount the host's devpts.  We could allow it to do it with