rikatz

<?php

$headers = apache_request_headers();

$cert1 = str_replace("\\n","\n",$headers['ssl-client-cert']);

if(!empty($cert1)) {
    $certificado = openssl_x509_read($cert1);
    $certuser = openssl_x509_parse($certificado);
    $username = $certuser['subject']['CN'];

rikatz

-- If using GCE as your provider, you must first create networks, firewall rules and Instances
-- The following is based in Kelsey Hightower 'Kubernetes The Hard Way' tutorial

gcloud compute networks create calico-demo --subnet-mode custom

gcloud compute networks subnets create kubernetes \
  --network calico-demo \
  --range 10.240.0.0/24

rikatz

package main

import (
	"log"
	"os"
	"regexp"

	"github.com/go-telegram-bot-api/telegram-bot-api"
)

rikatz

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: metricbeat-config
  namespace: kube-system
  labels:
    k8s-app: metricbeat
data:
  metricbeat.yml: |-

rikatz

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: metricbeat-config
  namespace: kube-system
  labels:
    k8s-app: metricbeat
data:
  metricbeat.yml: |-

rikatz

package main

import (
	"errors"
	"fmt"
	"net"
	"strings"
	"sync"
	"syscall"

rikatz

guestinfo.userdata = "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

rikatz

curieproxy        | [2020-11-13 11:58:48.429][9][debug][main] [source/server/server.cc:174] flushing stats
curieproxy        | [2020-11-13 11:58:48.697][15][debug][conn_handler] [source/server/connection_handler_impl.cc:353] [C3] new connection
curieproxy        | [2020-11-13 11:58:48.698][15][debug][http] [source/common/http/conn_manager_impl.cc:264] [C3] new stream
curieproxy        | [2020-11-13 11:58:48.698][15][debug][http] [source/common/http/conn_manager_impl.cc:764] [C3][S14358749960589937270] request headers complete (end_stream=true):

rikatz

# import socket programming library 
import socket 

# import thread module 
from _thread import *
import threading 

print_lock = threading.Lock() 

class frame():

rikatz

      80ms     44.11s (flat, cum) 91.61% of Total
         .          .      7:
         .          .      8:   "unicode/utf8"
         .          .      9:)
         .          .     10:
         .          .     11://ModsecTransaction parses a request and return if it needs intervention
      20ms       20ms     12:func ModsecTransaction(request *apis.Request, agent *ModsecAgent) (intervention bool, err error) {
         .          .     13:
         .          .     14:   var path string
         .          .     15: