Rizky Sulistyo rizkylab

## gcpiamuserlist-extraction.sh
#!/bin/bash
# Script to retrieve GCP IAM roles, users and serviceaccounts
# Author - Rajathithan Rajasekar - 03/03/2020

echo 'project-name,roles/rolename,user:username-and-serviceaccounts' > iamlist.csv
prjs=( $(gcloud projects list | tail -n +2 | awk {'print $1'}) )
for i in "${prjs[@]}"
	do
		echo "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"
		echo "Collecting IAM roles & users for Project: $i"

## rootandsslbypass.js
Java.perform(function() {

    var array_list = Java.use("java.util.ArrayList");
    var ApiClient = Java.use('com.android.org.conscrypt.TrustManagerImpl');

    ApiClient.checkTrustedRecursive.implementation = function(a1, a2, a3, a4, a5, a6) {
        // console.log('Bypassing SSL Pinning');
        var k = array_list.$new();
        return k;
    }

## .bashrc
PROMPT_COMMAND='history -a >(tee -a ~/.bash_history | logger -t "$USER[$$] $SSH_CONNECTION")'

## .bash_profile
==============================CENTOS 7 ( /etc/bashrc ) =======================================
PROMPT_COMMAND=$(history -a)
typeset -r PROMPT_COMMAND

function log2syslog
{
   declare command
   command=$BASH_COMMAND
   logger -p local1.notice -t bash -i -- $USER : $PWD : $command

## fix-wordpress-permissions.sh
#!/bin/bash
#
# This script configures WordPress file permissions based on recommendations
# from http://codex.wordpress.org/Hardening_WordPress#File_permissions
#
# Author: Michael Conigliaro <mike [at] conigliaro [dot] org>
#
WP_OWNER=www-data # <-- wordpress owner
WP_GROUP=www-data # <-- wordpress group
WP_ROOT=$1 # <-- wordpress root directory

## fridapin.js
// start with:
//   frida -U -l pinning.js -f [APP_ID] --no-pause

Java.perform(function () {
    console.log('')
    console.log('===')
    console.log('* Injecting hooks into common certificate pinning methods *')
    console.log('===')

    var X509TrustManager = Java.use('javax.net.ssl.X509TrustManager');

## ejabberd.yml
###
###'              ejabberd configuration file
###
###

### The parameters used in this configuration file are explained in more detail
### in the ejabberd Installation and Operation Guide.
### Please consult the Guide in case of doubts, it is included with
### your copy of ejabberd, and is also available online at
### http://www.process-one.net/en/ejabberd/docs/

## spectrum.cfg
root@debian-2gb-hel1-1:~# cat /etc/spectrum2/transports/spectrum.cfg
[service]
# The name of user/group Spectrum runs as.
#user=spectrum
#group=spectrum

# JID of Spectrum instance.
jid = xmpp.rqareload.co.id

# Password used to connect the XMPP server.

## gist:6f0dea537349c1fd671035160c0f5592
root@db2:/etc/mysql/conf.d# cat /etc/mysql/my.cnf
# MariaDB database server configuration file.
#
# You can copy this file to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "~/.my.cnf" to set user-specific options.
#
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.

## webnginx1
<!DOCTYPE html>
<html>
<head>
<title>LXD container web1!!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
	#!/bin/bash
	# Script to retrieve GCP IAM roles, users and serviceaccounts
	# Author - Rajathithan Rajasekar - 03/03/2020

	echo 'project-name,roles/rolename,user:username-and-serviceaccounts' > iamlist.csv
	prjs=( $(gcloud projects list \| tail -n +2 \| awk {'print $1'}) )
	for i in "${prjs[@]}"
	do
	echo "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"
	echo "Collecting IAM roles & users for Project: $i"
	Java.perform(function() {

	var array_list = Java.use("java.util.ArrayList");
	var ApiClient = Java.use('com.android.org.conscrypt.TrustManagerImpl');

	ApiClient.checkTrustedRecursive.implementation = function(a1, a2, a3, a4, a5, a6) {
	// console.log('Bypassing SSL Pinning');
	var k = array_list.$new();
	return k;
	}
	==============================CENTOS 7 ( /etc/bashrc ) =======================================
	PROMPT_COMMAND=$(history -a)
	typeset -r PROMPT_COMMAND

	function log2syslog
	{
	declare command
	command=$BASH_COMMAND
	logger -p local1.notice -t bash -i -- $USER : $PWD : $command
	#!/bin/bash
	#
	# This script configures WordPress file permissions based on recommendations
	# from http://codex.wordpress.org/Hardening_WordPress#File_permissions
	#
	# Author: Michael Conigliaro <mike [at] conigliaro [dot] org>
	#
	WP_OWNER=www-data # <-- wordpress owner
	WP_GROUP=www-data # <-- wordpress group
	WP_ROOT=$1 # <-- wordpress root directory
	// start with:
	// frida -U -l pinning.js -f [APP_ID] --no-pause

	Java.perform(function () {
	console.log('')
	console.log('===')
	console.log('* Injecting hooks into common certificate pinning methods *')
	console.log('===')

	var X509TrustManager = Java.use('javax.net.ssl.X509TrustManager');
	###
	###' ejabberd configuration file
	###
	###

	### The parameters used in this configuration file are explained in more detail
	### in the ejabberd Installation and Operation Guide.
	### Please consult the Guide in case of doubts, it is included with
	### your copy of ejabberd, and is also available online at
	### http://www.process-one.net/en/ejabberd/docs/
	root@debian-2gb-hel1-1:~# cat /etc/spectrum2/transports/spectrum.cfg
	[service]
	# The name of user/group Spectrum runs as.
	#user=spectrum
	#group=spectrum

	# JID of Spectrum instance.
	jid = xmpp.rqareload.co.id

	# Password used to connect the XMPP server.
	root@db2:/etc/mysql/conf.d# cat /etc/mysql/my.cnf
	# MariaDB database server configuration file.
	#
	# You can copy this file to one of:
	# - "/etc/mysql/my.cnf" to set global options,
	# - "~/.my.cnf" to set user-specific options.
	#
	# One can use all long options that the program supports.
	# Run program with --help to get a list of available options and with
	# --print-defaults to see which it would actually understand and use.
	<!DOCTYPE html>
	<html>
	<head>
	<title>LXD container web1!!</title>
	<style>
	body {
	width: 35em;
	margin: 0 auto;
	font-family: Tahoma, Verdana, Arial, sans-serif;
	}