Skip to content

Instantly share code, notes, and snippets.

@sheagcraig
sheagcraig / handle_voice_products
Created January 28, 2015 14:15
Down and dirty reposado Voice product cleansing
#!/usr/bin/python
"""Down and dirty removal of deprecated voice products and addition of
new voice products for reposado. It makes a few mistakes (products that
have 'voice' in the title that aren't properly a Voice Product.
Don't just go and run this!
"""
import shlex
@sheagcraig
sheagcraig / FileUpload.py
Created March 10, 2015 13:20
IconUpload Issue with JSS >9.64
#!/usr/bin/python
import urllib
import requests
# Obviously, our server name is swapped in for "ourjss".
# Policy ID 263 is Self Service policy installing Oracle Java 8 on our
# test server, running JSS v9.65
ICON_UPLOAD_URL_v965 = 'https://our965jss.org:8443/JSSResource/fileuploads/policies/id/263
@sheagcraig
sheagcraig / AdwareCheckExtensionAttribute.py
Last active November 27, 2021 23:51
Check for Adware per Apple Kbase article
#!/usr/bin/python
"""Identify or remove files known to be involved in Adware/Malware
infection.
Most of the code applies to building a list of malware files. Thus,
both extension attribute and removal handling are included.
Cleans files as a Casper script policy; thus, it expects four total
arguments, the first three of which it doesn't use, followed by
--remove
@sheagcraig
sheagcraig / AppleAdwareList
Last active October 29, 2016 14:22
Apple Identified Adware
# https://support.apple.com/en-us/ht203987
# TODO: handle Safari extensions:
# Amazon Shopping Assistant by Spigot Inc.
# Ebay Shopping Assistant by Spigot Inc.
# Searchme by Spigot, Inc.
# Slick Savings by Spigot Inc.
# GoPhoto.It
# Omnibar
@sheagcraig
sheagcraig / all_recipes.sh
Last active August 29, 2015 14:17
Do I have all of my recipes in my AutoPkg -l managed_software_list?
for i in $(basename ~/Developer/jss-recipes/*.jss.recipe | cut -d . -f 1-2); do echo $i; done | cat - ~/Desktop/managed_software_list.txt | sort | uniq -u
@sheagcraig
sheagcraig / ZipCloud.adf
Created March 31, 2015 19:09
ZipCloud Definition File
# ZipCloud
/Users/*/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
/Users/*/Library/LaunchAgents/com.jdibackup.ZipCloud.backupstart.plist
/Users/*/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
/Applications/ZipCloud.app
PROCESS: ZipCloud
# ZipCloud Finder services:
/Users/*/Library/Services/Add to Backup Selection.workflow
/Users/*/Library/Services/Instant Backup.workflow
@sheagcraig
sheagcraig / Apple-HT203987.adf
Last active August 29, 2015 14:18
SavingThrow ADF's
<AdwareDefinition>
<Version>1.0</Version>
<DefinitionAuthor>Shea Craig</DefinitionAuthor>
<DefinitionSource>https://support.apple.com/en-us/ht203987</DefinitionSource>
<!-- Apple provided this list of files, and as such, they're not necessarily broken down neatly into products.-->
<Adware>
<AdwareName>Downlite, VSearch, Conduit, Trovi, MyBrand, Search Protect</AdwareName>
<File>/System/Library/Frameworks/v.framework</File>
<File>/System/Library/Frameworks/VSearch.framework</File>
<File>/Library/PrivilegedHelperTools/Jack</File>
@sheagcraig
sheagcraig / oldskool.py
Last active August 29, 2015 14:22
Old Skool
#!/usr/bin/env python
"""oldskool.py
Generate character stats using old school methods.
"""
# I wanted to quickly generate some old school character stats. And I
# wanted to express each method as tersely as possible in python.
# As it turns out, this is pretty simple to do as one-liners, aside
@sheagcraig
sheagcraig / ThunderstrikeVulnerabilityEA.py
Last active August 29, 2015 14:25
ThunderstrikeVulnerabilityEA.py
#!/usr/bin/python
# Culled from https://gist.github.com/arubdesu/05b4172890450fa2d9e6
# Given a list of FW models and Thunderstrike patched FW versions,
# report on whether a machine has been patched.
import subprocess
import plistlib
@sheagcraig
sheagcraig / update_warranty_expires_group.py
Last active August 29, 2015 14:25
UpdateWarrantyExpiresGroup.py
#!/usr/bin/python
# 2015 Shea G. Craig
# ____ ______ __
# / ___/ ___\ \/ /
# | | _\___ \\ /
# | |_| |___) / \
# \____|____/_/\_\
# NO WARRANTY FOR YOU!