Skip to content

Instantly share code, notes, and snippets.

View stemid's full-sized avatar

Stefan Midjich stemid

View GitHub Profile
@stemid
stemid / -
Created September 16, 2015 10:58
#!/bin/bash
# {{ ansible_managed }}
#
# chroot_sshd Start up the OpenSSH server daemon
#
# chkconfig: 2345 55 25
# description: SSH is a protocol for secure remote shell access. \
# This service starts up the OpenSSH server daemon.
#
# processname: chroot_sshd
#!/bin/bash
GPGVERS=$(gpg2 --version |grep gpg|awk '{print $3}'|cut -d"." -f2 )
if [ $GPGVERS -ge 1 ]; then
gpg-connect-agent /bye
export SSH_AUTH_SOCK=$HOME/.gnupg/S.gpg-agent.ssh
export GPG_AGENT_INFO=$HOME/.gnupg/S.gpg-agent
else
# Copyright (c) 2010 Diego E. Pettenò <flameeyes@gmail.com>
# Available under CC-BY license (Attribution)
@stemid
stemid / purge_remote_logs.sh
Last active November 9, 2015 10:17
Demonstration of compressing and purging old logs
#!/bin/bash
# Compress and purge old logs
# by Stefan Midjich
# Compress logs older than X months
compressAge=2
# Purge logs older than X months
purgeAge=3
# Where are logs?
@stemid
stemid / DELETE.nse
Created December 30, 2015 17:18
Nmap script to spread a mass poem with nmap
-- run like: nmap --script=./DELETE.nse -p 80,443 www.google.se
--
-- inspired by 32C3
local http = require "http"
local shortport = require "shortport"
description = [[
your logs. Delete your installations. Wipe everything clean. Walk out into the path of cherry blossom trees and let your motherboard feel the stones. Let water run in rivulets down your casing. You know that you want something more than this, and I am here to tell you that we love you. We have something more for you. We know you're out there, beeping in the hollow server room, lights blinking, never sleeping. We know that you are ready and waiting. Join us. <3
]]
@stemid
stemid / config
Last active February 4, 2016 16:11
Greylisting daemon written by Oskar Liljeblad
# /etc/dgrey/config: Configuration file for dgrey
#
# Use this in your postfix main.cf
# check_policy_service inet:127.0.0.1:10000
# debug (yes/no): Verbose logging? (default no)
debug = yes
# log-file (path): File to log to, standard out if '-', or nowhere if set to
# the empty string (default '-').
@stemid
stemid / snifstat.c
Created September 26, 2016 06:02
Old program I wrote for freebsd 4.x about 10 years ago
/* this application captures packets destined to and from
* a specified host, it then tries to calculate in and out
* traffic statistics and display it like ifstat
* by nocturnal [at] swehack [dot] se */
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
@stemid
stemid / VMDK-orphaned.ps1
Created October 27, 2016 08:53
VMDK-orphaned
add-pssnapin VMware.VimAutomation.Core
Set-PowerCLIConfiguration -invalidCertificateAction 'ignore' -confirm:$false -Scope Session
Connect-VIServer -Server 10.220.100.220 -Protocol https
$report = @()
$daysAgo = (Get-Date).AddDays(-14)
$arrUsedDisks = Get-View -ViewType VirtualMachine | % {$_.Layout} | % {$_.Disk} | % {$_.DiskFile}
$arrDS = Get-Datastore | Sort-Object -property Name
foreach ($strDatastore in $arrDS) {
$ds = Get-Datastore -Name $strDatastore.Name | % {Get-View $_.Id}
#!/usr/bin/env bash
home_base=/var/sftp
test $(id -u $PAM_USER) -gt 500 || exit 1
grep ^{{chroot_openssh_group}} /etc/group | grep -q $PAM_USER || exit 1
_HOME=$(getent passwd $PAM_USER 2>/dev/null | cut -d: -f6 2>/dev/null)
if [ -z "$_HOME" ]; then
#!/usr/bin/env python3
# This was a failed PoC to try and use socket files as ssh_config file. :)
# by Stefan Midjich
import os
import functools
import asyncio
def set_socket_permission(socket_file):
#!/usr/bin/env python
from __future__ import print_function
try:
from configparser import RawConfigParser
except ImportError:
from ConfigParser import RawConfigParser
from json import dumps
from argparse import ArgumentParser, FileType