craig-m

Lazy automation

A solution to automate regular, routine, somewhat boring tasks.

Disclaimer: I am not much of a Python programmer by any means, but I have used Ansible for a number of years and using Invoke, and now runner too, has made my ansible workflow better. These are some jumbled notes to share some ideas :)

Tools

The programs I am using:

chrisdlangton

#!/usr/bin/env python3
import fileinput
import json
import argparse


SECCOMP_PROFILE = ('{"defaultAction": "SCMP_ACT_ERRNO",'
                   '"architectures": ['
                   '"SCMP_ARCH_X86_64",'
                   '"SCMP_ARCH_X86",'

chrisdlangton

"""
Based on https://docs.aws.amazon.com/general/latest/gr/sigv4-signed-request-examples.html
"""
from requests.packages.urllib3.util.ssl_ import create_urllib3_context
from requests.adapters import HTTPAdapter
import hmac
import hashlib
import datetime
import base64
import os

chrisdlangton

#!/usr/bin/env bash

if [ -z $(which retire) ]; then
  echo "retire not found. try npm install -g retire"
  exit 1
fi
if [ -z $(which parallel) ]; then
  echo "parallel not found. try 'apt install -y parallel'"
  exit 1
fi

chrisdlangton

#!/usr/bin/env python3

import boto3
import argparse
import configparser
from os.path import expanduser
from botocore.exceptions import ClientError

def chose_profile()->str:
    session = boto3.Session()

chrisdlangton

#!/usr/bin/env sh

if [ -z "$(which aws)" ]; then
    echo "aws command not callable"
    exit 1
fi

if [ -z "$(which python)" ]; then
    echo "python command not found"
    exit 1

rverton

/*
* (un)comment correct payload first (x86 or x64)!
* 
* $ gcc cowroot.c -o cowroot -pthread
* $ ./cowroot
* DirtyCow root privilege escalation
* Backing up /usr/bin/passwd.. to /tmp/bak
* Size of binary: 57048
* Racing, this may take a while..
* /usr/bin/passwd overwritten

bmhatfield

# In order for gpg to find gpg-agent, gpg-agent must be running, and there must be an env
# variable pointing GPG to the gpg-agent socket. This little script, which must be sourced
# in your shell's init script (ie, .bash_profile, .zshrc, whatever), will either start
# gpg-agent or set up the GPG_AGENT_INFO variable if it's already running.

# Add the following to your shell init to set up gpg-agent automatically for every shell
if [ -f ~/.gnupg/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
    source ~/.gnupg/.gpg-agent-info
    export GPG_AGENT_INFO
else

koelling

#include <netdb.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>

#define CANARY "in_the_coal_mine"

struct {
  char buffer[1024];

chokepoint

#!/usr/bin/env python
"""
Sniff a specific port for Bit Torrent DHT traffic and print
requests/responses in human readable form.

Reference: http://www.bittorrent.org/beps/bep_0005.html
"""

from pcapy import open_live
from bencode import bdecode