Skip to content

Instantly share code, notes, and snippets.

View austinsonger's full-sized avatar
🙃
Localhost

Austin Songer, CISSP austinsonger

🙃
Localhost
View GitHub Profile
@austinsonger
austinsonger / poc.md
Last active March 6, 2025 23:03
Proof of Concept - Script Change & Tamper Detection for Webpages using Hono [PCI DSS 4.0.1 - 11.6.1 | HIPAA -164.312(c)(1) | FedRAMP SI-7, SI-4, CM-3, AU-2 | SOC 2 - CC7.1, CC7.2, CC6.6]

Proof of Concept - Script Change & Tamper Detection for Webpages using Hono

This solution provides a fully automated AWS-native mechanism to monitor, detect, and alert on unauthorized changes to page scripts. It leverages AWS CloudFront, Lambda@Edge, and the Hono framework to seamlessly enforce content integrity and real-time monitoring for scripts that are served as part of processing pages.

✨ Key Features

Feature Description
@austinsonger
austinsonger / reclaim.sh
Last active February 27, 2025 23:42
Plex Reclaim Server
#!/bin/bash
prefFile="$(readlink -f "/var/lib/plexmediaserver/Library/Application Support/Plex Media Server/Preferences.xml")"
echo "Please go to https://plex.tv/claim in order to obtain a new claim-code, then type it below"
echo -n "Claim Code: "
read PLEX_CLAIM
clientId=$(sed -n 's/.*ProcessedMachineIdentifier="\(\S*\)".*/\1/p' "${prefFile}")
@austinsonger
austinsonger / autoLabelPhishingEmails.gs
Last active February 6, 2025 03:00
LABEL POSSIBLE PHISHING ATTEMPTS IN GOOGLE EMAIL (Google App Script) [REQUIRES: Gmail API + Trigger Every 1 Hour]
function autoLabelEmails() {
const labelRules = [{
label: "POSSIBLE PHISHING ATTEMPT",
subjectContains: [
// Security & Account Alerts
"Suspicious Login Attempt Detected", "Your Account Has Been Compromised!", "Unusual Activity on Your Account",
"Security Alert: Immediate Action Required", "We Detected Unauthorized Access", "Your Password Has Expired – Reset Now",
"Account Locked Due to Multiple Failed Login Attempts", "Confirm Your Identity to Continue Using Your Account",
"Important Security Update Required", "Verify Your Account Before It's Disabled",
// Banking & Financial Scams
@austinsonger
austinsonger / inspector-findings.py
Created January 9, 2025 16:16
AWS Inspector Findings.
import os
from datetime import datetime
import subprocess
import json
import logging
# Configure logging
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
logger = logging.getLogger(__name__)
@austinsonger
austinsonger / merge-md.py
Last active January 2, 2025 20:39
Merges all Markdown files found in the root directory and its subdirectories into a single output file.
import os
import glob
import argparse
# Define a default root directory constant
DEFAULT_ROOT_DIR = "<PLACEHOLDER>"
def merge_markdown_files(root_dir, output_file):
"""
Merges all Markdown files found in the root directory and its subdirectories into a single output file.
@austinsonger
austinsonger / merge.py
Last active January 2, 2025 20:24
Extracts all code from all files and creating a markdown file that consolidates all the code.
import os
def create_markdown_from_directory(root_directory, output_markdown):
"""
Walks through a directory and subdirectories, extracting code from all files
and creating a markdown file that consolidates all the code.
Parameters:
root_directory (str): The root directory to traverse.
output_markdown (str): The path to the output markdown file.
xpack.security.authc.realms.saml.cloud-saml:
order: 2
attributes.principal: "nameid"
attributes.groups: "groups"
idp.metadata.path: "https://<PLACEHOLDER>.com//sso/saml/metadata"
idp.entity_id: "http://www.<PLACEHOLDER>.com/<PLACEHOLDER>"
sp.entity_id: "https://<PLACEHOLDER>.kb.us-east-1.aws.found.io:9243/"
sp.acs: "https://<PLACEHOLDER>.kb.us-east-1.aws.found.io:9243/api/security/v1/saml"
sp.logout: "https://<PLACEHOLDER>.kb.us-east-1.aws.found.io:9243/logout"
@austinsonger
austinsonger / gist:adf02067a2cde3a9f84b7d82d6849f07
Created December 13, 2024 21:09 — forked from jmwhittaker/gist:8516514
Use FFmpeg to resize and generate .mp4 & .webm videos from any source video.
/**
Scaling
- Scale can be used as is which will set the height to 560 but keep aspect ratio for width.
- Other options include setting both with & height
- Watch out for sizing errors when not divisible by 2
**/
/** MP4 1st pass **/
ffmpeg -i input.mov -vcodec libx264 -vprofile high -preset veryslow -b:v 225k -maxrate 300k -bufsize 1000k -vf scale=-1:560 -threads 2 -pass 1 -an -f mp4 /dev/null
@austinsonger
austinsonger / osx-for-hackers.sh
Created December 13, 2024 21:08 — forked from brandonb927/osx-for-hackers.sh
OSX for Hackers: Yosemite/El Capitan Edition. This script tries not to be *too* opinionated and any major changes to your system require a prompt. You've been warned.
#!/bin/sh
###
# SOME COMMANDS WILL NOT WORK ON macOS (Sierra or newer)
# For Sierra or newer, see https://github.com/mathiasbynens/dotfiles/blob/master/.macos
###
# Alot of these configs have been taken from the various places
# on the web, most from here
# https://github.com/mathiasbynens/dotfiles/blob/5b3c8418ed42d93af2e647dc9d122f25cc034871/.osx
@austinsonger
austinsonger / aws-sso-login.sh
Created December 13, 2024 21:07 — forked from aharonha/aws-sso-login.sh
Login to aws sso and create credentials file
#!/usr/bin/env bash
RED='\033[0;31m'
YELLOW='\033[0;33m'
GREEN='\033[0;32m'
NC='\033[0m' # No Color
installer=`which brew || which yum || which apt-get`
which jq >/dev/null || $installer install jq