Skip to content

Instantly share code, notes, and snippets.

View craig-m-unsw's full-sized avatar

Craig M craig-m-unsw

17 followers · 41 following
View GitHub Profile
@craig-m-unsw
craig-m-unsw / 0-startup-overview.md
Created October 5, 2021 21:20 — forked from dideler/0-startup-overview.md
Startup Engineering notes
@craig-m-unsw
craig-m-unsw / github_bugbountyhunting.md
Created October 5, 2021 21:20 — forked from EdOverflow/github_bugbountyhunting.md
My tips for finding security issues in GitHub projects.

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output
@craig-m-unsw
craig-m-unsw / 00_README.md
Last active October 16, 2022 10:47
Backup and maintain offline copy of users Gists

Backup gists

Backup all of a users Github Gists with python Requests. Inspired by this.

Get code:

git clone https://gist.github.com/craig-m-unsw/59a1a0b1d6113637df1a41ab3d71ee64 gist-backups
cd gist-backups/
cat <<'EOF' >> .gitignore
@craig-m-unsw
craig-m-unsw / docker-help.md
Created October 9, 2021 13:29 — forked from bradtraversy/docker-help.md
Docker Commands, Help & Tips

Docker Commands, Help & Tips

Show commands & management commands

$ docker

Docker version info

@craig-m-unsw
craig-m-unsw / cissp_notes.md
Last active January 22, 2024 05:09 — forked from penafieljlm/cissp_notes.md
Personal CISSP Study Notes

CISSP Notes

Certified Information Systems Security Professional notes.

CISSP is a certification from the "International Information System Security Certification Consortium", more frequently known as (ISC)² (see https://www.isc2.org/Certifications/CCSP).

Index:

@craig-m-unsw
craig-m-unsw / Apple_MacOS-get_packages.md
Last active September 1, 2022 01:37
MacOS package managers and software installs

MacOS Package managers

Get software onto your Apple computer :)

positives: easy and fast with these tools because you are lazy.

negatives: it's turtles all the way down.

tips:

  • always verify any file checksums with shasum -a 512 foo.tar or PGP sigs if they exist
@craig-m-unsw
craig-m-unsw / README.md
Last active October 29, 2021 01:55
manage Ubuntu machine with Canonicals Landscape - quick learning/test lab
@craig-m-unsw
craig-m-unsw / README.md
Last active May 22, 2025 16:20
Parallels (MacOS M1 host) Packer + Vagrant of Ubuntu 20.04 arm64. Installed with cloud-init and configured with Ansible.

parallels Packer (arm64)

A simple Packer + Vagrant install of Ubuntu 20.04 (Focal Fossa) LTS server for arm64, to run from my M1 Mac on Parallels Pro (17.1). Currently on MacOS Monterey.

Packer will run the ansible playbook.yml before the machine is shutdown and exported.

The installation is automated by cloud-init (which reads user-data). The file meta-data just needs to be an empty text file (you need to create this - no blank files or folders allowed in gists).

ubuntu2004/
@craig-m-unsw
craig-m-unsw / README.md
Last active January 22, 2024 05:09
learn mySQL with docker-compose
@craig-m-unsw
craig-m-unsw / sshing.md
Last active January 22, 2024 05:09
limit ssh

Situation:

  • VPN (with 2FA) from your desktop
  • SSH with SSO (username and password) into Linux system
  • This is a HPC with many machines you want to SSH between without using any password
#!/bin/bash
set -x
set -e