George Pchelkin gpchelkin

vault_aws_auth

These are python 2 and 3 snippets showing how to generate headers to authenticate with HashiCorp's Vault using the AWS authentication method. There's also a Ruby implementation which uses version 3 of the AWS SDK for Ruby.

The python scripts look for credentials in the default boto3 locations; if you need to supply custom credentials (such as from an AssumeRole call), you would use the botocore.session.set_credentials method before calling create_client.

Command

aws s3api list-buckets --query 'Buckets[*].[Name]' --output text | xargs -I {} bash -c 'if [[ $(aws s3api get-bucket-acl --bucket {} --query '"'"'Grants[?Grantee.URI==`http://acs.amazonaws.com/groups/global/AllUsers` && Permission==`READ`]'"'"' --output text) ]]; then aws s3api put-bucket-acl --acl "private" --bucket {} ; fi'

1. List all of the user's buckets, and output the name, as text.

Netflix and direct bypass rules using WPAD

If your like me you might already use a VPN to route your traffic through. The problem is some sites just don't like VPN services and will actively block you from using them without disabling or bypassing it.

Netflix is a prime example of a website that does not like VPN services, because they are seen as a way to circumvent the geo-restrictions imposed on the content library offered.

Below are WPAD rules I use to essentially send Netflix traffic directly and avoid any VPN errors/dreaded unknown error network messages. Error messages that Netflix throws back at you related to VPN usage when streaming might include:

"You seem to be using an unblocker or proxy"
VPN/proxy error M7111-1331-5059

	add-type @"
	using System.Net;
	using System.Security.Cryptography.X509Certificates;
	public class TrustAllCertsPolicy : ICertificatePolicy {
	public bool CheckValidationResult(
	ServicePoint srvPoint, X509Certificate certificate,
	WebRequest request, int certificateProblem) {
	return true;
	}
	}

	# Change the path below to your own audit log path.
	/var/log/vault/audit.log {
	rotate 30
	daily
	# Do not execute rotate if the log file is empty.
	notifempty
	missingok
	compress
	# Set compress on next rotate cycl to prevent entry loss when performing compression.
	delaycompress

	### NOT A SCRIPT, JUST A REFERENCE!

	# install dante-server
	sudo apt update
	sudo apt install dante-server

	# or download latest dante-server deb for Ubuntu, works for 16.04 / 18.04 / 20.04:
	wget http://archive.ubuntu.com/ubuntu/pool/universe/d/dante/dante-server_1.4.2+dfsg-7build5_amd64.deb
	# or older version:
	wget http://ppa.launchpad.net/dajhorn/dante/ubuntu/pool/main/d/dante/dante-server_1.4.1-1_amd64.deb

	import os
	import configparser


	class Config:
	""" Get config from config file or environment variables.
	The priority order of config is: Config file > Environment > default_value.
	The env var is composed by: [SECTION]_[OPTION]
	For example:
	get_or_else('smtp', 'BIND_ADDRESS', '127.0.0.1')

	#!/bin/bash

	# Tested on Linux Mint 18.3 / Ubuntu 16.04 with PulseAudio 8.0.
	# No need for superuser.
	# You can map it to keyboard shortcut and press when bluetooth audio starts lagging.
	# Reference:
	# https://askubuntu.com/a/171165/373130
	# https://askubuntu.com/a/72076/373130

	BLUEZCARD=`pactl list cards short \| grep bluez \| awk '{print $1}'`

	include $(TOPDIR)/rules.mk

	PKG_NAME:=sniproxy
	PKG_VERSION:=0.6.0
	PKG_RELEASE:=1

	PKG_SOURCE_URL:=https://github.com/dlundquist/sniproxy/archive/
	PKG_SOURCE:=$(PKG_VERSION).tar.gz
	PKG_MD5SUM:=bcfb5d1efe045b8b356a4229f2339f02

	from sslyze.server_connectivity import ServerConnectivityInfo, ServerConnectivityError
	from sslyze.ssl_settings import HttpConnectTunnelingSettings, TlsWrappedProtocolEnum
	from sslyze.plugins.certificate_info_plugin import CertificateInfoScanCommand
	from sslyze.synchronous_scanner import SynchronousScanner
	from cryptography.hazmat.backends.openssl import x509
	from cryptography.hazmat.primitives.serialization import Encoding
	from cryptography.x509 import DNSName, ExtensionNotFound, ExtensionOID, NameOID
	from enum import Enum
	import os
	import json