Skip to content

Instantly share code, notes, and snippets.

View houey's full-sized avatar
🎯
Focusing

Houston houey

🎯
Focusing
View GitHub Profile
@houey
houey / deleteallapis.sh
Created September 15, 2023 22:01
delete all aws api gateway apis
#usage deleteallapis.sh us-east-1
for api_id in $(aws apigatewayv2 get-apis --region $1 --query 'Items[*].ApiId' --output text); do aws apigatewayv2 delete-api --region $1 --api-id $api_id ; done
@houey
houey / gist:dd8333ae2ac680f49bd9e46e2ca38750
Created September 8, 2023 20:19
christophe's terraform tagger
data "external" "git_commit" {
program = ["git", "log", "--pretty=format:{ \"sha\": \"%H\" }", "-1", "HEAD"]
}
data "external" "git_remote_url" {
program = ["sh", "-c", "git remote -v | head -n 1 | awk '{print \"{\\\"url\\\" :\\\"\" $2 \"\\\"}\"}'"]
}
provider "aws" {
@houey
houey / EnhancedEnableAWSConfigForOrganizations.yml
Created March 27, 2023 13:52
AWS Cloudformation template for AWS Config Recorder where cost consciousness is a concern. This template has two lines for ResourceTypes for Opt In to overcome the limits of a single string in cloudformation
AWSTemplateFormatVersion: 2010-09-09
Description: Enable AWS Config with central logging and notification with enhanced cost conciousness using two lines for opt in usage with large numbers of ResourceTypes
Metadata:
AWS::CloudFormation::Interface:
ParameterGroups:
- Label:
default: Recorder Configuration
Parameters:
- AllSupported
@houey
houey / CloudSecTalks.txt
Created November 8, 2022 04:21
Cloud Security resources
Talks and blog posts that all newcomers should check out when interested in Cloud Security
Bringing a machete to the amazon (Peterson)
https://youtu.be/y8nftRzbiXk
Flying a false flag: (Landers)
https://youtu.be/2BEwqbCbQuM
Another day another billion packets (Brandwine)
https://youtu.be/3qln2u1Vr2E
@houey
houey / cloud_metadata.txt
Created August 6, 2019 04:34 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## IPv6 Tests
http://[::ffff:169.254.169.254]
http://[0:0:0:0:0:ffff:169.254.169.254]
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
@houey
houey / certstream_watchdog_paypal.py
Created May 30, 2018 03:33 — forked from PaulSec/certstream_watchdog_paypal.py
certstream utility to retrieve paypal and few other fraud keywords
import certstream
keywords = ['paypal', 'paypol']
def extract_domains(domains):
res = []
for domain in domains:
for keyword in keywords:
if keyword in domain:
res.append(domain)