Skip to content

Instantly share code, notes, and snippets.

View infamousjoeg's full-sized avatar
🙊
I'm really good at keeping secrets.

Joe Garcia infamousjoeg

🙊
I'm really good at keeping secrets.
375 followers · 133 following
View GitHub Profile
@infamousjoeg
infamousjoeg / Get-SignedHeaders.ps1
Last active May 15, 2023 16:18
PowerShell AWS STS Signed Headers w/ Conjur's authn-iam
# Please note that this script uses a C# helper class for HMAC-SHA256 calculations.
# This is because PowerShell does not natively support this kind of operations.
# Also, this script assumes that you are calling Get-SignedHeaders with the proper
# parameters to generate your signed headers.
# Create a C# class for HMACSHA256 Helper which is used to compute HMACSHA256 hash
Add-Type -TypeDefinition @"
using System;
using System.Text;
using System.Security.Cryptography;
@infamousjoeg
infamousjoeg / conjur-cloud_ca-chain.pem
Created May 11, 2023 14:53
Conjur Cloud's Public CA Certificate Chain
-----BEGIN CERTIFICATE-----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@infamousjoeg
infamousjoeg / GrantHostID.yaml
Created May 5, 2023 17:17
Grant OpenShift App authz to PAM Vault secrets and push to K8s Secrets
# Load into root branch
- !grant
role: !group SyncVault/LOB_POC/SafeName/delegation/consumers
member: !host data/cd/kubernetes/dev-team-1/applications/k8s-secrets-app1
@infamousjoeg
infamousjoeg / Get-CPDetails.ps1
Created April 24, 2023 18:50
Get Credential Provider Details from System Health via PVWA REST API
# Get User Input
$pvwaURL = $(Read-Host "PVWA Base URL (eg. https://pvwa.example.com)").TrimEnd("/")
do {
$authType = Read-Host "Authentication Type [cyberark], ldap, radius"
if ($authType -eq "") { $authType = "cyberark" }
else { $authType = $authType.ToLower() }
} until ($authType -eq "cyberark" -or $authType -eq "ldap" -or $authType -eq "radius")
$credentials = Get-Credential
# Logon to PVWA REST API
@infamousjoeg
infamousjoeg / 1-install_module.sh
Created March 28, 2023 14:45
Retrieve password from Central Credential Provider in Puppet Manifest and store in Hiera
puppet module install dwerder-hiera_set
@infamousjoeg
infamousjoeg / BradleyMastersCallOfDuty.md
Created March 18, 2023 03:04
"Bradley masters Call of Duty" by ChatGPT (GPT-4 Model)

Bradley Masters Call of Duty

By: ChatGPT
Using the GPT-4 Model
2023-03-17

In the land of Gamerton, where controllers do play, Lived a young lad named Bradley, who practiced all day. He wanted to be the best at the game, The kind of player who'd rise up in fame.

@infamousjoeg
infamousjoeg / exportSafeMembers.ps1
Created February 28, 2023 15:57
Export Safe Members for all Safes in CyberArk PAM using psPAS PowerShell Module
# Before running this script, make sure psPAS is installed by running:
# Install-Module psPAS
Import-Module psPAS
$BaseURI = Read-Host "Enter the Base URL (e.g. https://pvwa.example.com)"
$Type = Read-Host "Enter the Authentication Type [cyberark], ldap, radius"
if (!$Type) {
$Type = "cyberark"
}
@infamousjoeg
infamousjoeg / create_testusers.ps1
Last active January 31, 2023 19:21
Create & Delete 100 Test User Accounts in a Test Safe for CyberArk PAM
# Import PowerShell module psPAS, if it doesn't exist, install it
Import-Module psPAS -ErrorAction SilentlyContinue
if ($LASTEXITCODE -ne 0) {
Install-Module psPAS -Force
Import-Module psPAS
}
$baseURL = Read-Host "Enter the base URL of your CyberArk instance"
$authType = Read-Host "Enter the authentication type (CyberArk, LDAP)"
$credential = Get-Credential
@infamousjoeg
infamousjoeg / CacheMFAforSSHviaPSMP.ps1
Created January 24, 2023 16:34
Cache MFA for SSH Connections via PSM for SSH Proxy
############
# This PowerShell script was translated using OpenAI's code-davinci-002 model
# against the original Python source code. https://beta.openai.com/playground?model=code-davinci-002
#
# https://github.com/vinceblake/cyberark-mfa-no-gui-example/blob/master/SAML-Get-MFA-Caching-Key.py
############
# SET THESE VARIABLES
$ispss_subdomain = "example"
$username = "[email protected]"
@infamousjoeg
infamousjoeg / jenkins-freestyle.sh
Created November 9, 2022 20:10
How to use Conjur Secrets provided SSH Private Key to clone Git repository in Jenkins
set +x
echo "$CONJUR_SECRET" > "$WORKSPACE"/private.key
set -x
chmod 0600 "$WORKSPACE"/private.key
sed -i 's/\r$//g' "$WORKSPACE"/private.key
export GIT_SSH_COMMAND="ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i $WORKSPACE/private.key -F /dev/null"
git clone [email protected]:infamousjoeg/epa-poc.git