Jason Trost jatrost

Install

Grab a copy of Docker for your platform here: https://www.docker.com/community-edition#/download Follow the installation guide and tune the docker system to run with as much memory and CPU as you're willing to feed to it.

Docker Containers I find useful for general security tasks:

Local Debian instance: debian:latest

Metasploit: remnux/metasploit

	# Source: System.Management.Automation.dll
	# This list is used to determin if a ScriptBlock contains potential suspicious content
	# If a match is found an automatic 4104 with a "warning" level is generated.
	# https://github.com/PowerShell/PowerShell/blob/master/src/System.Management.Automation/engine/runtime/CompiledScriptBlock.cs
	- "Add-Type"
	- "AddSecurityPackage"
	- "AdjustTokenPrivileges"
	- "AllocHGlobal"
	- "BindingFlags"
	- "Bypass"

	#!/usr/bin/env bash

	# CVE-2019-11253
	# https://github.com/kubernetes/kubernetes/issues/83253
	# Shout out: @raesene for poc collab, @iancoldwater + @mauilion for
	# HONKing inspiration and other guidance.
	# Description: In Kubernetes 1.13 and below, the default configuration
	# is that system:anonymous can request a selfsubjectaccessreview
	# via mechanisms such as "kubectl auth can-i". This request can
	# include POSTed YAML, and just the act of trying to parse it causes

	!pip install fastai
	!apt-get -qq install -y libsm6 libxext6 && pip install -q -U opencv-python
	import cv2
	from os import path
	from wheel.pep425tags import get_abbr_impl, get_impl_ver, get_abi_tag
	platform = '{}{}-{}'.format(get_abbr_impl(), get_impl_ver(), get_abi_tag())

	accelerator = 'cu80' if path.exists('/opt/bin/nvidia-smi') else 'cpu'

	!pip install -q http://download.pytorch.org/whl/{accelerator}/torch-0.3.0.post4-{platform}-linux_x86_64.whl torchvision

	$ ./try_local_metadata.sh
	Trying 169.254.169.254... found metadata
	Trying 169.254.43518... found metadata
	Trying 169.16689662... found metadata
	Trying 2852039166... found metadata
	Trying 0251.0376.0251.0376... found metadata
	Trying 0251.0376.0124776... found metadata
	Trying 251.0775248... -
	Trying 25177524776... -
	Trying 0xa9.0xfe.0xa9.0xfe... found metadata

	Hi.

	Here is the content of my nginx config file :

	location /analytics {
	proxy_set_header Host $host;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_set_header X-Script-Name /analytics;
	proxy_pass http://YOUR_SERVER_NAME:8088;
	#YOUR_SERVER_NAME is localhost if both nginx and superset run on same server

	function Get-ClrReflection
	{
	<#
	.SYNOPSIS

	Detects memory-only CLR (.NET) modules

	Author: Joe Desimone (@dez_)
	License: BSD 3-Clause

	# generate via: wevtutil gp Microsoft-Windows-Sysmon /getevents /getmessage

	name: Microsoft-Windows-Sysmon
	guid: 5770385f-c22a-43e0-bf4c-06f5698ffbd9
	helpLink:
	resourceFileName: C:\Windows\Sysmon.exe
	messageFileName: C:\Windows\Sysmon.exe
	message:
	channels:
	channel:

	'''This script goes along the blog post
	"Building powerful image classification models using very little data"
	from blog.keras.io.
	It uses data that can be downloaded at:
	https://www.kaggle.com/c/dogs-vs-cats/data
	In our setup, we:
	- created a data/ folder
	- created train/ and validation/ subfolders inside data/
	- created cats/ and dogs/ subfolders inside train/ and validation/
	- put the cat pictures index 0-999 in data/train/cats