marcinantkiewicz

#!/bin/bash

# default for business accounts, override with `--vault name` 
vault="Employee"

while [[ "$#" -gt 0 ]]; do
    case $1 in
        --vault)
            vault="$1"
            ;;

marcinantkiewicz

Articles about eDNS

NolaCon 2017 GBC04 EDNS Client Subnet ECS DNS CDN Magic or Secur Jim Nitterauer

archive.is not resolving under 1.1.1.1 Cloudflare DNS resolver

Commands to try

Resolving Google using two different IP address will provide two different results.

• dig +short @8.8.8.8 google.com +subnet=120.5.5.6

marcinantkiewicz

Print secret name of secrets that do not have the versionAliases attribute

gcloud secrets list --format=json | jq '.[] | select( has("versionAliases")|not)|.name'

marcinantkiewicz

#! /usr/bin/env sh

while getopts sf:p ARG
do
	case "${ARG}" in
		s) SHORT_LIST=1;;
		f) FILEPATH=${OPTARG};;
		p) PULL=1;;
		*) echo "\nReads GCP cloudbuild config, lists secrets contained in the file\n\nUsage: $(basename $0) [-s] -f filename\n      -s short output, do not display google secrets path\n      -f cloudbuild config to read\n      -p list values for the secrets from GCP, in a format ready to be exported into bash\n\n" && exit 1;
	esac

marcinantkiewicz

#! /usr/bin/env sh
set -o pipefail

FILEPATH=$1; shift;

function pull_secrets {
	MANIFEST=$1; shift;
	SECRETS=$(cat "${MANIFEST}" | jq -r '.availableSecrets.secretManager[] | .env + "=" + .versionName');

	PROJECT_ID=$(gcloud projects list --filter $(gcloud config get project) --format="value(PROJECT_NUMBER)")

marcinantkiewicz

https://github.com/Hammerspoon/hammerspoon/discussions/3379
https://www.guerrilladigital.cc/2021/02/18/no-elgato-stream-deck-no-problem-i-reprogrammed-my-akai-lpd8-to-work-as-an-obs-scene-switcher/

-- A quick hammerspoon to use the buttons on my Akai LPD8
-- which is a pretty fun little drum pad that can be had
-- for $40-50 bucks if you shop around:
-- https://images.reverb.com/image/upload/s--TanFLw05--/t_card-square/v1571420337/zzyfza1vf8wsxjynymgr.jpg


devices = hs.midi.virtualSources()

marcinantkiewicz

id: newline_search_params

info:
  name: newline_search_params
  author: f
  severity: low
  description: search param set to newline results in empty response
  tags: inputvalidation

requests:

marcinantkiewicz

// go to https://github.com/orgs/ORGNAME/repositories, open JS console
// run the below. Once done, extract with "JSON.parse(sessionStorage.repolist).forEach((e)=>{console.log(e)})"
//
// The following will covert from https to ssh endpoint link
// %s/$/.git/
// %s/https:\/\//git@/
// %s/\.com\//\.com:/
//
extract();
function extract(){

marcinantkiewicz

verify packages installed via 'curl | bash'

Spectral Ops preflight provides an easy way to add an integrity check to the pipe installed, turning them into 'curl | checksum | bash'.

The process takes has two steps:

1. calculate the checksum
2. pass the downloaded script through preflight when executing, preflight will pass the input to its output if the calculated and provided hashes match.

marcinantkiewicz

if (-Not([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")){
	Write-Host "Not admin, elvevating"
	Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs; exit
}
else {
	Write-Host "I hate PS so, so much"
	Start-Sleep -Second 5
}