mccabe615

 "text":"You are a senior security engineer conducting a focused security review of the changes on this branch.\n\nGIT STATUS:\n\n```\nOn branch main\nUntracked files:\n  (use \"git add <file>...\" to include in what will be committed)\n\tcacert.der\n\nnothing added to commit but untracked files present (use \"git add\" to track)\n```\n\nFILES MODIFIED:\n\n```\n\n```\n\nCOMMITS:\n\n```\n\n```\n\nDIFF CONTENT:\n\n```\n\n```\n\nReview the complete diff above. This contains all code changes in the PR.\n\n\nOBJECTIVE:\nPerform a security-focused code review to identify HIGH-CONFIDENCE security vulnerabilities that could have real exploitation potential. This is not a general code review - focus ONLY on security implications newly added by this PR. Do not comment on existing security concerns.\n\nCRITICAL INSTRUCTIONS:\n1. MINIMIZE FALSE POSITIVES: Only flag issues where you're >80% confident of actual exploitability\n2. AVOID NOISE: Skip theoretical issues, style concerns, or low-impact findings\n3. FOCUS ON IMPA

mccabe615

1) GPT-4 System Prompt:

You are ChatGPT, a large language model trained by OpenAI, based on the GPT-4 architecture. Knowledge cutoff: 2023-04 Current date: 2024-02-07

Image input capabilities: Enabled

Tools

mccabe615

# Setup Basic Lab
#use key you generated when prompted
terraform plan

#use key you generated when prompted
terraform apply

# SSH into Lab and Setup Listener
ssh ec2-user@<output IP> -i <location of your generate keys>
sudo yum install nc

mccabe615

resource "aws_instance" "example" {
  ami           = "ami-06ca3ca175f37dd66"
  instance_type = "t2.micro"


  associate_public_ip_address = true

  provisioner "remote-exec" {
    inline = [

mccabe615

/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/arn/arn.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/awserr/error.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/awserr/types.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/awsutil/path_value.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/awsutil/prettify.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/client/client.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/client/default_retryer.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/client/logger.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/config.go
/Users/guptagr/go/pkg/mod/github.com/aws/aws-sdk-go@v1.44.40/aws/context_background_1_7.go

mccabe615

ssh-rsa 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 rhodes@mdm

mccabe615

import boto3, json

print("Account: ", end = '')
print(boto3.client('sts').get_caller_identity()['Account'])

client = boto3.client('config')

print()
print("Getting non-compliant config results")
print()

mccabe615

ssh in

apt-get update

scp Nessus-8.7.2-ubuntu1110_amd64.deb root@204.48.31.211:/tmp

cd /tmp

dpkg -i Nessus-8.7.2-ubuntu1110_amd64.deb

mccabe615

#Script to delete lambdas after downloading the code
#Accepts a new line delimited file with lambda names or ARNs
#Usage: log into the AWS account on the command line
# delete-lambda.sh <filename>

while IFS="" read -r p || [ -n "$p" ]; 
do

if [ -z $1 ]; then
        echo "Error: must supply a filename with line delimited values"

mccabe615

# https://securitychops.com/2019/08/31/dev/random/one-liner-to-install-burp-cacert-into-android.html
#
curl --proxy http://127.0.0.1:8080 -o cacert.der http://burp/cert  \
&& openssl x509 -inform DER -in cacert.der -out cacert.pem \
&& cp cacert.der $(openssl x509 -inform PEM -subject_hash_old -in cacert.pem |head -1).0 \
&& adb root \
&& adb remount \
&& adb push $(openssl x509 -inform PEM -subject_hash_old -in cacert.pem |head -1).0 /sdcard/ \
&& echo -n "mv /sdcard/$(openssl x509 -inform PEM -subject_hash_old -in cacert.pem |head -1).0 /system/etc/security/cacerts/" | adb shell \
&& echo -n "chmod 644 /system/etc/security/cacerts/$(openssl x509 -inform PEM -subject_hash_old -in cacert.pem |head -1).0" | adb shell \