Nicolas Béguier nbeguier
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| - ignore-paths: | |
| - test | |
| ignore-rules: | |
| - android_kotlin_md5 | |
| - android_kotlin_insecure_random | |
| - android_kotlin_hardcoded | |
| - android_kotlin_hiddenui | |
| - android_hidden_ui |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Nginx TLS security configuration | |
| # Updated: 2026-05-02 | |
| # Baseline: Mozilla SSL Configuration Generator 6.0, Intermediate | |
| server { | |
| listen 80; | |
| listen [::]:80; | |
| server_name __REDACTED__; | |
| return 301 https://$host$request_uri; | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ shhgit -local . -config-path ~/some_directory/shhgit/ | |
| _ _ _ _ | |
| | | | | (_) | | |
| ___| |__ | |__ __ _ _| |_ | |
| / __| '_ \| '_ \ / _` | | __| | |
| \__ \ | | | | | | (_| | | |_ | |
| |___/_| |_|_| |_|\__, |_|\__| | |
| __/ | | |
| v0.4 |___/ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Observe process memory dump | |
| function volatility_screenshot { | |
| OS=$1 | |
| PID=$2 | |
| if ! [ -f "/tmp/${PID}.memdump/${PID}.data" ]; then | |
| mkdir -p "/tmp/${PID}.memdump/" | |
| if [ "$OS" == "windows" ]; then | |
| volatility -f dump.raw --profile=Win7SP1x86_23418 memdump -p "${PID}" --dump-dir "/tmp/${PID}.memdump/" | |
| mv "/tmp/${PID}.memdump/${PID}.dmp" "/tmp/${PID}.memdump/${PID}.data" | |
| elif [ "$OS" == "mac" ]; then |
nbeguier
/ aws_tower_allow_all_from_public.json
Created
November 30, 2020 14:57
AWS Tower - Rule to detect all port
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "message": { | |
| "text": "[{name}] Allow connection to all port from public network ({source}=>{ports})", | |
| "args": { | |
| "name": { | |
| "type": "variable", | |
| "variable": "sg_name" | |
| }, | |
| "source": { | |
| "type": "variable", |
nbeguier
/ aws_tower_deprecated_mysql.json
Created
November 30, 2020 14:47
AWS Tower - Rule to detect deprecated version of Mysql
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "message": { | |
| "text": "Deprecated mysql engine version ({current_version})", | |
| "args": { | |
| "current_version": { | |
| "type": "dict", | |
| "key": "Engine", | |
| "variable": "metadata" | |
| } | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ ./aws_tower_cli.py scan my-aws-account-profile --min-severity medium --brief | |
| { | |
| "vpc-1234567980": { | |
| "main-vpc-private-lb": [ | |
| { | |
| "ELBV2: internal-patrowl-manager-lb-20201127.eu-west-1.elb.amazonaws.com": [ | |
| "medium: DnsRecord: patrowl.my-private-domain.com." | |
| ] | |
| } | |
| ], |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ ./aws_tower_cli.py scan my-aws-account-profile | |
| { | |
| "vpc-1234567980": { | |
| "main-vpc-intra": {}, | |
| "main-vpc-private": { | |
| "EC2": [ | |
| { | |
| "Name": "patrowl-manager", | |
| "PrivateIpAddress": "10.10.1.49", | |
| "PubliclyAccessible": false, |
nbeguier
/ aws_tower_cli.discover.2.sh
Created
November 27, 2020 15:38
AWS Tower - discover public verbose
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ ./aws_tower_cli.py discover my-aws-account-profile --public-only --verbose | |
| { | |
| "vpc-1234567980": { | |
| "main-vpc-intra": {}, | |
| "main-vpc-private": {}, | |
| "main-vpc-private-lb": {}, | |
| "main-vpc-public": { | |
| "EC2": [ | |
| { | |
| "Name": "custom-nginx", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ ./aws_tower_cli.py discover my-aws-account-profile | |
| { | |
| "vpc-1234567980": { | |
| "main-vpc-intra": {}, | |
| "main-vpc-private": { | |
| "EC2": [ | |
| { | |
| "Name": "patrowl-manager", | |
| "PrivateIpAddress": "10.10.1.49", | |
| "PubliclyAccessible": false |
NewerOlder