silentgiant oxidizeddreams

Security Tools for AWS

I often get asked which tools are good to use for securing your AWS infrastructure so I figured I'd write a short listof some useful Security Tools for the AWS Cloud Infrastructure.

This list is not intended be something completely exhaustive, more so provide a good launching pad for someone as they dig into AWS and want to make it secure from the start.

Open Source

This section focuses on tools and services provided by the community and released as open-source.

curl commands to query imap servers

Based on https://busylog.net/telnet-imap-commands-note/

curl options

-k -- don't verify certificate (optional)
-n -- use .netrc for username and password (optional)
-X -- request to send to server

Concurrent HTTP Requests with Python3 and asyncio

http://geekgirl.io/concurrent-http-requests-with-python3-and-asyncio/

My friend who is a data scientist had wipped up a script that made lots (over 27K) of queries to the Google Places API. The problem was that it was synchronous and thus took over 2.5 hours to complete.

Given that I'm currently attending Hacker School and get to spend all day working on any coding problems that interests me, I decided to go about trying to optimise it.

I'm new to Python so had to do a bit of groundwork first to determine which course of action was best.

USE AT OWN RISK

This was only tested on a 'partial' SentinelOne installation on the High Sierra beta, where SentinelOne was never allowed to enable it's kernel extension. (Some things failed while I was messing around with OS betas.)

This script is most likely outdated.

A lot happens in 2+ years, at this point there's a good chance this script will do more harm than good. Read the comments before using!

	#!/usr/bin/env bash
	# https://developers.supportbee.com/blog/setting-up-cucumber-to-run-with-Chrome-on-Linux/
	# https://gist.github.com/curtismcmullan/7be1a8c1c841a9d8db2c
	# http://stackoverflow.com/questions/10792403/how-do-i-get-chrome-working-with-selenium-using-php-webdriver
	# http://stackoverflow.com/questions/26133486/how-to-specify-binary-path-for-remote-chromedriver-in-codeception
	# http://stackoverflow.com/questions/40262682/how-to-run-selenium-3-x-with-chrome-driver-through-terminal
	# http://askubuntu.com/questions/760085/how-do-you-install-google-chrome-on-ubuntu-16-04

	# Versions
	CHROME_DRIVER_VERSION=`curl -sS chromedriver.storage.googleapis.com/LATEST_RELEASE`

	"""This is an function to signIn users.

	Usage::
	Just create an resource and a method on the API Gateway,
	integrate the request with this lambda function via console, and test it;

	json used to test;

	{
	"username":"something",

	sudo su

	yum --enablerepo=extras install epel-release
	yum -y install patch dkms kernel-devel perl
	yum update

	#Required for kernel num 5:
	yum --enablerepo=elrepo-kernel -y install kernel-ml-devel

	reboot

	#!/bin/bash

	set -e
	REPO_DIR=~/.iam_lookup/complete-aws-iam-reference
	REPO_URL=https://github.com/widdix/complete-aws-iam-reference

	if [[ $1 == "update" ]];then
	if [[ -e $REPO_DIR ]];then
	(cd "$REPO_DIR" && git pull)
	else

	import copy
	import logging
	import os

	import boto3

	logging.basicConfig(level=os.environ.get('LOG_LEVEL', 'INFO'))

	ec2 = boto3.client('ec2')
	logger = logging.getLogger(__name__)

	#!/usr/bin/env bash

	# lists all unused AWS security groups.
	# a group is considered unused if it's not attached to any network interface.
	# requires aws-cli and jq.

	# all groups
	aws ec2 describe-security-groups \
	\| jq --raw-output '.SecurityGroups[] \| [.GroupName, .GroupId] \| @tsv' \
	\| sort > /tmp/sg.all