Recently I needed to generate a list of all subnets across every AWS account in an organization. I’ve documented an easy way to achieve this Prerequisites Set up your aws config for multiple profiles (one for each account) [default] region=us-east-1…
Out of the box the aws s3 application is suppose to limit bandwidth by setting the “s3.max_bandwidth” option. Example: aws configure set default.s3.max_bandwidth 5MB/s Problem aws s3 sync is using more bandwidth than the ~/.aws/config file has specified. Replication Steps…
Recently I needed to confirm if an s3 bucket was indeed publicly writable (by trying to write to it from a different account). I decided to document how to confirm this for your organization. Prerequisites AWS CLI installed Two AWS…
This post covers how to install the telnet client from the command prompt on Windows 10. Run the following command: pkgmgr /iu:”TelnetClient”
I wrote a quick shell script to cleanup old Jenkins builds. This will delete any build older than 30 days. #!/bin/bash # jenkins_delete_old_builds.sh # Author: Steve Stonebraker # Date: 8/5/2019 # Description: Deletes any build older than 30 days #…
I came across a great article on detecting windows lateral movement and wanted to share it with everyone: CERT-EU Security Whitepaper 17-002 “Detecting Lateral Movements in Windows Infrastructure”
To install Google Chrome using Powershell (headless install) run the following command from and Administrative PowerShell Prompt: $LocalTempDir = $env:TEMP; $ChromeInstaller = “ChromeInstaller.exe”; (new-object System.Net.WebClient).DownloadFile(”, “$LocalTempDir\$ChromeInstaller”); & “$LocalTempDir\$ChromeInstaller” /silent /install; $Process2Monitor = “ChromeInstaller”; Do { $ProcessesFound = Get-Process | ?{$Process2Monitor…
Column Selection – Sublime Text 3 Selecting an entire column of text using Sublime Text 3 on a Mac can be frustrating. Here is how to do it the easy way! Legend ⌘ – Command ⇧ – Shift ⌃ -…
Password Spraying Finding the source of Windows password spraying attacks can be daunting as the Event log does not provide the source IP of the machine making the calls. Windows Event Logs Ideally all of your Windows Event logs from…
Problem You are using the MISP cloud base image and receive error “Error: an internal error has occurred” when trying to access diagnostics from “administration -> server settings -> diagnostics” Solution As root run the following commands pear install …
