Skip to content

Instantly share code, notes, and snippets.

View brianlam38's full-sized avatar
💭
"><img src=javascript:alert(1)>

Brian Lam brianlam38

💭
"><img src=javascript:alert(1)>
90 followers · 106 following
View GitHub Profile
@brianlam38
brianlam38 / security-group-cleanup.py
Created January 8, 2019 06:56 — forked from miketheman/security-group-cleanup.py
AWS EC2 Unused Security Group cleanup
#!/usr/bin/env python
import sys
import boto
import pprint
del_flag = ''
if len(sys.argv) > 1:
del_flag = sys.argv[1]
@brianlam38
brianlam38 / cloud_metadata.txt
Created December 5, 2018 23:07 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
@brianlam38
brianlam38 / README.md
Created September 13, 2018 04:56 — forked from FrankSpierings/README.md
Linux Container Escapes and Hardening
@brianlam38
brianlam38 / boto3_hands_on.md
Created August 24, 2018 00:28 — forked from iMilnb/boto3_hands_on.md
Programmatically manipulate AWS resources with boto3 - a quick hands on

boto3 quick hands-on

This documentation aims at being a quick-straight-to-the-point-hands-on AWS resources manipulation with [boto3][0].

First of all, you'll need to install [boto3][0]. Installing it along with [awscli][1] is probably a good idea as

  • [awscli][1] is boto-based
  • [awscli][1] usage is really close to boto's
@brianlam38
brianlam38 / xxe.xml
Created March 21, 2018 00:18
comp6443
lol