Skip to content

Instantly share code, notes, and snippets.

@khantext
khantext / checkmk.py
Created August 12, 2022 15:03 — forked from rqu1/checkmk.py
check if a PAN firewall is using the default master key when globalprotect is enabled
from hashlib import md5, sha1
from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
from cryptography.hazmat.backends import default_backend
from base64 import b64encode, b64decode
import sys, time
import requests
DEFAULT_MASTERKEY=b'p1a2l3o4a5l6t7o8'
class PanCrypt():
@khantext
khantext / r7ivm_sql_queries
Last active March 19, 2020 14:07
Rapid7 InsightVM Security Console database SQL queries
/*VULNERABILITIES*/
/*Select all vulnerabilities which affect at least one asset in your environment, returning all of the risk/severity scoring details.*/
SELECT fa.vulnerability_id, fa.affected_assets, fa.affected_sites, fa.vulnerability_instances, fa.first_discovered, fa.most_recently_discovered, dv.description, dv.nexpose_id, dv.title, dv.riskscore, dv.severity_score, dv.severity, dv.cvss_score, dv.cvss_v2_score, dv.cvss_v3_score
FROM fact_vulnerability fa
LEFT JOIN dim_vulnerability dv ON fa.vulnerability_id=dv.vulnerability_id
WHERE fa.affected_assets > 0
/*ASSETS*/
/*Select all non-blank hostnames currently in the dim_asset table, including their IP addresses.*/
SELECT da.ip_address, da.host_name