/braker-scripts

Scripts written by Steve Stonebraker for Administration

Primary LanguageShell

braker-scripts

Scripts written by Steve Stonebraker for Administration & Simluations

==============

add_current_shell_and_path_to_crontab.sh

Will add the ${PATH} of the current shell to the crontab

ddos_ntp.pl

NTP Reflection and Amplification attack simlator

Requires:

  • Net::RawIP
  • System capable of sending raw packets

generate_lambdaguard_report_all_profiles.sh

Generates a lambdaguard report for all profiles listed in ~/.aws/config

listmodules.pl

Displays currently installed perl modules

install_mod_security_2.7.4.sh

This has only been tested on an Ubuntu precise (12.04) server. This script will:

  • Download the source code for Modsecurity version 2.7.4
  • Ensure all required prerequisites are installed
  • Install ModSecurity to /opt/modsecurity
  • Create the recommended folder structure (from the ModSecurity book) under /opt/modsecurity
  • Enable the relevant Apache Modules

install_mod_security_audit_console.sh

Install the jwall audit console for modsecurity on an Ubuntu 12.04 machine

cidr_to_ipset.sh

Converts a text file with a list of CIDR ip blocks in to a saved hashset.

Sample lists of CIDR blocks available for US, Great Britain, Spain, Italy, and France

install_ipset_rules.sh

Performs the following:

  1. Download your compressed rule hashes from an s3 bucket
  2. Decompress
  3. Install ipset
  4. Add rules
  5. Modify iptables to use the new rules

ubuntu_change_hostname.sh

Easily change your hostname on any debian based distribution

Security information and event management

  • install_aws_elasticsearch_cluster_node.sh
  • upgrade_logstash_to_1.1.13.sh
  • install_kibana3.sh

aws_fix_dual_nic_routing.sh

  • Add two network interface in ubuntu 12.04 in aws and route traffic properly to either ip
  • Scope: Amazon EC2 Attach Elastic Network Interface (VPC)

# Automates this manual process (from 4-10)

  1. Start AMI in VPC
  2. After boot attach secondary nic
  3. Ensure both nic's have an external IP associated with it
  4. configure new /etc/network/interfaces
  5. restart networking
  6. stop network-manger
  7. ssh back in (ssh will flip to the other elastic ip)
  8. add new ip route
  9. flush ip route table
  10. restart networking

More details at http://brakertech.com/aws-add-two-network-interfaces-in-ubuntu-12-04-precise/

shred_self.sh

Example script will shred itself once ran

shred_self_and_dir.sh

Example script will shred itself and the current directory (if empty)