Skip to content

Instantly share code, notes, and snippets.

@SwitHak
SwitHak / 20211210-TLP-WHITE_LOG4J.md
Last active March 11, 2026 09:27
BlueTeam CheatSheet * Log4Shell* | Last updated: 2021-12-20 2238 UTC

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

  • If you want to add a link, comment or send it to me
  • Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great resources

  • Royce Williams list sorted by vendors responses Royce List
  • Very detailed list NCSC-NL
  • The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List
@Neo23x0
Neo23x0 / log4j_rce_detection.md
Last active October 4, 2025 08:06
Log4j RCE CVE-2021-44228 Exploitation Detection

log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228

Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders

sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log
@karlpena
karlpena / copy_one_line_per_sec.bash
Created December 7, 2021 18:14 — forked from dlamblin/copy_one_line_per_sec.bash
Subscribing to an AWS region's status RSS feeds in slack
sleep 5; while read -r line; do clear; echo $line; echo "$line" | pbcopy; sleep 1; done < "feed_commands_for_seoul_ap-northeast-2.txt"
@kamermans
kamermans / 2020-03-15-report.txt
Last active March 16, 2020 02:29
COVID-19 Confirmed Cases by US County (from John's Hopkins Dataset)
# COVID-19 by US County
Arizona (13):
Maricopa: 2
Pinal: 2
[unknown]: 9
California (426):
Alameda: 2
Contra Costa: 9
Fresno: 1

CrUX.now() (bit.ly/crux-now)

(10min demo at the performance.now() meetup, 20 November 2019, Amsterdam)

CrUX is the Chrome User Experience Report, a public dataset of performance and UX data from real Chrome users in the field.

Quick facts:

  • Launched in November 2017
  • Monthly data dumps (second Tuesday)
@dannguyen
dannguyen / cardib-politics-talk-transcribe.md
Last active October 18, 2025 15:51
An example of how to use command-line tools to transcribe a viral video of Cardi B

Transcribing Cardi B's political speech with AWS Transcribe and command-line tools

Inspired by the following exchange on Twitter, in which someone captures and posts a valuable video onto Twitter, but doesn't have the resources to easily transcribe it for the hearing-impaired, I thought it'd be fun to try out Amazon's AWS Transcribe service to help with this problem, and to see if I could do it all from the bash command-line like a Unix dork.

Screencap of @jordanuhl's video tweet, followed by a request for a transcript

The instructions and code below show how to use command-line tools/scripting and Amazon's Transcribe service to transcribe the audio from online video. tl;dr: AWS Transcribe is a pretty amaz

@dlamblin
dlamblin / copy_one_line_per_sec.bash
Last active April 24, 2024 14:19
Subscribing to an AWS region's status RSS feeds in slack
sleep 5; while read -r line; do clear; echo $line; echo "$line" | pbcopy; sleep 1; done < "feed_commands_for_seoul_ap-northeast-2.txt"
var apiKey = '';
var monitorUrl = '';
var originUrl = '';
function monitor() {
// CRUX
var allCrux = callCrux(null, originUrl);
var desktopCrux = callCrux('DESKTOP', originUrl);
var mobileCrux = callCrux('MOBILE', originUrl);

Install MySQL

See what formula are available.

brew search mysql
==> Formulae
@foxbot
foxbot / worldcup.py
Created July 13, 2018 09:21
world cup score reporting bot for discord
import aiohttp
import asyncio
import discord
import os
CHANNEL_ID = 381870553235193857
class State:
def __init__(self, token):
self.discord = discord.http.HTTPClient()