hide's memo
26 Feb, 2022

Despite SSL offroading on the Load balancer, Spoofing Web Applications as being accessed by HTTPS . (URLRewrite,IIS)

[japanese(日本語)]

Despite SSL offroading on the Load balancer, Spoofing Web Applications as being accessed by HTTPS .

 

 

  1. Install URLRewrite module to IIS
  2. on the URL Rewrite module setting, Add “HTTPS” on “server variables”
  3. write web.config as follows.
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.webServer>
<rewrite>
   <rules>
       <rule name="backend" patternSyntax="Wildcard">
           <match url="*" />
           <serverVariables>
               <set name="HTTPS" value="on" />
               </serverVariables>
           <action type="None" />
       </rule>
   </rules>
</rewrite>
</system.webServer>
</configuration>
20 Feb, 2022

apache+perl+cgi on termux

[japanese(日本語)]

 

1.Install temrux

Install termux on PlayStore.

 

2.install apache,perl

apt update
apt upgrade
apt install apache2
apt install perl

 

3. modify httpd.conf

file：/data/data/com.termux/files/usr/etc/apache2/httpd.conf

<Directory /data/data/com.termux/files/usr/lib/cgi-bin>
</Directory>

Add options to the  above section as follows.

Options +ExecCGI

 

uncomment the following line.

AddHandler cgi-script .cgi

 

modify httpd.conf  to load mod_cgi module as follows.

<IfModule mpm_prefork_module>
    #LoadModle cgi_module libexec/apache2/mod_cgi.so
</IfModule>

↓

#<IfModule mpm_prefork_module>
    LoadModle cgi_module libexec/apache2/mod_cgi.so
#</IfModule>

 

4. confirmation (confirm to work printenv)

4.1. add execute permisision

chmod ugo+x /data/data/com.termux/files/usr/lib/cgi-bin/printenv

4.2.add the line as follows into printenv

#!/usr/bn/perl

 

5. start apache

apachectl

 

6. access to the local web server on android as follows.

http://localhost:8080/

http://localhost:8080/cgi-bin/printenv

 

 

 

 

 

 

20 Feb, 2022

Create Web Server Filter by apache module

[japanese(日本語)]

You can controll Web server (IIS, apache) with adding module as follows.

 

This is a exsample that display  “overtime” when it was accessed except from 8:00 to 18:00.

 

1. Environment

OS: CentOS7.7

apache: 2.4.6

 

2. Install apxs

yum install httpd-devel

 

3. Create template

cd /tmp/work/

apxs -g -n sample01

 

4. modify source code.

/* The sample content handler */
static int sample01_handler(request_rec *r)
{
  time_t timer;
  struct tm *t_st;
  char buff[256];
  time(&timer);
  t_st = localtime(&timer);

  sprintf(buff,"%02d%02d", t_st->tm_hour, t_st->tm_min);
  if(strcmp(buff,"0800")>=0 && (strcmp(buff,"1800")<=0)){
    return DECLINED;
  }
  else {
    r->content_type = "text/html";
    if(!r->header_only){
      ap_rputs("<html><body>overtime</body></html>", r);
    }
    return OK;
  }
}

static void sample01_register_hooks(apr_pool_t *p)
{
  ap_hook_handler(sample01_handler, NULL, NULL, APR_HOOK_FIRST);
}

 

5. Make

apxs -c mod_sample01.c

 

6. copy module to apache modules directory.

cp .libs/mod_sample01.so  /etc/httpd/modules/

 

7. modify apache config.  order to load the module at first.

#                                                                                                                                   
# Dynamic Shared Object (DSO) Support                                                                                               
#                                                                                                                                   
# To be able to use the functionality of a module which was built as a DSO you                                                      
# have to place corresponding `LoadModule' lines at this location so the                                                            
# directives contained in it are actually available _before_ they are used.                                                         
# Statically compiled modules (those listed by `httpd -l') do not need                                                              
# to be loaded here.                                                                                                                
#                                                                                                                                   
# Example:                                                                                                                          
# LoadModule foo_module modules/mod_foo.so                                                                                          
#                                                                                                                                   

LoadModule sample01_module modules/mod_sample01.so                                                                                 
Include conf.modules.d/*.conf

 

8. restart apache

19 Feb, 2022

Get data from ServiceNow using curl

[japanese(日本語)]

1. Using userid and password

#!/bin/sh

MY_INSTANCE="**** your instance ****"
CLIENT_ID="**** your instance ****"
CLIENT_SECRET="**** your instance ****"
USER="** your userid **"
PASSWD="*** your password ***" # !!warning. you might need to escape it.

#----------------------------------------------
# Get Access token from Id,Passwd
#----------------------------------------------
RESULT=`curl -X POST https://$MY_INSTANCE.service-now.com/oauth_token.do -H "Content-type: application/x-www-form-urlencoded" -d "grant_type=password" -d "client_id=$CLIENT_ID" -d "client_secret=$CLIENT_SECRET" -d "username=$USER" -d "password=$PASSWD"`

ACCESS=`echo $RESULT | awk 'BEGIN{FS="access_token\":"}{print $2}' | awk 'BEGIN{FS=","}{print $1}'| sed -s 's/\"//g'`


#----------------------------------------------
#Get Incident with using Access token
#----------------------------------------------
curl -s "https://$MY_INSTANCE.service-now.com/api/now/table/incident?sysparam_query=&sysparam_view=&sysparam_fields=sys_id%2Cshort_description" -H "Authorization: Bearer $ACCESS" -H "Content-Type: application/json"

 

2. Using refresh token

#!/bin/sh

MY_INSTANCE="**** your instance ****"
CLIENT_ID="**** your client id ****"
CLIENT_SECRET="**** your client secret"
REFRESH_TOKEN="****your refresh token ****"

#----------------------------------------------
# Get Access token from Refresh token.
#----------------------------------------------
RESULT=`curl -X POST https://$MY_INSTANCE.service-now.com/oauth_token.do -d "grant_type=refresh_token" -d "scope=useraccount" -d "client_id=$CLIENT_ID" -d "client_secret=$CLIENT_SECRET" -d "refresh_token=$REFRESH_TOKEN"`
ACCESS=`echo $RESULT | awk 'BEGIN{FS="access_token\":"}{print $2}' | awk 'BEGIN{FS=","}{print $1}'| sed -s 's/\"//g'`

#----------------------------------------------
#Get Incident with using Access token.
#----------------------------------------------
curl -s "https://$MY_INSTANCE.service-now.com/api/now/table/incident?sysparam_query=&sysparam_view=&sysparam_fields=sys_id%2Cshort_description" -H "Authorization: Bearer $ACCESS" -H "Content-Type: application/json"


 


3. How to get a refresh token from your servicenow instance.


see the link below.


How to get a refresh token from servicenow


 

		
			

	 
		

	


							

												

								

	

				
		
19 Feb, 2022

	

	

		
		

			
Get data from Salesforce using curl Salseforce
[japanese(日本語)]


1.Using refreshtoken


#!/bin/sh

MY_INSTANCE="*******"
CLIENT_ID="*** your client id ***"
CLIENT_SECRET="*** your client secret ***"
REFRESH_TOKEN="*** your refresh token ***"

#----------------------------------------------
# Get Access token from Refresh token.
#----------------------------------------------
RESULT=`curl -X POST https://$MY_INSTANCE.my.salesforce.com/services/oauth2/token -d "grant_type=refresh_token" -d "client_id=$CLIENT_ID" -d "client_secret=$CLIENT_SECRET" -d "refresh_token=$REFRESH_TOKEN"`

ACCESS=`echo $RESULT | awk 'BEGIN{FS="access_token\":"}{print $2}' |awk 'BEGIN{FS=","}{print $1}' | sed -s 's/\"//g'`

#----------------------------------------------
#Get data using Access token
#----------------------------------------------
curl -s https://$MY_INSTANCE.my.salesforce.com/services/data/v52.0/sobjects/Account -H "Authorization: Bearer $ACCESS" -H "Content-type: application/json"



 


How to get a Refreshtoken. (Refresh token is valid for 365 days) Salesforce.

		
			

	 
		

	


							

												

								

	

				
		
19 Feb, 2022

	

	

		
		

			
port forwarding on linux
[japanese(日本語)]


this is a sample of  port forwarding on linux.


 




1.add forwarding settings.


# sysctl -w net.ipv4.ip_forward=1
# echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf


2.add forwarding parameter.


#iptables -t nat -A PREROUTING -m tcp -p tcp --dst WAITING_ADDR --dport WAITING_PORT -j DNAT --to-destination DET_ADDR:DEST_PORT
#iptables -t nat -A POSTROUTING -m tcp -p tcp --dst DEST_ADDR --dport DEST_PORT -j SNAT --to-source WAITING_ADDR

		
			

	 
		

	


							

												

								

	

				
		
19 Feb, 2022

	

	

		
		

			
port forwarding on Windows
[japanese(日本語)]


port forwarding on windows.




1.input commands as follows


netsh interface portproxy add v4tov4 listenport=[listen port] listenaddr=[My address(not 127.0.0.1)] connectport=[destination port] connectaddress=[destination address]




2. 上記定義の削除


netsh interface portproxy delete v4tov4 listenport=[listen port] listenaddr=[My address(not 127.0.0.1)

		
			

	 
		

	


							

												

								

	

				
		
19 Feb, 2022

	

	

		
		

			
Using date string on a file
[japanese(日本語)]


This is a sample to attach the date string on your file.


Set DD=%date:~0,4%%date:~5,2%%date:~8,2%
set time2=%time: =0% 
Set TT=%time2:~0,2%%time2:~3,2%%time2:~6,2%
move logerr.log logerr_%DD%_%TT%.log
move logstd.log logstd_%DD%_%TT%.log

		
			

	 
		

	


							

												

															

												

								

	

				
		
19 Feb, 2022

	

	

		
		

			
sample shell script to loop between the date ±1 specified by argument
[japanese(日本語)]


This is sample shell script to loop between the date ±1 specified by argument.


#!/bin/sh
START=$1
END=$2


START_1DAY_BEFORE=`date '+%Y%m%d' -d "1 days ago ${START}"`
END_1DAY_AFTER=`date '+%Y%m%d' -d "-1 days ago ${END}"`


echo $START_1DAY_BEFORE

for j in {0..10000}; do
    TARGET_YYYYMMDD=`date '+%Y%m%d' -d "-$j days ago ${START_1DAY_BEFORE}"`
    echo ${TARGET_YYYYMMDD}

    if [ ${TARGET_YYYYMMDD} -gt ${END_1DAY_AFTER} ]; then
       break
    fi
done