First version of subdomain takeover runbook

This commit is contained in:
Jurjen Ladenius
2021-09-01 16:25:01 +02:00
parent ec9d1d34ae
commit 3a348fc8b0
11 changed files with 810 additions and 187 deletions

View File

@@ -5,27 +5,29 @@
#Import-Module .\Output\Effectory.Dns\0.0.1\Effectory.Dns.psm1 -Force
#Import-Module .\build\Effectory.Dns\0.0.1\Effectory.Dns.psm1 -Force
Start-Transcript -Path .\output.txt
Import-Module .\Effectory.Dns -Force
# $subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
$connectionString = "DefaultEndpointsProtocol=https;AccountName=runbookseffectory;AccountKey=PIyewEcppMcm8imMhpUUOgrOUbWyFPK0o8PfdwPnEiNvEQqUvTDzjuV4W18z2sBuRzspGs5pV/Fz96umfePviw==;EndpointSuffix=core.windows.net"
# foreach ($subscription in $subscriptions)
# {
# [Object[]]$result = @()
# $items = Get-EffectoryDomainResources -subscriptionId $subscription.Id
# $result = $result + $items
# }
$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
# $result
[EffectoryDomainNameCheck[]]$effectoryResources = @()
$effectoryResources = Get-EffectoryDomainResources -subscriptionId "a134faf1-7a89-4f2c-8389-06d00bd5e2a7"
Set-BlobEffectoryDomainResources -effectoryResources $effectoryResources -connectionString "DefaultEndpointsProtocol=https;AccountName=runbookseffectory;AccountKey=PIyewEcppMcm8imMhpUUOgrOUbWyFPK0o8PfdwPnEiNvEQqUvTDzjuV4W18z2sBuRzspGs5pV/Fz96umfePviw==;EndpointSuffix=core.windows.net"
foreach ($subscription in $subscriptions)
{
$items = Get-EffectoryDomainResources -subscriptionId $subscription.Id -effectoryDomainPattern "*.effectory.com"
$effectoryResources = $effectoryResources + $items
}
# $context = New-AzStorageContext -ConnectionString "DefaultEndpointsProtocol=https;AccountName=runbookseffectory;AccountKey=PIyewEcppMcm8imMhpUUOgrOUbWyFPK0o8PfdwPnEiNvEQqUvTDzjuV4W18z2sBuRzspGs5pV/Fz96umfePviw==;EndpointSuffix=core.windows.net"
# Get-AzTrafficManagerProfile | Export-Csv "$Env:temp/test4.csv"
# Set-AzStorageBlobContent -Context $context -Container "dangling-dns" -File "$Env:temp/test4.csv" -Blob "test2.csv" -Force >$null
#$effectoryResources = Get-EffectoryDomainResources -subscriptionId "a134faf1-7a89-4f2c-8389-06d00bd5e2a7" -effectoryDomainPattern "*.effectory.com"
$effectoryResourcesPrevious = Get-BlobEffectoryDomainResources -connectionString $connectionString
$result = VerifyEffectoryDomainResources -effectoryDomainPattern "*.effectory.com" -effectoryResources $effectoryResources -effectoryResourcesPrevious $effectoryResourcesPrevious
Set-BlobEffectoryDomainResources -connectionString $connectionString -effectoryResources $effectoryResources
# Get-AzStorageBlobContent -Context $context -Container "dangling-dns" -Blob "test2.csv" -Destination "$Env:temp/test3.csv" -Force
# $foo = Import-CSV "$Env:temp/test3.csv"
if ($result -eq $true) {
Write-Error ("FOUND ERRORS!")
}
# $foo
Stop-Transcript