PowerShell Script

Author: Kedidi

README.md

@@ -1 +1 @@
-# devops-python-script
+# DevOps& SysAdmin tasks with Python, Bash, PowerShell and Go

powershell/add_registry_permission.ps1

@@ -0,0 +1,48 @@
+# Script PowerShell
+# Author: [email protected]
+# Giving service account or application access to EventLog Windows.
+
+$eventLog_key = "HKLM:\SYSTEM\CurrentControlSet\Services\EventLog"
+$security_key = "HKLM:\SYSTEM\CurrentControlSet\Services\EventLog\Security"
+$user         = "your service account name"
+
+$acl_eventLog = Get-Acl $eventLog_key
+$acl_security = Get-Acl $security_key
+
+# Create the identity
+$idRef        = [System.Security.Principal.NTAccount]($user)
+
+# Create a System.Security.AccessControl.RegistryRights object using the appropriate rights 
+$regRights    = [System.Security.AccessControl.RegistryRights]::FullControl
+
+# InheritanceFlags Enum (ContainerInherit | None | ObjectInherit)
+# https://docs.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.inheritanceflags?view=netframework-4.8
+$inhFlags     = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit 
+
+$prFlags      = [System.Security.AccessControl.PropagationFlags]::None 
+
+# AccessControlType Enum (Allow | Deny)
+# https://docs.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.accesscontroltype?view=netframework-4.8
+$acType       = [System.Security.AccessControl.AccessControlType]::Allow 
+
+
+# Create the RegistryAccessRule object using all of the objects collected
+$rule         = New-Object System.Security.AccessControl.RegistryAccessRule($idRef, $regRights, $inhFlags, $prFlags, $acType)
+
+
+# Add the RegistryAccessRule created in the previous section to the current ACL using the AddAccessRule()
+$acl_eventLog.AddAccessRule($rule)
+
+# Commit the new ACL
+$acl_eventLog | Set-Acl -Path $eventLog_key
+
+
+$acl_security.AddAccessRule($rule)
+
+$acl_security | Set-Acl -Path $security_key
+
+Write-Debug "registry access rule has been applied"
+
+# (Get-Acl $eventLog_key).Access
+
+# (Get-Acl $security_key).Access

powershell/manage_acl_registry.ps1

@@ -0,0 +1,65 @@
+# Script PowerShell
+# Author: [email protected]
+# Add & Remove ACL from Windows Registry Key via Powershell.
+
+function AddPermission($key, $user) {
+    
+    $acl = Get-Acl $key
+
+    # Create the identity
+    $idRef        = [System.Security.Principal.NTAccount]($user)
+
+    # Create a System.Security.AccessControl.RegistryRights object using the appropriate rights 
+    $regRights    = [System.Security.AccessControl.RegistryRights]::FullControl
+
+    # InheritanceFlags Enum (ContainerInherit | None | ObjectInherit)
+    # https://docs.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.inheritanceflags?view=netframework-4.8
+    $inhFlags     = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit 
+
+    $prFlags      = [System.Security.AccessControl.PropagationFlags]::None 
+
+    # AccessControlType Enum (Allow | Deny)
+    # https://docs.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.accesscontroltype?view=netframework-4.8
+    $acType       = [System.Security.AccessControl.AccessControlType]::Allow 
+
+
+    # create the RegistryAccessRule object using all of the objects collected
+    $rule         = New-Object System.Security.AccessControl.RegistryAccessRule($idRef, $regRights, $inhFlags, $prFlags, $acType)
+
+
+    # Add the RegistryAccessRule created in the previous section to the current ACL using the AddAccessRule()
+    $acl.SetAccessRule($rule)
+
+    # Commit the new ACL
+    $acl | Set-Acl -Path $key
+
+    Write-Host "`n registry access rule has been applied `n " -ForegroundColor Green
+
+    (Get-Acl $key).Access
+
+}
+
+function DeletePermission($key, $user, $domane) {
+
+    $acl = Get-Acl $key
+    Write-Output $acl.access
+
+    $rules = $acl.access | Where-Object { 
+        $_.IdentityReference -like "$domane\$user"
+    }
+
+    ForEach($rule in $rules) {
+        $acl.RemoveAccessRule($rule) | Out-Null
+        Write-Host "`n rule deleted `n" -ForegroundColor Red 
+    }
+
+    Set-ACL -Path $key -AclObject $acl
+}
+
+
+$security_key = "HKLM:\SYSTEM\CurrentControlSet\Services\EventLog\Security"
+$user         = $args[0]
+$domaine      = $domaine[1]
+
+DeletePermission $security_key $user $domaine
+AddPermission $security_key $user

python/.gitignore

@@ -0,0 +1,129 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+pip-wheel-metadata/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+.python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/

python/domain_to_ip.py

@@ -0,0 +1,28 @@
+#!/usr/bin/env python
+# Author: [email protected] 
+# Get ip address of any website using socket.
+
+
+# Import the necessary packages!
+import socket as socket 
+
+# Get my local hostname
+my_hostname = socket.gethostname()
+
+# Display my hostname
+print('Your hostname is: ' + my_hostname)
+
+# Get my local ip adress
+my_ip = socket.gethostbyname(my_hostname)
+
+# Display my ip 
+print('Your ip address is: ' + my_ip)
+
+# Input the domain name 
+host = input('Enter the domain name, example (python.org): ')
+
+# Fetch the ip
+ip = socket.gethostbyname(host)
+
+# Display the ip
+print('The ip address of ' + host + ' is: '  + ip)