Clik here to view.
Lack of Visibility in Web Applications
Risks I see this as an indirect risk to the asset of web application ownership (That’s the assumption that you will always own your web application). Not being able to introspect your application at...
View ArticleClik here to view.
Risks and Countermeasures to the Management of Application Secrets
A sample of the Web Applications chapter in my new book “Holistic Info-Sec for Web Developers“: Risks Passwords and other secrets for things like data-stores, syslog servers, monitoring services, email...
View ArticleClik here to view.
TL-WN722N on Kali VM on Linux Host
The following is the process I found to set-up the pass-through of the very common USB TP-LINK TL-WN722N Wifi adapter (which is known to work well with Linux) to a Virtual Host Kali Linux 1.1.0 (same...
View ArticleClik here to view.
Keeping Your NodeJS Web App Running on Production Linux
All the following offerings that I’ve evaluated target different scenarios. I’ve listed the pros and cons for each of them and where I think they fit into a potential solution to monitor your web...
View ArticleClik here to view.
Evaluation of Host Intrusion Detection Systems (HIDS)
Followed up with a test deployment and drive. The best time to install a HIDS is on a fresh install before you open the host up to the internet or even your LAN if it’s corporate. Of course if you...
View ArticleClik here to view.
Web Server Log Management
As part of the ongoing work around preparing a Debian web server to host applications accessible from the WWW I performed some research, analysis, made decisions along the way and implemented a first...
View ArticleClik here to view.
Keeping Your Linux Server/s In Time With Your Router
Your NTP Server With this set-up, we’ve got one-to-many Linux servers in a network that all want to be synced with the same up-stream Network Time Protocol (NTP) server/s that your router (or what ever...
View ArticleClik here to view.
GnuPG Key-Pair with Sub-Keys
There are quite a few other posts on this topic, but my set-up hasn’t been exactly the same as any I found, so I found myself using quite a few resources to achieve exactly what I wanted. Synopsis For...
View ArticleClik here to view.
Installation and Hardening of Debian Web Server
These are the steps I took to set-up and harden a Debian web server before being placed into a DMZ and undergoing additional hardening before opening the port from the WWW to it. Most of the steps...
View ArticleClik here to view.
Up and Running with Kali Linux and Friends
When it comes to measuring the security posture of an application or network, the best defence against an attacker is offence. What does that mean? It means your best defence is to have someone with...
View ArticleClik here to view.
Up and Running with Express on Node.js … and friends
This is a result of a lot of trial and error, reading, notes taken, advice from more knowledgeable people than myself over a period of a few months in my spare time. This is the basis of a web site I’m...
View ArticleClik here to view.
Running Wireshark as non-root user
As part of my journey with Node.js I decided I wanted to see exactly what was happening on the wire. I decided to use Burp Suite as the Http proxy interceptor and Wireshark as the network sniffer (not...
View ArticleClik here to view.
Setup of Chromium, Burp Suite, Node.js to view HTTP on the wire
As part of my Node.js development I really wanted to see what was going over the wire from chromium-browser to my Node.js web apps. I have node.js installed globaly, express installed locally, a very...
View ArticleClik here to view.
Erasing data from your drives
Disclaimer I take no responsibility for any damage caused by following any of the directions in this post. These tools and methods are destructive and likely to destroy your data or worse. Deleting...
View ArticleClik here to view.
How to Increase Software Developer Productivity
Is your organisation: Wanting to get more out of your Software Developers? Wanting to increase RoI? Spending too much money fixing bugs? Development team not releasing business value fast enough? Maybe...
View ArticleClik here to view.
Establishing your SSH Server’s Key Fingerprint
When you connect to a remote host via SSH that you haven’t established a trust relationship with before, you’re going to be told that the authenticity of the host your attempting to connect to can’t be...
View ArticleClik here to view.
Painless git diff
I’ve been using Node.js quite a bit lately and decided it was time to start using Git for my projects. I’m used to using Mercurial (Hg) for DVCS, but have only used it on Windows and a little on Linux...
View ArticleClik here to view.
A Decent Console for Windows
On *nix we’re kind of spoilt when it comes to the CLI experience. The console I use most in a GUI environment is the great terminator. No, not that one. This one… Multi tab, split screen, transparency,...
View ArticleClik here to view.
copying with scp
I was having some trouble today copying a file (1.5GB .iso) from a notebook to a file server. The notebook I was using was running Linux Ubuntu. The server FreeBSD. I was trying to copy this file using...
View ArticleClik here to view.
Bare-metal Hypervisor Setup Evaluation
The views expressed in this post are my own and don’t reflect the views of my employer. Recently I had the opportunity for work, to carry out some research on what’s in the market in regards to...
View Article
![SennaRin – ADRENA (2024-05-15) [FLAC 24bit/48kHz]](http://getimg.link/images/2024/05/21/7446422.jpg)
